VirtualBox

Ticket #19175: VBoxHardening.log

File VBoxHardening.log, 399.9 KB (added by amars404, 5 years ago)
Line 
11a50.fa8: Log file opened: 6.1.0r135406 g_hStartupLog=0000000000000070 g_uNtVerCombined=0xa0456300
21a50.fa8: \SystemRoot\System32\ntdll.dll:
31a50.fa8: CreationTime: 2019-12-15T07:28:50.505242600Z
41a50.fa8: LastWriteTime: 2019-12-15T07:28:50.541288600Z
51a50.fa8: ChangeTime: 2019-12-15T08:12:29.093807100Z
61a50.fa8: FileAttributes: 0x20
71a50.fa8: Size: 0x1e70e0
81a50.fa8: NT Headers: 0xe0
91a50.fa8: Timestamp: 0x1f1a0210
101a50.fa8: Machine: 0x8664 - amd64
111a50.fa8: Timestamp: 0x1f1a0210
121a50.fa8: Image Version: 10.0
131a50.fa8: SizeOfImage: 0x1ed000 (2019328)
141a50.fa8: Resource Dir: 0x17d000 LB 0x6eb48
151a50.fa8: [Version info resource found at 0xd8! (ID/Name: 0x1; SubID/SubName: 0x409)]
161a50.fa8: [Raw version resource data: 0x17d0f0 LB 0x380, codepage 0x0 (reserved 0x0)]
171a50.fa8: ProductName: Microsoft® Windows® Operating System
181a50.fa8: ProductVersion: 10.0.17763.831
191a50.fa8: FileVersion: 10.0.17763.831 (WinBuild.160101.0800)
201a50.fa8: FileDescription: NT Layer DLL
211a50.fa8: \SystemRoot\System32\kernel32.dll:
221a50.fa8: CreationTime: 2019-05-28T11:04:46.271253500Z
231a50.fa8: LastWriteTime: 2019-05-28T11:04:46.348978600Z
241a50.fa8: ChangeTime: 2019-12-15T07:29:15.996478700Z
251a50.fa8: FileAttributes: 0x20
261a50.fa8: Size: 0xb12c0
271a50.fa8: NT Headers: 0xe8
281a50.fa8: Timestamp: 0x250a0626
291a50.fa8: Machine: 0x8664 - amd64
301a50.fa8: Timestamp: 0x250a0626
311a50.fa8: Image Version: 10.0
321a50.fa8: SizeOfImage: 0xb3000 (733184)
331a50.fa8: Resource Dir: 0xb1000 LB 0x520
341a50.fa8: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
351a50.fa8: [Raw version resource data: 0xb10b0 LB 0x3a4, codepage 0x0 (reserved 0x0)]
361a50.fa8: ProductName: Microsoft® Windows® Operating System
371a50.fa8: ProductVersion: 10.0.17763.475
381a50.fa8: FileVersion: 10.0.17763.475 (WinBuild.160101.0800)
391a50.fa8: FileDescription: Windows NT BASE API Client DLL
401a50.fa8: \SystemRoot\System32\KernelBase.dll:
411a50.fa8: CreationTime: 2019-12-15T07:28:50.303290400Z
421a50.fa8: LastWriteTime: 2019-12-15T07:28:50.351290500Z
431a50.fa8: ChangeTime: 2019-12-15T08:12:28.622544300Z
441a50.fa8: FileAttributes: 0x20
451a50.fa8: Size: 0x2931f8
461a50.fa8: NT Headers: 0xf8
471a50.fa8: Timestamp: 0xfb6790ac
481a50.fa8: Machine: 0x8664 - amd64
491a50.fa8: Timestamp: 0xfb6790ac
501a50.fa8: Image Version: 10.0
511a50.fa8: SizeOfImage: 0x293000 (2699264)
521a50.fa8: Resource Dir: 0x26f000 LB 0x548
531a50.fa8: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
541a50.fa8: [Raw version resource data: 0x26f0b0 LB 0x3bc, codepage 0x0 (reserved 0x0)]
551a50.fa8: ProductName: Microsoft® Windows® Operating System
561a50.fa8: ProductVersion: 10.0.17763.914
571a50.fa8: FileVersion: 10.0.17763.914 (WinBuild.160101.0800)
581a50.fa8: FileDescription: Windows NT BASE API Client DLL
591a50.fa8: \SystemRoot\System32\apisetschema.dll:
601a50.fa8: CreationTime: 2018-09-15T07:28:25.403122600Z
611a50.fa8: LastWriteTime: 2018-09-15T07:28:25.403122600Z
621a50.fa8: ChangeTime: 2019-12-14T05:43:41.472002600Z
631a50.fa8: FileAttributes: 0x80
641a50.fa8: Size: 0x1c738
651a50.fa8: NT Headers: 0xd0
661a50.fa8: Timestamp: 0x33775897
671a50.fa8: Machine: 0x8664 - amd64
681a50.fa8: Timestamp: 0x33775897
691a50.fa8: Image Version: 10.0
701a50.fa8: SizeOfImage: 0x1d000 (118784)
711a50.fa8: Resource Dir: 0x1c000 LB 0x408
721a50.fa8: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
731a50.fa8: [Raw version resource data: 0x1c060 LB 0x3a8, codepage 0x0 (reserved 0x0)]
741a50.fa8: ProductName: Microsoft® Windows® Operating System
751a50.fa8: ProductVersion: 10.0.17763.1
761a50.fa8: FileVersion: 10.0.17763.1 (WinBuild.160101.0800)
771a50.fa8: FileDescription: ApiSet Schema DLL
781a50.fa8: NtOpenDirectoryObject failed on \Driver: 0xc0000022
791a50.fa8: supR3HardenedWinFindAdversaries: 0x0
801a50.fa8: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox'
811a50.fa8: Calling main()
821a50.fa8: SUPR3HardenedMain: pszProgName=VirtualBoxVM fFlags=0x2
831a50.fa8: supR3HardenedWinInitAppBin(0x2): '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox'
841a50.fa8: SUPR3HardenedMain: Respawn #1
851a50.fa8: System32: \Device\HarddiskVolume3\Windows\System32
861a50.fa8: WinSxS: \Device\HarddiskVolume3\Windows\WinSxS
871a50.fa8: KnownDllPath: C:\WINDOWS\System32
881a50.fa8: supR3HardenedWinInit: Performing a limited self purification...
891a50.fa8: supHardNtVpScanVirtualMemory: enmKind=SELF_PURIFICATION
901a50.fa8: *0000000000000000-000000000036ffff 0x0001/0x0000 0x0000000
911a50.fa8: *0000000000370000-000000000037ffff 0x0004/0x0004 0x0040000
921a50.fa8: *0000000000380000-000000000038efff 0x0004/0x0004 0x0020000
931a50.fa8: 000000000038f000-000000000038ffff 0x0000/0x0004 0x0020000
941a50.fa8: *0000000000390000-00000000003a9fff 0x0002/0x0002 0x0040000
951a50.fa8: 00000000003aa000-00000000003affff 0x0001/0x0000 0x0000000
961a50.fa8: *00000000003b0000-00000000003b3fff 0x0002/0x0002 0x0040000
971a50.fa8: 00000000003b4000-00000000003bffff 0x0001/0x0000 0x0000000
981a50.fa8: *00000000003c0000-00000000003c1fff 0x0004/0x0004 0x0020000
991a50.fa8: 00000000003c2000-00000000003fffff 0x0001/0x0000 0x0000000
1001a50.fa8: *0000000000400000-00000000004bbfff 0x0000/0x0004 0x0020000
1011a50.fa8: 00000000004bc000-00000000004befff 0x0004/0x0004 0x0020000
1021a50.fa8: 00000000004bf000-00000000005fffff 0x0000/0x0004 0x0020000
1031a50.fa8: *0000000000600000-00000000006b8fff 0x0000/0x0004 0x0020000
1041a50.fa8: 00000000006b9000-00000000006bbfff 0x0104/0x0004 0x0020000
1051a50.fa8: 00000000006bc000-00000000006fffff 0x0004/0x0004 0x0020000
1061a50.fa8: *0000000000700000-00000000007c4fff 0x0002/0x0002 0x0040000
1071a50.fa8: 00000000007c5000-00000000007cffff 0x0001/0x0000 0x0000000
1081a50.fa8: *00000000007d0000-00000000007d1fff 0x0004/0x0004 0x0020000
1091a50.fa8: 00000000007d2000-0000000000801fff 0x0000/0x0004 0x0020000
1101a50.fa8: 0000000000802000-00000000008effff 0x0001/0x0000 0x0000000
1111a50.fa8: *00000000008f0000-00000000008f5fff 0x0004/0x0004 0x0020000
1121a50.fa8: 00000000008f6000-00000000009effff 0x0000/0x0004 0x0020000
1131a50.fa8: *00000000009f0000-00000000009f2fff 0x0000/0x0004 0x0020000
1141a50.fa8: 00000000009f3000-0000000000be0fff 0x0004/0x0004 0x0020000
1151a50.fa8: 0000000000be1000-0000000000be1fff 0x0000/0x0004 0x0020000
1161a50.fa8: 0000000000be2000-0000000000beffff 0x0001/0x0000 0x0000000
1171a50.fa8: *0000000000bf0000-0000000000c0cfff 0x0004/0x0004 0x0020000
1181a50.fa8: 0000000000c0d000-0000000000ceffff 0x0000/0x0004 0x0020000
1191a50.fa8: 0000000000cf0000-000000007ffdffff 0x0001/0x0000 0x0000000
1201a50.fa8: *000000007ffe0000-000000007ffe0fff 0x0002/0x0002 0x0020000
1211a50.fa8: 000000007ffe1000-000000007ffe3fff 0x0001/0x0000 0x0000000
1221a50.fa8: *000000007ffe4000-000000007ffe4fff 0x0002/0x0002 0x0020000
1231a50.fa8: 000000007ffe5000-00007ff4c7dfffff 0x0001/0x0000 0x0000000
1241a50.fa8: *00007ff4c7e00000-00007ff4c7e04fff 0x0002/0x0002 0x0040000
1251a50.fa8: 00007ff4c7e05000-00007ff4c7efffff 0x0000/0x0002 0x0040000
1261a50.fa8: *00007ff4c7f00000-00007ff5c7f1ffff 0x0000/0x0004 0x0020000
1271a50.fa8: *00007ff5c7f20000-00007ff5c9f1ffff 0x0000/0x0004 0x0020000
1281a50.fa8: 00007ff5c9f20000-00007ff5c9f20fff 0x0004/0x0004 0x0020000
1291a50.fa8: 00007ff5c9f21000-00007ff5c9f2ffff 0x0001/0x0000 0x0000000
1301a50.fa8: *00007ff5c9f30000-00007ff5c9f30fff 0x0002/0x0002 0x0040000
1311a50.fa8: 00007ff5c9f31000-00007ff5c9f3ffff 0x0001/0x0000 0x0000000
1321a50.fa8: *00007ff5c9f40000-00007ff5c9f62fff 0x0002/0x0002 0x0040000
1331a50.fa8: 00007ff5c9f63000-00007ff6d2c1ffff 0x0001/0x0000 0x0000000
1341a50.fa8: *00007ff6d2c20000-00007ff6d2c20fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
1351a50.fa8: 00007ff6d2c21000-00007ff6d2c96fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
1361a50.fa8: 00007ff6d2c97000-00007ff6d2c97fff 0x0080/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
1371a50.fa8: 00007ff6d2c98000-00007ff6d2cdffff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
1381a50.fa8: 00007ff6d2ce0000-00007ff6d2ce2fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
1391a50.fa8: 00007ff6d2ce3000-00007ff6d2ce5fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
1401a50.fa8: 00007ff6d2ce6000-00007ff6d2ce8fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
1411a50.fa8: 00007ff6d2ce9000-00007ff6d2ce9fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
1421a50.fa8: 00007ff6d2cea000-00007ff6d2cebfff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
1431a50.fa8: 00007ff6d2cec000-00007ff6d2cecfff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
1441a50.fa8: 00007ff6d2ced000-00007ff6d2d35fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
1451a50.fa8: 00007ff6d2d36000-00007fffae75ffff 0x0001/0x0000 0x0000000
1461a50.fa8: *00007fffae760000-00007fffae760fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\KernelBase.dll
1471a50.fa8: 00007fffae761000-00007fffae863fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\KernelBase.dll
1481a50.fa8: 00007fffae864000-00007fffae9b9fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\KernelBase.dll
1491a50.fa8: 00007fffae9ba000-00007fffae9bdfff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\KernelBase.dll
1501a50.fa8: 00007fffae9be000-00007fffae9befff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\KernelBase.dll
1511a50.fa8: 00007fffae9bf000-00007fffae9f2fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\KernelBase.dll
1521a50.fa8: 00007fffae9f3000-00007fffaf39ffff 0x0001/0x0000 0x0000000
1531a50.fa8: *00007fffaf3a0000-00007fffaf3a0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\kernel32.dll
1541a50.fa8: 00007fffaf3a1000-00007fffaf416fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\kernel32.dll
1551a50.fa8: 00007fffaf417000-00007fffaf448fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\kernel32.dll
1561a50.fa8: 00007fffaf449000-00007fffaf449fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\kernel32.dll
1571a50.fa8: 00007fffaf44a000-00007fffaf44afff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\kernel32.dll
1581a50.fa8: 00007fffaf44b000-00007fffaf452fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\kernel32.dll
1591a50.fa8: 00007fffaf453000-00007fffb1beffff 0x0001/0x0000 0x0000000
1601a50.fa8: *00007fffb1bf0000-00007fffb1bf0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
1611a50.fa8: 00007fffb1bf1000-00007fffb1d07fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
1621a50.fa8: 00007fffb1d08000-00007fffb1d4efff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
1631a50.fa8: 00007fffb1d4f000-00007fffb1d4ffff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
1641a50.fa8: 00007fffb1d50000-00007fffb1d51fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
1651a50.fa8: 00007fffb1d52000-00007fffb1d59fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
1661a50.fa8: 00007fffb1d5a000-00007fffb1ddcfff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
1671a50.fa8: 00007fffb1ddd000-00007ffffffeffff 0x0001/0x0000 0x0000000
1681a50.fa8: kernel32.dll: timestamp 0x250a0626 (rc=VINF_SUCCESS)
1691a50.fa8: kernelbase.dll: timestamp 0xfb6790ac (rc=VINF_SUCCESS)
1701a50.fa8: VirtualBoxVM.exe: timestamp 0x5defad4f (rc=VINF_SUCCESS)
1711a50.fa8: '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe' has no imports
1721a50.fa8: '\Device\HarddiskVolume3\Windows\System32\ntdll.dll' has no imports
1731a50.fa8: supR3HardenedWinInit: SUPHARDNTVPKIND_SELF_PURIFICATION_LIMITED -> VINF_SUCCESS, cFixes=0
1741a50.fa8: '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe' has no imports
1751a50.fa8: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe)
1761a50.fa8: supR3HardNtEnableThreadCreationEx:
1771a50.fa8: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007fffb1c65660 pvNtTerminateThread=00007fffb1c901b0
1781a50.fa8: supR3HardenedWinDoReSpawn(1): New child a60.188c [kernel32].
1791a50.fa8: supR3HardNtChildGatherData: PebBaseAddress=000000000092d000 cbPeb=0x388
1801a50.fa8: supR3HardNtPuChFindNtdll: uNtDllParentAddr=00007fffb1bf0000 uNtDllChildAddr=00007fffb1bf0000
1811a50.fa8: supR3HardenedWinSetupChildInit: uLdrInitThunk=00007fffb1c65660
1821a50.fa8: supR3HardenedWinSetupChildInit: Initial context:
183 rax=0000000000000000 rbx=0000000000000000 rcx=00007ff6d2c27900 rdx=000000000092d000
184 rsi=0000000000000000 rdi=0000000000000000 r8 =0000000000000000 r9 =0000000000000000
185 r10=0000000000000000 r11=0000000000000000 r12=0000000000000000 r13=0000000000000000
186 r14=0000000000000000 r15=0000000000000000 P1=0000000000000000 P2=0000000000000000
187 rip=00007fffb1c5a250 rsp=0000000000affac8 rbp=0000000000000000 ctxflags=0010001b
188 cs=0033 ss=002b ds=0000 es=0000 fs=0000 gs=0000 eflags=00000200 mxcrx=00001f80
189 P3=0000000000000000 P4=0000000000000000 P5=0000000000000000 P6=0000000000000000
190 dr0=0000000000000000 dr1=0000000000000000 dr2=0000000000000000 dr3=0000000000000000
191 dr6=0000000000000000 dr7=0000000000000000 vcr=0000000000000000 dcr=0000000000000000
192 lbt=0000000000000000 lbf=0000000000000000 lxt=0000000000000000 lxf=0000000000000000
1931a50.fa8: supR3HardenedWinSetupChildInit: Start child.
1941a50.fa8: supR3HardNtChildWaitFor: Found expected request 0 (PurifyChildAndCloseHandles) after 1 ms.
1951a50.fa8: supR3HardNtChildPurify: Startup delay kludge #1/0: 258 ms, 30 sleeps
1961a50.fa8: supHardNtVpScanVirtualMemory: enmKind=CHILD_PURIFICATION
1971a50.fa8: *0000000000000000-000000000071ffff 0x0001/0x0000 0x0000000
1981a50.fa8: *0000000000720000-000000000073ffff 0x0004/0x0004 0x0020000
1991a50.fa8: *0000000000740000-0000000000759fff 0x0002/0x0002 0x0040000
2001a50.fa8: 000000000075a000-000000000075ffff 0x0001/0x0000 0x0000000
2011a50.fa8: *0000000000760000-0000000000763fff 0x0002/0x0002 0x0040000
2021a50.fa8: 0000000000764000-000000000076ffff 0x0001/0x0000 0x0000000
2031a50.fa8: *0000000000770000-0000000000771fff 0x0004/0x0004 0x0020000
2041a50.fa8: 0000000000772000-00000000007fffff 0x0001/0x0000 0x0000000
2051a50.fa8: *0000000000800000-000000000092cfff 0x0000/0x0004 0x0020000
2061a50.fa8: 000000000092d000-000000000092ffff 0x0004/0x0004 0x0020000
2071a50.fa8: 0000000000930000-00000000009fffff 0x0000/0x0004 0x0020000
2081a50.fa8: *0000000000a00000-0000000000afafff 0x0000/0x0004 0x0020000
2091a50.fa8: 0000000000afb000-0000000000afdfff 0x0104/0x0004 0x0020000
2101a50.fa8: 0000000000afe000-0000000000afffff 0x0004/0x0004 0x0020000
2111a50.fa8: 0000000000b00000-000000007ffdffff 0x0001/0x0000 0x0000000
2121a50.fa8: *000000007ffe0000-000000007ffe0fff 0x0002/0x0002 0x0020000
2131a50.fa8: 000000007ffe1000-000000007ffe3fff 0x0001/0x0000 0x0000000
2141a50.fa8: *000000007ffe4000-000000007ffe4fff 0x0002/0x0002 0x0020000
2151a50.fa8: 000000007ffe5000-00007ff5ca18ffff 0x0001/0x0000 0x0000000
2161a50.fa8: *00007ff5ca190000-00007ff5ca190fff 0x0002/0x0002 0x0040000
2171a50.fa8: 00007ff5ca191000-00007ff5ca19ffff 0x0001/0x0000 0x0000000
2181a50.fa8: *00007ff5ca1a0000-00007ff5ca1c2fff 0x0002/0x0002 0x0040000
2191a50.fa8: 00007ff5ca1c3000-00007ff6d2c1ffff 0x0001/0x0000 0x0000000
2201a50.fa8: *00007ff6d2c20000-00007ff6d2c20fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
2211a50.fa8: 00007ff6d2c21000-00007ff6d2c96fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
2221a50.fa8: 00007ff6d2c97000-00007ff6d2c97fff 0x0080/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
2231a50.fa8: 00007ff6d2c98000-00007ff6d2cdffff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
2241a50.fa8: 00007ff6d2ce0000-00007ff6d2ce0fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
2251a50.fa8: 00007ff6d2ce1000-00007ff6d2ce1fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
2261a50.fa8: 00007ff6d2ce2000-00007ff6d2ce6fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
2271a50.fa8: 00007ff6d2ce7000-00007ff6d2ce7fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
2281a50.fa8: 00007ff6d2ce8000-00007ff6d2ce8fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
2291a50.fa8: 00007ff6d2ce9000-00007ff6d2cecfff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
2301a50.fa8: 00007ff6d2ced000-00007ff6d2d35fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
2311a50.fa8: 00007ff6d2d36000-00007fffb1beffff 0x0001/0x0000 0x0000000
2321a50.fa8: *00007fffb1bf0000-00007fffb1bf0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
2331a50.fa8: 00007fffb1bf1000-00007fffb1d07fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
2341a50.fa8: 00007fffb1d08000-00007fffb1d4efff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
2351a50.fa8: 00007fffb1d4f000-00007fffb1d59fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
2361a50.fa8: 00007fffb1d5a000-00007fffb1d67fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
2371a50.fa8: 00007fffb1d68000-00007fffb1d68fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
2381a50.fa8: 00007fffb1d69000-00007fffb1d6bfff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
2391a50.fa8: 00007fffb1d6c000-00007fffb1ddcfff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
2401a50.fa8: 00007fffb1ddd000-00007ffffffeffff 0x0001/0x0000 0x0000000
2411a50.fa8: supR3HardNtChildPurify: Done after 268 ms and 0 fixes (loop #0).
242a60.188c: Log file opened: 6.1.0r135406 g_hStartupLog=0000000000000004 g_uNtVerCombined=0xa0456300
243a60.188c: supR3HardenedVmProcessInit: uNtDllAddr=00007fffb1bf0000 g_uNtVerCombined=0xa0456300 (stack ~0000000000aff558)
244a60.188c: ntdll.dll: timestamp 0x1f1a0210 (rc=VINF_SUCCESS)
245a60.188c: New simple heap: #1 0000000000c00000 LB 0x400000 (for 2019328 allocation)
2461a50.fa8: supR3HardNtEnableThreadCreationEx:
247a60.188c: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox'
248a60.188c: System32: \Device\HarddiskVolume3\Windows\System32
249a60.188c: WinSxS: \Device\HarddiskVolume3\Windows\WinSxS
250a60.188c: KnownDllPath: C:\WINDOWS\System32
251a60.188c: supR3HardenedVmProcessInit: Opening vboxdrv stub...
252a60.188c: supR3HardenedVmProcessInit: Restoring LdrInitializeThunk...
253a60.188c: supR3HardenedVmProcessInit: Returning to LdrInitializeThunk...
254a60.188c: Registered Dll notification callback with NTDLL.
255a60.188c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\kernel32.dll)
256a60.188c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\kernel32.dll
257a60.188c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\KERNEL32.DLL (Input=KERNEL32.DLL, rcNtResolve=0xc0150008) *pfFlags=0xffffffff pwszSearchPath=0000000000004001:<flags> [calling]
258a60.188c: supR3HardenedDllNotificationCallback: load 00007fffae760000 LB 0x00293000 C:\WINDOWS\System32\KERNELBASE.dll [fFlags=0x0]
259a60.188c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\KernelBase.dll)
260a60.188c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\KernelBase.dll
261a60.188c: supR3HardenedDllNotificationCallback: load 00007fffaf3a0000 LB 0x000b3000 C:\WINDOWS\System32\KERNEL32.DLL [fFlags=0x0]
262a60.188c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
263a60.188c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaf3a0000 'C:\WINDOWS\System32\KERNEL32.DLL'
264a60.188c: supR3HardenedDllNotificationCallback: load 00007ff6d2c20000 LB 0x00116000 C:\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe [fFlags=0x0]
265a60.188c: '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe' has no imports
266a60.188c: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe)
267a60.188c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
268a60.188c: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007fffb1c65660 pvNtTerminateThread=00007fffb1c901b0
2691a50.fa8: supR3HardNtChildWaitFor: Found expected request 1 (CloseEvents) after 167 ms.
270a60.188c: \SystemRoot\System32\ntdll.dll:
271a60.188c: CreationTime: 2019-12-15T07:28:50.505242600Z
272a60.188c: LastWriteTime: 2019-12-15T07:28:50.541288600Z
273a60.188c: ChangeTime: 2019-12-15T08:12:29.093807100Z
274a60.188c: FileAttributes: 0x20
275a60.188c: Size: 0x1e70e0
276a60.188c: NT Headers: 0xe0
277a60.188c: Timestamp: 0x1f1a0210
278a60.188c: Machine: 0x8664 - amd64
279a60.188c: Timestamp: 0x1f1a0210
280a60.188c: Image Version: 10.0
281a60.188c: SizeOfImage: 0x1ed000 (2019328)
282a60.188c: Resource Dir: 0x17d000 LB 0x6eb48
283a60.188c: [Version info resource found at 0xd8! (ID/Name: 0x1; SubID/SubName: 0x409)]
284a60.188c: [Raw version resource data: 0x17d0f0 LB 0x380, codepage 0x0 (reserved 0x0)]
285a60.188c: ProductName: Microsoft® Windows® Operating System
286a60.188c: ProductVersion: 10.0.17763.831
287a60.188c: FileVersion: 10.0.17763.831 (WinBuild.160101.0800)
288a60.188c: FileDescription: NT Layer DLL
289a60.188c: \SystemRoot\System32\kernel32.dll:
290a60.188c: CreationTime: 2019-05-28T11:04:46.271253500Z
291a60.188c: LastWriteTime: 2019-05-28T11:04:46.348978600Z
292a60.188c: ChangeTime: 2019-12-15T07:29:15.996478700Z
293a60.188c: FileAttributes: 0x20
294a60.188c: Size: 0xb12c0
295a60.188c: NT Headers: 0xe8
296a60.188c: Timestamp: 0x250a0626
297a60.188c: Machine: 0x8664 - amd64
298a60.188c: Timestamp: 0x250a0626
299a60.188c: Image Version: 10.0
300a60.188c: SizeOfImage: 0xb3000 (733184)
301a60.188c: Resource Dir: 0xb1000 LB 0x520
302a60.188c: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
303a60.188c: [Raw version resource data: 0xb10b0 LB 0x3a4, codepage 0x0 (reserved 0x0)]
304a60.188c: ProductName: Microsoft® Windows® Operating System
305a60.188c: ProductVersion: 10.0.17763.475
306a60.188c: FileVersion: 10.0.17763.475 (WinBuild.160101.0800)
307a60.188c: FileDescription: Windows NT BASE API Client DLL
308a60.188c: \SystemRoot\System32\KernelBase.dll:
309a60.188c: CreationTime: 2019-12-15T07:28:50.303290400Z
310a60.188c: LastWriteTime: 2019-12-15T07:28:50.351290500Z
311a60.188c: ChangeTime: 2019-12-15T08:12:28.622544300Z
312a60.188c: FileAttributes: 0x20
313a60.188c: Size: 0x2931f8
314a60.188c: NT Headers: 0xf8
315a60.188c: Timestamp: 0xfb6790ac
316a60.188c: Machine: 0x8664 - amd64
317a60.188c: Timestamp: 0xfb6790ac
318a60.188c: Image Version: 10.0
319a60.188c: SizeOfImage: 0x293000 (2699264)
320a60.188c: Resource Dir: 0x26f000 LB 0x548
321a60.188c: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
322a60.188c: [Raw version resource data: 0x26f0b0 LB 0x3bc, codepage 0x0 (reserved 0x0)]
323a60.188c: ProductName: Microsoft® Windows® Operating System
324a60.188c: ProductVersion: 10.0.17763.914
325a60.188c: FileVersion: 10.0.17763.914 (WinBuild.160101.0800)
326a60.188c: FileDescription: Windows NT BASE API Client DLL
327a60.188c: \SystemRoot\System32\apisetschema.dll:
328a60.188c: CreationTime: 2018-09-15T07:28:25.403122600Z
329a60.188c: LastWriteTime: 2018-09-15T07:28:25.403122600Z
330a60.188c: ChangeTime: 2019-12-14T05:43:41.472002600Z
331a60.188c: FileAttributes: 0x80
332a60.188c: Size: 0x1c738
333a60.188c: NT Headers: 0xd0
334a60.188c: Timestamp: 0x33775897
335a60.188c: Machine: 0x8664 - amd64
336a60.188c: Timestamp: 0x33775897
337a60.188c: Image Version: 10.0
338a60.188c: SizeOfImage: 0x1d000 (118784)
339a60.188c: Resource Dir: 0x1c000 LB 0x408
340a60.188c: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
341a60.188c: [Raw version resource data: 0x1c060 LB 0x3a8, codepage 0x0 (reserved 0x0)]
342a60.188c: ProductName: Microsoft® Windows® Operating System
343a60.188c: ProductVersion: 10.0.17763.1
344a60.188c: FileVersion: 10.0.17763.1 (WinBuild.160101.0800)
345a60.188c: FileDescription: ApiSet Schema DLL
346a60.188c: NtOpenDirectoryObject failed on \Driver: 0xc0000022
347a60.188c: supR3HardenedWinFindAdversaries: 0x0
348a60.188c: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox'
349a60.188c: Calling main()
350a60.188c: SUPR3HardenedMain: pszProgName=VirtualBoxVM fFlags=0x2
351a60.188c: supR3HardenedWinInitAppBin(0x2): '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox'
352a60.188c: '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe' has no imports
353a60.188c: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe)
354a60.188c: SUPR3HardenedMain: Respawn #2
355a60.188c: supR3HardNtEnableThreadCreationEx:
356a60.188c: supR3HardenedDllNotificationCallback: load 00007fffaf210000 LB 0x00122000 C:\WINDOWS\System32\RPCRT4.dll [fFlags=0x0]
357a60.188c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll)
358a60.188c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll
359a60.188c: supR3HardenedDllNotificationCallback: load 00007fffaee90000 LB 0x0009e000 C:\WINDOWS\System32\sechost.dll [fFlags=0x0]
360a60.188c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'rpcrt4.dll'.
361a60.188c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\sechost.dll)
362a60.188c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\sechost.dll
363a60.188c: '\Device\HarddiskVolume3\Windows\System32\ntdll.dll' has no imports
364a60.188c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\ntdll.dll)
365a60.188c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\ntdll.dll
366a60.188c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
367a60.188c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
368a60.188c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
369a60.188c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\ntdll.dll (Input=ntdll.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
370a60.188c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffb1bf0000 'C:\WINDOWS\System32\ntdll.dll'
371a60.188c: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007fffb1c65660 pvNtTerminateThread=00007fffb1c901b0
372a60.188c: supR3HardenedWinDoReSpawn(2): New child 1a0c.233c [kernel32].
373a60.188c: supR3HardenedWinReSpawn: NtSetInformationThread/ThreadHideFromDebugger failed: 0xc0000022 (harmless)
374a60.188c: supR3HardNtChildGatherData: PebBaseAddress=00000000004e0000 cbPeb=0x388
375a60.188c: supR3HardNtPuChFindNtdll: uNtDllParentAddr=00007fffb1bf0000 uNtDllChildAddr=00007fffb1bf0000
376a60.188c: supR3HardenedWinSetupChildInit: uLdrInitThunk=00007fffb1c65660
377a60.188c: supR3HardenedWinSetupChildInit: Initial context:
378 rax=0000000000000000 rbx=0000000000000000 rcx=00007ff6d2c27900 rdx=00000000004e0000
379 rsi=0000000000000000 rdi=0000000000000000 r8 =0000000000000000 r9 =0000000000000000
380 r10=0000000000000000 r11=0000000000000000 r12=0000000000000000 r13=0000000000000000
381 r14=0000000000000000 r15=0000000000000000 P1=0000000000000000 P2=0000000000000000
382 rip=00007fffb1c5a250 rsp=00000000006ffda8 rbp=0000000000000000 ctxflags=0010001b
383 cs=0033 ss=002b ds=0000 es=0000 fs=0000 gs=0000 eflags=00000200 mxcrx=00001f80
384 P3=0000000000000000 P4=0000000000000000 P5=0000000000000000 P6=0000000000000000
385 dr0=0000000000000000 dr1=0000000000000000 dr2=0000000000000000 dr3=0000000000000000
386 dr6=0000000000000000 dr7=0000000000000000 vcr=0000000000000000 dcr=0000000000000000
387 lbt=0000000000000000 lbf=0000000000000000 lxt=0000000000000000 lxf=0000000000000000
388a60.188c: kernel32.dll: timestamp 0x250a0626 (rc=VINF_SUCCESS)
389a60.188c: supR3HardenedWinSetupChildInit: Start child.
390a60.188c: supR3HardNtChildWaitFor: Found expected request 0 (PurifyChildAndCloseHandles) after 1 ms.
391a60.188c: supR3HardNtChildPurify: Startup delay kludge #1/0: 262 ms, 30 sleeps
392a60.188c: supHardNtVpScanVirtualMemory: enmKind=CHILD_PURIFICATION
393a60.188c: *0000000000000000-00000000002effff 0x0001/0x0000 0x0000000
394a60.188c: *00000000002f0000-000000000030ffff 0x0004/0x0004 0x0020000
395a60.188c: *0000000000310000-0000000000329fff 0x0002/0x0002 0x0040000
396a60.188c: 000000000032a000-000000000032ffff 0x0001/0x0000 0x0000000
397a60.188c: *0000000000330000-0000000000333fff 0x0002/0x0002 0x0040000
398a60.188c: 0000000000334000-000000000033ffff 0x0001/0x0000 0x0000000
399a60.188c: *0000000000340000-0000000000341fff 0x0004/0x0004 0x0020000
400a60.188c: 0000000000342000-00000000003fffff 0x0001/0x0000 0x0000000
401a60.188c: *0000000000400000-00000000004dffff 0x0000/0x0004 0x0020000
402a60.188c: 00000000004e0000-00000000004e2fff 0x0004/0x0004 0x0020000
403a60.188c: 00000000004e3000-00000000005fffff 0x0000/0x0004 0x0020000
404a60.188c: *0000000000600000-00000000006fafff 0x0000/0x0004 0x0020000
405a60.188c: 00000000006fb000-00000000006fdfff 0x0104/0x0004 0x0020000
406a60.188c: 00000000006fe000-00000000006fffff 0x0004/0x0004 0x0020000
407a60.188c: 0000000000700000-000000007ffdffff 0x0001/0x0000 0x0000000
408a60.188c: *000000007ffe0000-000000007ffe0fff 0x0002/0x0002 0x0020000
409a60.188c: 000000007ffe1000-000000007ffe3fff 0x0001/0x0000 0x0000000
410a60.188c: *000000007ffe4000-000000007ffe4fff 0x0002/0x0002 0x0020000
411a60.188c: 000000007ffe5000-00007ff5dc70ffff 0x0001/0x0000 0x0000000
412a60.188c: *00007ff5dc710000-00007ff5dc710fff 0x0002/0x0002 0x0040000
413a60.188c: 00007ff5dc711000-00007ff5dc71ffff 0x0001/0x0000 0x0000000
414a60.188c: *00007ff5dc720000-00007ff5dc742fff 0x0002/0x0002 0x0040000
415a60.188c: 00007ff5dc743000-00007ff6d2c1ffff 0x0001/0x0000 0x0000000
416a60.188c: *00007ff6d2c20000-00007ff6d2c20fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
417a60.188c: 00007ff6d2c21000-00007ff6d2c96fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
418a60.188c: 00007ff6d2c97000-00007ff6d2c97fff 0x0080/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
419a60.188c: 00007ff6d2c98000-00007ff6d2cdffff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
420a60.188c: 00007ff6d2ce0000-00007ff6d2ce0fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
421a60.188c: 00007ff6d2ce1000-00007ff6d2ce1fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
422a60.188c: 00007ff6d2ce2000-00007ff6d2ce6fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
423a60.188c: 00007ff6d2ce7000-00007ff6d2ce7fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
424a60.188c: 00007ff6d2ce8000-00007ff6d2ce8fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
425a60.188c: 00007ff6d2ce9000-00007ff6d2cecfff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
426a60.188c: 00007ff6d2ced000-00007ff6d2d35fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
427a60.188c: 00007ff6d2d36000-00007fffb1beffff 0x0001/0x0000 0x0000000
428a60.188c: *00007fffb1bf0000-00007fffb1bf0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
429a60.188c: 00007fffb1bf1000-00007fffb1d07fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
430a60.188c: 00007fffb1d08000-00007fffb1d4efff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
431a60.188c: 00007fffb1d4f000-00007fffb1d59fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
432a60.188c: 00007fffb1d5a000-00007fffb1d67fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
433a60.188c: 00007fffb1d68000-00007fffb1d68fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
434a60.188c: 00007fffb1d69000-00007fffb1d6bfff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
435a60.188c: 00007fffb1d6c000-00007fffb1ddcfff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
436a60.188c: 00007fffb1ddd000-00007ffffffeffff 0x0001/0x0000 0x0000000
437a60.188c: VirtualBoxVM.exe: timestamp 0x5defad4f (rc=VINF_SUCCESS)
438a60.188c: '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe' has no imports
439a60.188c: '\Device\HarddiskVolume3\Windows\System32\ntdll.dll' has no imports
440a60.188c: supR3HardNtChildPurify: Done after 318 ms and 0 fixes (loop #0).
4411a0c.233c: Log file opened: 6.1.0r135406 g_hStartupLog=0000000000000004 g_uNtVerCombined=0xa0456300
4421a0c.233c: supR3HardenedVmProcessInit: uNtDllAddr=00007fffb1bf0000 g_uNtVerCombined=0xa0456300 (stack ~00000000006ff838)
4431a0c.233c: ntdll.dll: timestamp 0x1f1a0210 (rc=VINF_SUCCESS)
4441a0c.233c: New simple heap: #1 0000000000800000 LB 0x400000 (for 2019328 allocation)
445a60.188c: supR3HardenedEarlyCompact: Removed heap 1 (0x00000000c00000 LB 0x400000)
446a60.188c: supR3HardNtEnableThreadCreationEx:
4471a0c.233c: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox'
4481a0c.233c: System32: \Device\HarddiskVolume3\Windows\System32
4491a0c.233c: WinSxS: \Device\HarddiskVolume3\Windows\WinSxS
4501a0c.233c: KnownDllPath: C:\WINDOWS\System32
4511a0c.233c: supR3HardenedVmProcessInit: Opening vboxdrv...
4521a0c.233c: supR3HardenedVmProcessInit: Restoring LdrInitializeThunk...
4531a0c.233c: supR3HardenedVmProcessInit: Returning to LdrInitializeThunk...
4541a0c.233c: Registered Dll notification callback with NTDLL.
4551a0c.233c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\kernel32.dll)
4561a0c.233c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\kernel32.dll
4571a0c.233c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\KERNEL32.DLL (Input=KERNEL32.DLL, rcNtResolve=0xc0150008) *pfFlags=0xffffffff pwszSearchPath=0000000000004001:<flags> [calling]
4581a0c.233c: supR3HardenedDllNotificationCallback: load 00007fffae760000 LB 0x00293000 C:\WINDOWS\System32\KERNELBASE.dll [fFlags=0x0]
4591a0c.233c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\KernelBase.dll)
4601a0c.233c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\KernelBase.dll
4611a0c.233c: supR3HardenedDllNotificationCallback: load 00007fffaf3a0000 LB 0x000b3000 C:\WINDOWS\System32\KERNEL32.DLL [fFlags=0x0]
4621a0c.233c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
4631a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaf3a0000 'C:\WINDOWS\System32\KERNEL32.DLL'
4641a0c.233c: supR3HardenedDllNotificationCallback: load 00007ff6d2c20000 LB 0x00116000 C:\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe [fFlags=0x0]
4651a0c.233c: '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe' has no imports
4661a0c.233c: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe)
4671a0c.233c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
4681a0c.233c: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007fffb1c65660 pvNtTerminateThread=00007fffb1c901b0
469a60.188c: supR3HardNtChildWaitFor: Found expected request 1 (CloseEvents) after 199 ms.
4701a0c.233c: \SystemRoot\System32\ntdll.dll:
4711a0c.233c: CreationTime: 2019-12-15T07:28:50.505242600Z
4721a0c.233c: LastWriteTime: 2019-12-15T07:28:50.541288600Z
4731a0c.233c: ChangeTime: 2019-12-15T08:12:29.093807100Z
4741a0c.233c: FileAttributes: 0x20
4751a0c.233c: Size: 0x1e70e0
4761a0c.233c: NT Headers: 0xe0
4771a0c.233c: Timestamp: 0x1f1a0210
4781a0c.233c: Machine: 0x8664 - amd64
4791a0c.233c: Timestamp: 0x1f1a0210
4801a0c.233c: Image Version: 10.0
4811a0c.233c: SizeOfImage: 0x1ed000 (2019328)
4821a0c.233c: Resource Dir: 0x17d000 LB 0x6eb48
4831a0c.233c: [Version info resource found at 0xd8! (ID/Name: 0x1; SubID/SubName: 0x409)]
4841a0c.233c: [Raw version resource data: 0x17d0f0 LB 0x380, codepage 0x0 (reserved 0x0)]
4851a0c.233c: ProductName: Microsoft® Windows® Operating System
4861a0c.233c: ProductVersion: 10.0.17763.831
4871a0c.233c: FileVersion: 10.0.17763.831 (WinBuild.160101.0800)
4881a0c.233c: FileDescription: NT Layer DLL
4891a0c.233c: \SystemRoot\System32\kernel32.dll:
4901a0c.233c: CreationTime: 2019-05-28T11:04:46.271253500Z
4911a0c.233c: LastWriteTime: 2019-05-28T11:04:46.348978600Z
4921a0c.233c: ChangeTime: 2019-12-15T07:29:15.996478700Z
4931a0c.233c: FileAttributes: 0x20
4941a0c.233c: Size: 0xb12c0
4951a0c.233c: NT Headers: 0xe8
4961a0c.233c: Timestamp: 0x250a0626
4971a0c.233c: Machine: 0x8664 - amd64
4981a0c.233c: Timestamp: 0x250a0626
4991a0c.233c: Image Version: 10.0
5001a0c.233c: SizeOfImage: 0xb3000 (733184)
5011a0c.233c: Resource Dir: 0xb1000 LB 0x520
5021a0c.233c: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
5031a0c.233c: [Raw version resource data: 0xb10b0 LB 0x3a4, codepage 0x0 (reserved 0x0)]
5041a0c.233c: ProductName: Microsoft® Windows® Operating System
5051a0c.233c: ProductVersion: 10.0.17763.475
5061a0c.233c: FileVersion: 10.0.17763.475 (WinBuild.160101.0800)
5071a0c.233c: FileDescription: Windows NT BASE API Client DLL
5081a0c.233c: \SystemRoot\System32\KernelBase.dll:
5091a0c.233c: CreationTime: 2019-12-15T07:28:50.303290400Z
5101a0c.233c: LastWriteTime: 2019-12-15T07:28:50.351290500Z
5111a0c.233c: ChangeTime: 2019-12-15T08:12:28.622544300Z
5121a0c.233c: FileAttributes: 0x20
5131a0c.233c: Size: 0x2931f8
5141a0c.233c: NT Headers: 0xf8
5151a0c.233c: Timestamp: 0xfb6790ac
5161a0c.233c: Machine: 0x8664 - amd64
5171a0c.233c: Timestamp: 0xfb6790ac
5181a0c.233c: Image Version: 10.0
5191a0c.233c: SizeOfImage: 0x293000 (2699264)
5201a0c.233c: Resource Dir: 0x26f000 LB 0x548
5211a0c.233c: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
5221a0c.233c: [Raw version resource data: 0x26f0b0 LB 0x3bc, codepage 0x0 (reserved 0x0)]
5231a0c.233c: ProductName: Microsoft® Windows® Operating System
5241a0c.233c: ProductVersion: 10.0.17763.914
5251a0c.233c: FileVersion: 10.0.17763.914 (WinBuild.160101.0800)
5261a0c.233c: FileDescription: Windows NT BASE API Client DLL
5271a0c.233c: \SystemRoot\System32\apisetschema.dll:
5281a0c.233c: CreationTime: 2018-09-15T07:28:25.403122600Z
5291a0c.233c: LastWriteTime: 2018-09-15T07:28:25.403122600Z
5301a0c.233c: ChangeTime: 2019-12-14T05:43:41.472002600Z
5311a0c.233c: FileAttributes: 0x80
5321a0c.233c: Size: 0x1c738
5331a0c.233c: NT Headers: 0xd0
5341a0c.233c: Timestamp: 0x33775897
5351a0c.233c: Machine: 0x8664 - amd64
5361a0c.233c: Timestamp: 0x33775897
5371a0c.233c: Image Version: 10.0
5381a0c.233c: SizeOfImage: 0x1d000 (118784)
5391a0c.233c: Resource Dir: 0x1c000 LB 0x408
5401a0c.233c: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
5411a0c.233c: [Raw version resource data: 0x1c060 LB 0x3a8, codepage 0x0 (reserved 0x0)]
5421a0c.233c: ProductName: Microsoft® Windows® Operating System
5431a0c.233c: ProductVersion: 10.0.17763.1
5441a0c.233c: FileVersion: 10.0.17763.1 (WinBuild.160101.0800)
5451a0c.233c: FileDescription: ApiSet Schema DLL
5461a0c.233c: NtOpenDirectoryObject failed on \Driver: 0xc0000022
5471a0c.233c: supR3HardenedWinFindAdversaries: 0x0
5481a0c.233c: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox'
5491a0c.233c: Calling main()
5501a0c.233c: SUPR3HardenedMain: pszProgName=VirtualBoxVM fFlags=0x2
5511a0c.233c: supR3HardenedWinInitAppBin(0x2): '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox'
5521a0c.233c: '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe' has no imports
5531a0c.233c: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe)
5541a0c.233c: SUPR3HardenedMain: Final process, opening VBoxDrv...
5551a0c.233c: supR3HardenedEarlyCompact: Removed heap 1 (0x00000000800000 LB 0x400000)
5561a0c.233c: supR3HardNtEnableThreadCreationEx:
5571a0c.233c: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxSupLib.dll)
5581a0c.233c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxSupLib.dll
5591a0c.233c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
5601a0c.233c: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxSupLib.dll [lacks WinVerifyTrust]
5611a0c.233c: supR3HardenedDllNotificationCallback: load 00007fffaafe0000 LB 0x00005000 C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL [fFlags=0x0]
5621a0c.233c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxSupLib.dll [lacks WinVerifyTrust]
5631a0c.233c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxSupLib.dll [lacks WinVerifyTrust]
5641a0c.233c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
5651a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaafe0000 'C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL'
5661a0c.233c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxSupLib.dll [lacks WinVerifyTrust]
5671a0c.233c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
5681a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaafe0000 'C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL'
5691a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaafe0000 'C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL'
5701a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
5711a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msasn1.dll'.
5721a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'crypt32.dll'.
5731a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #27 'rpcrt4.dll'.
5741a0c.233c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\wintrust.dll)
5751a0c.233c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\wintrust.dll
5761a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
5771a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
5781a0c.233c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll)
5791a0c.233c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll
5801a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'crypt32.dll'...
5811a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'crypt32.dll' -> '\Device\HarddiskVolume3\Windows\System32\crypt32.dll' [rcNtRedir=0xc0150008]
5821a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #34 'msasn1.dll'.
5831a0c.233c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\crypt32.dll)
5841a0c.233c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\crypt32.dll
5851a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msasn1.dll'...
5861a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msasn1.dll' -> '\Device\HarddiskVolume3\Windows\System32\msasn1.dll' [rcNtRedir=0xc0150008]
5871a0c.233c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\msasn1.dll)
5881a0c.233c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\msasn1.dll
5891a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
5901a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
5911a0c.233c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\msvcrt.dll)
5921a0c.233c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\msvcrt.dll
5931a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msasn1.dll'...
5941a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msasn1.dll' -> '\Device\HarddiskVolume3\Windows\System32\msasn1.dll' [rcNtRedir=0xc0150008]
5951a0c.233c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msasn1.dll [lacks WinVerifyTrust]
5961a0c.233c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\Wintrust.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
5971a0c.233c: supR3HardenedDllNotificationCallback: load 00007fffaf470000 LB 0x0009e000 C:\WINDOWS\System32\msvcrt.dll [fFlags=0x0]
5981a0c.233c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
5991a0c.233c: supR3HardenedDllNotificationCallback: load 00007fffadc70000 LB 0x00012000 C:\WINDOWS\System32\MSASN1.dll [fFlags=0x0]
6001a0c.233c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msasn1.dll [lacks WinVerifyTrust]
6011a0c.233c: supR3HardenedDllNotificationCallback: load 00007fffae400000 LB 0x000fa000 C:\WINDOWS\System32\ucrtbase.dll [fFlags=0x0]
6021a0c.233c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\ucrtbase.dll)
6031a0c.233c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll
6041a0c.233c: supR3HardenedDllNotificationCallback: load 00007fffaeb00000 LB 0x001db000 C:\WINDOWS\System32\CRYPT32.dll [fFlags=0x0]
6051a0c.233c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll [lacks WinVerifyTrust]
6061a0c.233c: supR3HardenedDllNotificationCallback: load 00007fffaf210000 LB 0x00122000 C:\WINDOWS\System32\RPCRT4.dll [fFlags=0x0]
6071a0c.233c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
6081a0c.233c: supR3HardenedDllNotificationCallback: load 00007fffaea80000 LB 0x00059000 C:\WINDOWS\System32\Wintrust.dll [fFlags=0x0]
6091a0c.233c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
6101a0c.233c: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-synch-l1-2-0) -> 0x0, fPresent=1
6111a0c.233c: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-synch-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
6121a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffae760000 'api-ms-win-core-synch-l1-2-0'
6131a0c.233c: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-fibers-l1-1-1) -> 0x0, fPresent=1
6141a0c.233c: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-fibers-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
6151a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffae760000 'api-ms-win-core-fibers-l1-1-1'
6161a0c.233c: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-fibers-l1-1-1) -> 0x0, fPresent=1
6171a0c.233c: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-fibers-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
6181a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffae760000 'api-ms-win-core-fibers-l1-1-1'
6191a0c.233c: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-synch-l1-2-0) -> 0x0, fPresent=1
6201a0c.233c: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-synch-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
6211a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffae760000 'api-ms-win-core-synch-l1-2-0'
6221a0c.233c: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-localization-l1-2-1) -> 0x0, fPresent=1
6231a0c.233c: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-l1-2-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
6241a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffae760000 'api-ms-win-core-localization-l1-2-1'
6251a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaea80000 'C:\WINDOWS\system32\Wintrust.dll'
6261a0c.233c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\bcrypt.dll)
6271a0c.233c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\bcrypt.dll
6281a0c.233c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\bcrypt.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
6291a0c.233c: supR3HardenedDllNotificationCallback: load 00007fffaea00000 LB 0x00026000 C:\WINDOWS\System32\bcrypt.dll [fFlags=0x0]
6301a0c.233c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\bcrypt.dll [lacks WinVerifyTrust]
6311a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaea00000 'C:\WINDOWS\system32\bcrypt.dll'
6321a0c.233c: bcrypt.dll loaded at 00007fffaea00000, BCryptOpenAlgorithmProvider at 00007fffaea04d60, preloading providers:
6331a0c.233c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll)
6341a0c.233c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll
6351a0c.233c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\bcryptprimitives.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
6361a0c.233c: supR3HardenedDllNotificationCallback: load 00007fffaece0000 LB 0x0007e000 C:\WINDOWS\System32\bcryptprimitives.dll [fFlags=0x0]
6371a0c.233c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll [lacks WinVerifyTrust]
6381a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaece0000 'C:\WINDOWS\system32\bcryptprimitives.dll'
6391a0c.233c: BCryptOpenAlgorithmProvider(,'MD2',0,0) -> 0x0 (hAlgo=0000000000cd0c10)
6401a0c.233c: BCryptOpenAlgorithmProvider(,'MD4',0,0) -> 0x0 (hAlgo=0000000000cd1160)
6411a0c.233c: BCryptOpenAlgorithmProvider(,'MD5',0,0) -> 0x0 (hAlgo=0000000000cd1460)
6421a0c.233c: BCryptOpenAlgorithmProvider(,'SHA1',0,0) -> 0x0 (hAlgo=0000000000cd1760)
6431a0c.233c: BCryptOpenAlgorithmProvider(,'SHA256',0,0) -> 0x0 (hAlgo=0000000000cd1a60)
6441a0c.233c: BCryptOpenAlgorithmProvider(,'SHA512',0,0) -> 0x0 (hAlgo=0000000000cd1d60)
6451a0c.233c: BCryptOpenAlgorithmProvider(,'RSA',0,0) -> 0x0 (hAlgo=0000000000cd2060)
6461a0c.233c: BCryptOpenAlgorithmProvider(,'DSA',0,0) -> 0x0 (hAlgo=0000000000cd2360)
6471a0c.233c: supR3HardenedDllNotificationCallback: load 00007fffae500000 LB 0x00017000 C:\WINDOWS\System32\CRYPTSP.dll [fFlags=0x0]
6481a0c.233c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\cryptsp.dll)
6491a0c.233c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\cryptsp.dll
6501a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #18 'bcrypt.dll'.
6511a0c.233c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\rsaenh.dll)
6521a0c.233c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
6531a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcrypt.dll'...
6541a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcrypt.dll' -> '\Device\HarddiskVolume3\Windows\System32\bcrypt.dll' [rcNtRedir=0xc0150008]
6551a0c.233c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\bcrypt.dll [lacks WinVerifyTrust]
6561a0c.233c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
6571a0c.233c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
6581a0c.233c: supR3HardenedDllNotificationCallback: load 00007fffaccd0000 LB 0x00033000 C:\WINDOWS\system32\rsaenh.dll [fFlags=0x0]
6591a0c.233c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
6601a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaccd0000 'C:\WINDOWS\system32\rsaenh.dll'
6611a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'bcryptprimitives.dll'.
6621a0c.233c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\cryptbase.dll)
6631a0c.233c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\cryptbase.dll
6641a0c.233c: supR3HardenedDllNotificationCallback: load 00007fffad520000 LB 0x0000c000 C:\WINDOWS\SYSTEM32\CRYPTBASE.dll [fFlags=0x0]
6651a0c.233c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\cryptbase.dll [lacks WinVerifyTrust]
6661a0c.233c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
6671a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcryptprimitives.dll'...
6681a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcryptprimitives.dll' -> '\Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll' [rcNtRedir=0xc0150008]
6691a0c.233c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll [lacks WinVerifyTrust]
6701a0c.233c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\kernel32.dll (Input=kernel32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
6711a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaf3a0000 'C:\WINDOWS\System32\kernel32.dll'
6721a0c.233c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
6731a0c.233c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\WINTRUST.DLL (Input=WINTRUST.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
6741a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaea80000 'C:\WINDOWS\System32\WINTRUST.DLL'
6751a0c.233c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll [lacks WinVerifyTrust]
6761a0c.233c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\CRYPT32.dll (rcNtResolve=0xc0150008) *pfFlags=0x2 pwszSearchPath=0000000000000001:<flags> [calling]
6771a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaeb00000 'C:\WINDOWS\System32\CRYPT32.dll'
6781a0c.233c: supR3HardenedDllNotificationCallback: load 00007fffafb30000 LB 0x0001d000 C:\WINDOWS\System32\imagehlp.dll [fFlags=0x0]
6791a0c.233c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\imagehlp.dll)
6801a0c.233c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\imagehlp.dll
6811a0c.233c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
6821a0c.233c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
6831a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaccd0000 'C:\WINDOWS\system32\rsaenh.dll'
6841a0c.233c: supR3HardenedDllNotificationCallback: load 00007fffaee90000 LB 0x0009e000 C:\WINDOWS\System32\sechost.dll [fFlags=0x0]
6851a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'rpcrt4.dll'.
6861a0c.233c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\sechost.dll)
6871a0c.233c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\sechost.dll
6881a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
6891a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'rpcrt4.dll'.
6901a0c.233c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\gpapi.dll)
6911a0c.233c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\gpapi.dll
6921a0c.233c: supR3HardenedDllNotificationCallback: load 00007fffac480000 LB 0x00022000 C:\WINDOWS\SYSTEM32\gpapi.dll [fFlags=0x0]
6931a0c.233c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gpapi.dll [lacks WinVerifyTrust]
6941a0c.233c: supR3HardenedDllNotificationCallback: load 00007fffadbe0000 LB 0x00024000 C:\WINDOWS\System32\profapi.dll [fFlags=0x0]
6951a0c.233c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\profapi.dll)
6961a0c.233c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\profapi.dll
6971a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
6981a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'crypt32.dll'.
6991a0c.233c: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\cryptnet.dll)
7001a0c.233c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\cryptnet.dll
7011a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'crypt32.dll'...
7021a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'crypt32.dll' -> '\Device\HarddiskVolume3\Windows\System32\crypt32.dll' [rcNtRedir=0xc0150008]
7031a0c.233c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll [lacks WinVerifyTrust]
7041a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
7051a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
7061a0c.233c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
7071a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
7081a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
7091a0c.233c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
7101a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
7111a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
7121a0c.233c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
7131a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
7141a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
7151a0c.233c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
7161a0c.233c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\cryptnet.dll (Input=cryptnet.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
7171a0c.233c: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
7181a0c.233c: supR3HardenedDllNotificationCallback: load 00007fff88340000 LB 0x0002f000 C:\WINDOWS\System32\cryptnet.dll [fFlags=0x0]
7191a0c.233c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
7201a0c.233c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
7211a0c.233c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x2 pwszSearchPath=0000000000000001:<flags> [calling]
7221a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff88340000 'C:\WINDOWS\System32\cryptnet.dll'
7231a0c.233c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
7241a0c.233c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x2 pwszSearchPath=0000000000000001:<flags> [calling]
7251a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff88340000 'C:\WINDOWS\System32\cryptnet.dll'
7261a0c.233c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
7271a0c.233c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x2 pwszSearchPath=0000000000000001:<flags> [calling]
7281a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff88340000 'C:\WINDOWS\System32\cryptnet.dll'
7291a0c.233c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
7301a0c.233c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x2 pwszSearchPath=0000000000000001:<flags> [calling]
7311a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff88340000 'C:\WINDOWS\System32\cryptnet.dll'
7321a0c.233c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
7331a0c.233c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x2 pwszSearchPath=0000000000000001:<flags> [calling]
7341a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff88340000 'C:\WINDOWS\System32\cryptnet.dll'
7351a0c.233c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
7361a0c.233c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x2 pwszSearchPath=0000000000000001:<flags> [calling]
7371a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff88340000 'C:\WINDOWS\System32\cryptnet.dll'
7381a0c.233c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
7391a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff88340000 'C:\WINDOWS\System32\cryptnet.dll'
7401a0c.233c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
7411a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff88340000 'C:\WINDOWS\System32\cryptnet.dll'
7421a0c.233c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
7431a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff88340000 'C:\WINDOWS\System32\cryptnet.dll'
7441a0c.233c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
7451a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff88340000 'C:\WINDOWS\System32\cryptnet.dll'
7461a0c.233c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
7471a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff88340000 'C:\WINDOWS\System32\cryptnet.dll'
7481a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff88340000 'C:\WINDOWS\System32\cryptnet.dll'
7491a0c.233c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
7501a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff88340000 'C:\Windows\System32\cryptnet.dll'
7511a0c.233c: supR3HardenedDllNotificationCallback: load 00007fffafa50000 LB 0x000a3000 C:\WINDOWS\System32\advapi32.dll [fFlags=0x0]
7521a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
7531a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'sechost.dll'.
7541a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #27 'rpcrt4.dll'.
7551a0c.233c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\advapi32.dll)
7561a0c.233c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\advapi32.dll
7571a0c.233c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
7581a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
7591a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
7601a0c.233c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
7611a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'sechost.dll'...
7621a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'sechost.dll' -> '\Device\HarddiskVolume3\Windows\System32\sechost.dll' [rcNtRedir=0xc0150008]
7631a0c.233c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\sechost.dll [lacks WinVerifyTrust]
7641a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
7651a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
7661a0c.233c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
7671a0c.233c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
7681a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaccd0000 'C:\WINDOWS\system32\rsaenh.dll'
7691a0c.233c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll [lacks WinVerifyTrust]
7701a0c.233c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\crypt32.dll (Input=crypt32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
7711a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaeb00000 'C:\WINDOWS\System32\crypt32.dll'
7721a0c.233c: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000000 pwszName=\SystemRoot\System32\ntdll.dll
7731a0c.233c: supR3HardNtViCallWinVerifyTrustCatFile: New context 0000000000d0e700
7741a0c.233c: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000d0e700
7751a0c.233c: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=41C90F26E88C181E61C61D8FE6FB6BC4B7273100
7761a0c.233c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
7771a0c.233c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\rpcrt4.dll (Input=rpcrt4.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
7781a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaf210000 'C:\WINDOWS\System32\rpcrt4.dll'
7791a0c.233c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
7801a0c.233c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
7811a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaccd0000 'C:\WINDOWS\system32\rsaenh.dll'
7821a0c.233c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll [lacks WinVerifyTrust]
7831a0c.233c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\crypt32.dll (Input=crypt32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
7841a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaeb00000 'C:\WINDOWS\System32\crypt32.dll'
7851a0c.233c: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1329_for_KB4530715~31bf3856ad364e35~amd64~~10.0.1.4.cat'; file='\SystemRoot\System32\ntdll.dll'
7861a0c.233c: g_pfnWinVerifyTrust=00007fffaea86370
7871a0c.233c: supR3HardenedScreenImage/preload: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll [redoing WinVerifyTrust]
7881a0c.233c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
7891a0c.233c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
7901a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaccd0000 'C:\WINDOWS\system32\rsaenh.dll'
7911a0c.233c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll [lacks WinVerifyTrust]
7921a0c.233c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\crypt32.dll (Input=crypt32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
7931a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaeb00000 'C:\WINDOWS\System32\crypt32.dll'
7941a0c.233c: supR3HardenedScreenImage/preload: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\crypt32.dll'
7951a0c.233c: supR3HardenedScreenImage/preload: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wintrust.dll [redoing WinVerifyTrust]
7961a0c.233c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
7971a0c.233c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
7981a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaccd0000 'C:\WINDOWS\system32\rsaenh.dll'
7991a0c.233c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll
8001a0c.233c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\crypt32.dll (Input=crypt32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
8011a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaeb00000 'C:\WINDOWS\System32\crypt32.dll'
8021a0c.233c: supR3HardenedScreenImage/preload: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\wintrust.dll'
8031a0c.233c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
8041a0c.233c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
8051a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaccd0000 'C:\WINDOWS\system32\rsaenh.dll'
8061a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaeb00000 'C:\WINDOWS\System32\crypt32.dll'
8071a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\advapi32.dll'
8081a0c.233c: supR3HardNtViCallWinVerifyTrustCatFile: hFile=000000000000037c pwszName=\Device\HarddiskVolume3\Windows\System32\cryptnet.dll
8091a0c.233c: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000000d0e700
8101a0c.233c: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000d0e700
8111a0c.233c: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=A71FAF93E7F6555CF5752D6A603A870E378E49E6
8121a0c.233c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
8131a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaccd0000 'C:\WINDOWS\system32\rsaenh.dll'
8141a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaeb00000 'C:\WINDOWS\System32\crypt32.dll'
8151a0c.233c: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0316~31bf3856ad364e35~amd64~~10.0.17763.1.cat'; file='\Device\HarddiskVolume3\Windows\System32\cryptnet.dll'
8161a0c.233c: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
8171a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\cryptnet.dll'
8181a0c.233c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
8191a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaccd0000 'C:\WINDOWS\system32\rsaenh.dll'
8201a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaeb00000 'C:\WINDOWS\System32\crypt32.dll'
8211a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\profapi.dll'
8221a0c.233c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
8231a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaccd0000 'C:\WINDOWS\system32\rsaenh.dll'
8241a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaeb00000 'C:\WINDOWS\System32\crypt32.dll'
8251a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\gpapi.dll'
8261a0c.233c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
8271a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaccd0000 'C:\WINDOWS\system32\rsaenh.dll'
8281a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaeb00000 'C:\WINDOWS\System32\crypt32.dll'
8291a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\sechost.dll'
8301a0c.233c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
8311a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaccd0000 'C:\WINDOWS\system32\rsaenh.dll'
8321a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaeb00000 'C:\WINDOWS\System32\crypt32.dll'
8331a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\imagehlp.dll'
8341a0c.233c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
8351a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaccd0000 'C:\WINDOWS\system32\rsaenh.dll'
8361a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaeb00000 'C:\WINDOWS\System32\crypt32.dll'
8371a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\cryptbase.dll'
8381a0c.233c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
8391a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaccd0000 'C:\WINDOWS\system32\rsaenh.dll'
8401a0c.233c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll
8411a0c.233c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\crypt32.dll (Input=crypt32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
8421a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaeb00000 'C:\WINDOWS\System32\crypt32.dll'
8431a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\rsaenh.dll'
8441a0c.233c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
8451a0c.233c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
8461a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaccd0000 'C:\WINDOWS\system32\rsaenh.dll'
8471a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaeb00000 'C:\WINDOWS\System32\crypt32.dll'
8481a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\cryptsp.dll'
8491a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaccd0000 'C:\WINDOWS\system32\rsaenh.dll'
8501a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaeb00000 'C:\WINDOWS\System32\crypt32.dll'
8511a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll'
8521a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaccd0000 'C:\WINDOWS\system32\rsaenh.dll'
8531a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaeb00000 'C:\WINDOWS\System32\crypt32.dll'
8541a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\bcrypt.dll'
8551a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaccd0000 'C:\WINDOWS\system32\rsaenh.dll'
8561a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaeb00000 'C:\WINDOWS\System32\crypt32.dll'
8571a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\ucrtbase.dll'
8581a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaccd0000 'C:\WINDOWS\system32\rsaenh.dll'
8591a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaeb00000 'C:\WINDOWS\System32\crypt32.dll'
8601a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll'
8611a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaccd0000 'C:\WINDOWS\system32\rsaenh.dll'
8621a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaeb00000 'C:\WINDOWS\System32\crypt32.dll'
8631a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\msasn1.dll'
8641a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaccd0000 'C:\WINDOWS\system32\rsaenh.dll'
8651a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaeb00000 'C:\WINDOWS\System32\crypt32.dll'
8661a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll'
8671a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaccd0000 'C:\WINDOWS\system32\rsaenh.dll'
8681a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 24202) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxSupLib.dll'
8691a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaccd0000 'C:\WINDOWS\system32\rsaenh.dll'
8701a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 24202) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe'
8711a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaccd0000 'C:\WINDOWS\system32\rsaenh.dll'
8721a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaeb00000 'C:\WINDOWS\System32\crypt32.dll'
8731a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\KernelBase.dll'
8741a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaccd0000 'C:\WINDOWS\system32\rsaenh.dll'
8751a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaeb00000 'C:\WINDOWS\System32\crypt32.dll'
8761a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\kernel32.dll'
8771a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaeb00000 'C:\WINDOWS\system32\crypt32.dll'
8781a0c.233c: supR3HardenedWinIsDesiredRootCA: Adding 0x5ad46780fa5df300 DC=com, DC=microsoft, CN=Microsoft Root Certificate Authority
8791a0c.233c: supR3HardenedWinIsDesiredRootCA: Adding 0xea5386456178582b C=ZA, ST=Western Cape, L=Durbanville, O=Thawte, OU=Thawte Certification, CN=Thawte Timestamping CA
8801a0c.233c: supR3HardenedWinIsDesiredRootCA: Adding 0x3be670c1bd02a900 OU=Copyright (c) 1997 Microsoft Corp., OU=Microsoft Corporation, CN=Microsoft Root Authority
8811a0c.233c: supR3HardenedWinIsDesiredRootCA: Adding 0xe991ee72b03db500 C=US, O=Symantec Corporation, CN=Symantec Enterprise Mobile Root for Microsoft
8821a0c.233c: supR3HardenedWinIsDesiredRootCA: Adding 0x4d3835aa4180b200 C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Root Certificate Authority 2011
8831a0c.233c: supR3HardenedWinIsDesiredRootCA: Adding 0x646e3fe3ba08df00 C=US, O=MSFT, CN=Microsoft Authenticode(tm) Root Authority
8841a0c.233c: supR3HardenedWinIsDesiredRootCA: Adding 0x652f1669e82ad900 CN=DESKTOP-OFS2MB3
8851a0c.233c: supR3HardenedWinIsDesiredRootCA: Adding 0xece4e4289e08b900 C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Root Certificate Authority 2010
8861a0c.233c: supR3HardenedWinIsDesiredRootCA: Adding 0xf3bb4d7e894b420 C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft ECC TS Root Certificate Authority 2018
8871a0c.233c: supR3HardenedWinIsDesiredRootCA: Adding 0x43a9cc371ff5385a O=Microsoft Trust Network, OU=Microsoft Corporation, OU=Microsoft Time Stamping Service Root, OU=Copyright (c) 1997 Microsoft Corp.
8881a0c.233c: supR3HardenedWinIsDesiredRootCA: Adding 0x2e2d2c7c68f0202e O=VeriSign Trust Network, OU=VeriSign, Inc., OU=VeriSign Time Stamping Service Root, OU=NO LIABILITY ACCEPTED, (c)97 VeriSign, Inc.
8891a0c.233c: supR3HardenedWinIsDesiredRootCA: Adding 0xf99d8f3e8a37d100 CN=Microsoft Intune Root Certification Authority
8901a0c.233c: supR3HardenedWinIsDesiredRootCA: Adding 0xcec3d46562b9be8e C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft ECC Product Root Certificate Authority 2018
8911a0c.233c: supR3HardenedWinIsDesiredRootCA: Adding 0xa12b07674f1bf600 C=US, O=AffirmTrust, CN=AffirmTrust Commercial
8921a0c.233c: supR3HardenedWinIsDesiredRootCA: Adding 0x6b7bdc34cd37bb00 C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root G2
8931a0c.233c: supR3HardenedWinIsDesiredRootCA: Adding 0x57ba5395b561bf00 C=BM, O=QuoVadis Limited, OU=Root Certification Authority, CN=QuoVadis Root Certification Authority
8941a0c.233c: supR3HardenedWinIsDesiredRootCA: Adding 0x83085097e9afdf00 O=Digital Signature Trust Co., CN=DST Root CA X3
8951a0c.233c: supR3HardenedWinIsDesiredRootCA: Adding 0x780679907625cc00 OU=GlobalSign Root CA - R3, O=GlobalSign, CN=GlobalSign
8961a0c.233c: supR3HardenedWinIsDesiredRootCA: Adding 0x3d98ab22bb04a300 C=IE, O=Baltimore, OU=CyberTrust, CN=Baltimore CyberTrust Root
8971a0c.233c: supR3HardenedWinIsDesiredRootCA: Adding 0xd944bca189a00 C=BM, O=QuoVadis Limited, CN=QuoVadis Root CA 2
8981a0c.233c: supR3HardenedWinIsDesiredRootCA: Adding 0x8ff6fc03c1edbd00 C=US, ST=Arizona, L=Scottsdale, O=Starfield Technologies, Inc., CN=Starfield Root Certificate Authority - G2
8991a0c.233c: supR3HardenedWinIsDesiredRootCA: Adding 0xc6fa4243b695b600 C=US, O=Entrust, Inc., OU=www.entrust.net/CPS is incorporated by reference, OU=(c) 2006 Entrust, Inc., CN=Entrust Root Certification Authority
9001a0c.233c: supR3HardenedWinIsDesiredRootCA: Adding 0xa3ce8d99e60eda00 C=BE, O=GlobalSign nv-sa, OU=Root CA, CN=GlobalSign Root CA
9011a0c.233c: supR3HardenedWinIsDesiredRootCA: Adding 0x560ad29254e89100 C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO RSA Certification Authority
9021a0c.233c: supR3HardenedWinIsDesiredRootCA: Adding 0xa671e9fec832b700 C=US, O=Starfield Technologies, Inc., OU=Starfield Class 2 Certification Authority
9031a0c.233c: supR3HardenedWinIsDesiredRootCA: Adding 0xa8de7211e13be200 C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root CA
9041a0c.233c: supR3HardenedWinIsDesiredRootCA: Adding 0xc9edb72b684ba00 C=US, O=Entrust, Inc., OU=See www.entrust.net/legal-terms, OU=(c) 2009 Entrust, Inc. - for authorized use only, CN=Entrust Root Certification Authority - G2
9051a0c.233c: supR3HardenedWinIsDesiredRootCA: Adding 0xf5cd95e581a4ab00 C=US, O=SecureTrust Corporation, CN=SecureTrust CA
9061a0c.233c: supR3HardenedWinIsDesiredRootCA: Adding 0x6f2ebe0e24cfa600 OU=GlobalSign Root CA - R2, O=GlobalSign, CN=GlobalSign
9071a0c.233c: supR3HardenedWinIsDesiredRootCA: Adding 0x14018a1bf29e595c C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification Authority
9081a0c.233c: supR3HardenedWinIsDesiredRootCA: Adding 0x7c4fd32ec1b1ce00 C=PL, O=Unizeto Sp. z o.o., CN=Certum CA
9091a0c.233c: supR3HardenedWinIsDesiredRootCA: Adding 0xd4fbe673e5ccc600 C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert High Assurance EV Root CA
9101a0c.233c: supR3HardenedWinIsDesiredRootCA: Adding 0x1b8578514b74ac00 C=US, O=WFA Hotspot 2.0, CN=Hotspot 2.0 Trust Root CA - 03
9111a0c.233c: supR3HardenedWinIsDesiredRootCA: Adding 0x357a29080824af00 C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. - For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority - G5
9121a0c.233c: supR3HardenedWinIsDesiredRootCA: Adding 0x59faf1086271bf00 C=US, ST=Arizona, L=Scottsdale, O=GoDaddy.com, Inc., CN=Go Daddy Root Certificate Authority - G2
9131a0c.233c: supR3HardenedWinIsDesiredRootCA: Adding 0x466cbc09db88c100 C=IL, O=StartCom Ltd., OU=Secure Digital Certificate Signing, CN=StartCom Certification Authority
9141a0c.233c: supR3HardenedWinIsDesiredRootCA: Adding 0x3401b15e3761c700 C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2008 VeriSign, Inc. - For authorized use only, CN=VeriSign Universal Root Certification Authority
9151a0c.233c: supR3HardenedWinIsDesiredRootCA: Adding 0xc30e361765128000 C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority
9161a0c.233c: supR3HardenedWinIsDesiredRootCA: Adding 0x491857ead79dde00 C=US, O=The Go Daddy Group, Inc., OU=Go Daddy Class 2 Certification Authority
9171a0c.233c: supR3HardenedWinIsDesiredRootCA: Adding 0xc2ba72a37dfbe300 C=PL, O=Unizeto Technologies S.A., OU=Certum Certification Authority, CN=Certum Trusted Network CA
9181a0c.233c: supR3HardenedWinIsDesiredRootCA: Adding 0x8043e4ce150ead00 C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Assured ID Root CA
9191a0c.233c: supR3HardenedWinIsDesiredRootCA: Adding 0xf2e6331af7b700 C=SE, O=AddTrust AB, OU=AddTrust External TTP Network, CN=AddTrust External CA Root
9201a0c.233c: supR3HardenedWinRetrieveTrustedRootCAs: cAdded=42
9211a0c.233c: SUPR3HardenedMain: Load Runtime...
9221a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaccd0000 'C:\WINDOWS\system32\rsaenh.dll'
9231a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
9241a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp100.dll'.
9251a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'rpcrt4.dll'.
9261a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'ws2_32.dll'.
9271a0c.233c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll) WinVerifyTrust
9281a0c.233c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll
9291a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
9301a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
9311a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaccd0000 'C:\WINDOWS\system32\rsaenh.dll'
9321a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaeb00000 'C:\WINDOWS\System32\crypt32.dll'
9331a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #26 'rpcrt4.dll'.
9341a0c.233c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\ws2_32.dll) WinVerifyTrust
9351a0c.233c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\ws2_32.dll
9361a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
9371a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
9381a0c.233c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll
9391a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
9401a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
9411a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
9421a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
9431a0c.233c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll
9441a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaccd0000 'C:\WINDOWS\system32\rsaenh.dll'
9451a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
9461a0c.233c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll) WinVerifyTrust
9471a0c.233c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll
9481a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
9491a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
9501a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
9511a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
9521a0c.233c: Detected WinVerifyTrust recursion: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
9531a0c.233c: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll)
9541a0c.233c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll
9551a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaccd0000 'C:\WINDOWS\system32\rsaenh.dll'
9561a0c.233c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll) WinVerifyTrust
9571a0c.233c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000a01:<flags> [calling]
9581a0c.233c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll
9591a0c.233c: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [avoiding WinVerifyTrust]
9601a0c.233c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll
9611a0c.233c: supR3HardenedDllNotificationCallback: load 000000006d060000 LB 0x000d2000 C:\Program Files\Oracle\VirtualBox\MSVCR100.dll [fFlags=0x0]
9621a0c.233c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [avoiding WinVerifyTrust]
9631a0c.233c: supR3HardenedDllNotificationCallback: load 000000006c4e0000 LB 0x00098000 C:\Program Files\Oracle\VirtualBox\MSVCP100.dll [fFlags=0x0]
9641a0c.233c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll
9651a0c.233c: supR3HardenedDllNotificationCallback: load 00007fffb1b50000 LB 0x0006d000 C:\WINDOWS\System32\WS2_32.dll [fFlags=0x0]
9661a0c.233c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ws2_32.dll
9671a0c.233c: supR3HardenedDllNotificationCallback: load 00007fff6a940000 LB 0x005e7000 C:\Program Files\Oracle\VirtualBox\VBoxRT.dll [fFlags=0x0]
9681a0c.233c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll
9691a0c.233c: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
9701a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
9711a0c.233c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll
9721a0c.233c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
9731a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff6a940000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9741a0c.233c: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
9751a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
9761a0c.233c: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
9771a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
9781a0c.233c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll
9791a0c.233c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
9801a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff6a940000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9811a0c.233c: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
9821a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
9831a0c.233c: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
9841a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
9851a0c.233c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll
9861a0c.233c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
9871a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff6a940000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9881a0c.233c: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
9891a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
9901a0c.233c: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
9911a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
9921a0c.233c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll
9931a0c.233c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
9941a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff6a940000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9951a0c.233c: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
9961a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
9971a0c.233c: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
9981a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
9991a0c.233c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll
10001a0c.233c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
10011a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff6a940000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10021a0c.233c: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10031a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10041a0c.233c: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10051a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10061a0c.233c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll
10071a0c.233c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
10081a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff6a940000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10091a0c.233c: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10101a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10111a0c.233c: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10121a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10131a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff6a940000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10141a0c.233c: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10151a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10161a0c.233c: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10171a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10181a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff6a940000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10191a0c.233c: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10201a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10211a0c.233c: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10221a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10231a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff6a940000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10241a0c.233c: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10251a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10261a0c.233c: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10271a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10281a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff6a940000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10291a0c.233c: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10301a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10311a0c.233c: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10321a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10331a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff6a940000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10341a0c.233c: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10351a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10361a0c.233c: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10371a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10381a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff6a940000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10391a0c.233c: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10401a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10411a0c.233c: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10421a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10431a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff6a940000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10441a0c.233c: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10451a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10461a0c.233c: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10471a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10481a0c.233c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll
10491a0c.233c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
10501a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff6a940000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10511a0c.233c: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10521a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10531a0c.233c: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10541a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10551a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff6a940000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10561a0c.233c: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10571a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10581a0c.233c: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10591a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10601a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff6a940000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10611a0c.233c: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10621a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10631a0c.233c: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10641a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10651a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff6a940000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10661a0c.233c: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10671a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10681a0c.233c: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10691a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10701a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff6a940000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10711a0c.233c: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10721a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10731a0c.233c: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10741a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10751a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff6a940000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10761a0c.233c: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10771a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10781a0c.233c: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10791a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10801a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff6a940000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10811a0c.233c: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10821a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10831a0c.233c: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10841a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10851a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff6a940000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10861a0c.233c: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10871a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10881a0c.233c: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10891a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10901a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff6a940000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10911a0c.233c: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10921a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10931a0c.233c: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10941a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10951a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff6a940000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10961a0c.233c: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10971a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10981a0c.233c: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10991a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11001a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff6a940000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11011a0c.233c: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11021a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11031a0c.233c: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11041a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11051a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff6a940000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11061a0c.233c: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11071a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11081a0c.233c: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11091a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11101a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff6a940000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11111a0c.233c: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11121a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11131a0c.233c: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11141a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11151a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff6a940000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11161a0c.233c: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11171a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11181a0c.233c: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11191a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11201a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff6a940000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11211a0c.233c: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11221a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11231a0c.233c: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11241a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11251a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff6a940000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11261a0c.233c: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11271a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11281a0c.233c: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11291a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11301a0c.233c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll
11311a0c.233c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
11321a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff6a940000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11331a0c.233c: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11341a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11351a0c.233c: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11361a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11371a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff6a940000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11381a0c.233c: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11391a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11401a0c.233c: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11411a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11421a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff6a940000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11431a0c.233c: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11441a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11451a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff6a940000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11461a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaccd0000 'C:\WINDOWS\system32\rsaenh.dll'
11471a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 24202) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'
11481a0c.233c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wintrust.dll
11491a0c.233c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\Wintrust.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
11501a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaea80000 'C:\WINDOWS\system32\Wintrust.dll'
11511a0c.233c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
11521a0c.233c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
11531a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaccd0000 'C:\WINDOWS\system32\rsaenh.dll'
11541a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaeb00000 'C:\WINDOWS\System32\crypt32.dll'
11551a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaccd0000 'C:\WINDOWS\system32\rsaenh.dll'
11561a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaeb00000 'C:\WINDOWS\System32\crypt32.dll'
11571a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaeb00000 'C:\WINDOWS\system32\crypt32.dll'
11581a0c.233c: SUPR3HardenedMain: Load TrustedMain...
11591a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaccd0000 'C:\WINDOWS\system32\rsaenh.dll'
11601a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'opengl32.dll'.
11611a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'uicommon.dll'.
11621a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxrt.dll'.
11631a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'msvcp100.dll'.
11641a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'msvcr100.dll'.
11651a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'qt5corevbox.dll'.
11661a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'qt5guivbox.dll'.
11671a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'qt5widgetsvbox.dll'.
11681a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'qt5openglvbox.dll'.
11691a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'user32.dll'.
11701a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'ole32.dll'.
11711a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'oleaut32.dll'.
11721a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #13 'winmm.dll'.
11731a0c.233c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll) WinVerifyTrust
11741a0c.233c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll
11751a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
11761a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume3\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008]
11771a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaccd0000 'C:\WINDOWS\system32\rsaenh.dll'
11781a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaeb00000 'C:\WINDOWS\System32\crypt32.dll'
11791a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'winmmbase.dll'.
11801a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'msvcrt.dll'.
11811a0c.233c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\winmm.dll) WinVerifyTrust
11821a0c.233c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\winmm.dll
11831a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
11841a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
11851a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
11861a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
11871a0c.233c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll
11881a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmmbase.dll'...
11891a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmmbase.dll' -> '\Device\HarddiskVolume3\Windows\System32\winmmbase.dll' [rcNtRedir=0xc0150008]
11901a0c.233c: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\winmmbase.dll'.
11911a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
11921a0c.233c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\winmmbase.dll)
11931a0c.233c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\winmmbase.dll
11941a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
11951a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
11961a0c.233c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll
11971a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaccd0000 'C:\WINDOWS\system32\rsaenh.dll'
11981a0c.233c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll
11991a0c.233c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\crypt32.dll (Input=crypt32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
12001a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaeb00000 'C:\WINDOWS\System32\crypt32.dll'
12011a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcp_win.dll'.
12021a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'combase.dll'.
12031a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #23 'rpcrt4.dll'.
12041a0c.233c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\oleaut32.dll) WinVerifyTrust
12051a0c.233c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\oleaut32.dll
12061a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
12071a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
12081a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
12091a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
12101a0c.233c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll
12111a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
12121a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
12131a0c.233c: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\combase.dll'.
12141a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'rpcrt4.dll'.
12151a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #46 'bcryptprimitives.dll'.
12161a0c.233c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\combase.dll)
12171a0c.233c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\combase.dll
12181a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
12191a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
12201a0c.233c: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll'.
12211a0c.233c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll)
12221a0c.233c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll
12231a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcryptprimitives.dll'...
12241a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcryptprimitives.dll' -> '\Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll' [rcNtRedir=0xc0150008]
12251a0c.233c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll
12261a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
12271a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
12281a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaccd0000 'C:\WINDOWS\system32\rsaenh.dll'
12291a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaeb00000 'C:\WINDOWS\System32\crypt32.dll'
12301a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #25 'rpcrt4.dll'.
12311a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #55 'gdi32.dll'.
12321a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #56 'user32.dll'.
12331a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #57 'combase.dll'.
12341a0c.233c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\ole32.dll) WinVerifyTrust
12351a0c.233c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\ole32.dll
12361a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
12371a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
12381a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
12391a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
12401a0c.233c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\combase.dll [lacks WinVerifyTrust]
12411a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
12421a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
12431a0c.233c: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\user32.dll'.
12441a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'win32u.dll'.
12451a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #34 'gdi32.dll'.
12461a0c.233c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\user32.dll)
12471a0c.233c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\user32.dll
12481a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
12491a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
12501a0c.233c: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\gdi32.dll'.
12511a0c.233c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\gdi32.dll)
12521a0c.233c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\gdi32.dll
12531a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
12541a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
12551a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
12561a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
12571a0c.233c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
12581a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
12591a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
12601a0c.233c: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\win32u.dll'.
12611a0c.233c: '\Device\HarddiskVolume3\Windows\System32\win32u.dll' has no imports
12621a0c.233c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\win32u.dll)
12631a0c.233c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\win32u.dll
12641a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaccd0000 'C:\WINDOWS\system32\rsaenh.dll'
12651a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaeb00000 'C:\WINDOWS\System32\crypt32.dll'
12661a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'win32u.dll'.
12671a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #34 'gdi32.dll'.
12681a0c.233c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\user32.dll) WinVerifyTrust
12691a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5openglvbox.dll'...
12701a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5openglvbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5openglvbox.dll' [rcNtRedir=0xc0150008]
12711a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
12721a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
12731a0c.233c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
12741a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
12751a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
12761a0c.233c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\win32u.dll [lacks WinVerifyTrust]
12771a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaccd0000 'C:\WINDOWS\system32\rsaenh.dll'
12781a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'qt5widgetsvbox.dll'.
12791a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'qt5guivbox.dll'.
12801a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5corevbox.dll'.
12811a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'msvcr100.dll'.
12821a0c.233c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll) WinVerifyTrust
12831a0c.233c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll
12841a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5widgetsvbox.dll'...
12851a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5widgetsvbox.dll' [rcNtRedir=0xc0150008]
12861a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
12871a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
12881a0c.233c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll
12891a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
12901a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
12911a0c.233c: Detected WinVerifyTrust recursion: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll'.
12921a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'.
12931a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'shell32.dll'.
12941a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'ole32.dll'.
12951a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'advapi32.dll'.
12961a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'ws2_32.dll'.
12971a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'mpr.dll'.
12981a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'msvcp100.dll'.
12991a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'msvcr100.dll'.
13001a0c.233c: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll)
13011a0c.233c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll
13021a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
13031a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
13041a0c.233c: Detected WinVerifyTrust recursion: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll'.
13051a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'ole32.dll'.
13061a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'opengl32.dll'.
13071a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'gdi32.dll'.
13081a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
13091a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'qt5corevbox.dll'.
13101a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'msvcp100.dll'.
13111a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msvcr100.dll'.
13121a0c.233c: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll)
13131a0c.233c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll
13141a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5widgetsvbox.dll'...
13151a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5widgetsvbox.dll' [rcNtRedir=0xc0150008]
13161a0c.233c: Detected WinVerifyTrust recursion: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'.
13171a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'gdi32.dll'.
13181a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'.
13191a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5guivbox.dll'.
13201a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'qt5corevbox.dll'.
13211a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'shell32.dll'.
13221a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'msvcp100.dll'.
13231a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msvcr100.dll'.
13241a0c.233c: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll)
13251a0c.233c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll
13261a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
13271a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
13281a0c.233c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll
13291a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
13301a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
13311a0c.233c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll
13321a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
13331a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume3\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
13341a0c.233c: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\shell32.dll'.
13351a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
13361a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #75 'user32.dll'.
13371a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #77 'gdi32.dll'.
13381a0c.233c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\shell32.dll)
13391a0c.233c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\shell32.dll
13401a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
13411a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
13421a0c.233c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
13431a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
13441a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
13451a0c.233c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
13461a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
13471a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
13481a0c.233c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
13491a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
13501a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
13511a0c.233c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
13521a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
13531a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
13541a0c.233c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll
13551a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
13561a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
13571a0c.233c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll
13581a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
13591a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
13601a0c.233c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
13611a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
13621a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
13631a0c.233c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
13641a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
13651a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
13661a0c.233c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
13671a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
13681a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume3\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008]
13691a0c.233c: Detected WinVerifyTrust recursion: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume3\Windows\System32\opengl32.dll'.
13701a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
13711a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'advapi32.dll'.
13721a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
13731a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'gdi32.dll'.
13741a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'glu32.dll'.
13751a0c.233c: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\opengl32.dll)
13761a0c.233c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\opengl32.dll
13771a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
13781a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
13791a0c.233c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ole32.dll
13801a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
13811a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
13821a0c.233c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll
13831a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
13841a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
13851a0c.233c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll
13861a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mpr.dll'...
13871a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'mpr.dll' -> '\Device\HarddiskVolume3\Windows\System32\mpr.dll' [rcNtRedir=0xc0150008]
13881a0c.233c: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\mpr.dll'.
13891a0c.233c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\mpr.dll)
13901a0c.233c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\mpr.dll
13911a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
13921a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
13931a0c.233c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ws2_32.dll
13941a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
13951a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
13961a0c.233c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll
13971a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
13981a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
13991a0c.233c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ole32.dll
14001a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
14011a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume3\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
14021a0c.233c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll [lacks WinVerifyTrust]
14031a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
14041a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
14051a0c.233c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
14061a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'glu32.dll'...
14071a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'glu32.dll' -> '\Device\HarddiskVolume3\Windows\System32\glu32.dll' [rcNtRedir=0xc0150008]
14081a0c.233c: Detected WinVerifyTrust recursion: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume3\Windows\System32\glu32.dll'.
14091a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
14101a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'user32.dll'.
14111a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'opengl32.dll'.
14121a0c.233c: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\glu32.dll)
14131a0c.233c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\glu32.dll
14141a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
14151a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
14161a0c.233c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
14171a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
14181a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
14191a0c.233c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
14201a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
14211a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
14221a0c.233c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll
14231a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
14241a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
14251a0c.233c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll
14261a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
14271a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
14281a0c.233c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
14291a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
14301a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
14311a0c.233c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
14321a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
14331a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
14341a0c.233c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll
14351a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
14361a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume3\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008]
14371a0c.233c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\opengl32.dll [lacks WinVerifyTrust]
14381a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
14391a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
14401a0c.233c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
14411a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
14421a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
14431a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaccd0000 'C:\WINDOWS\system32\rsaenh.dll'
14441a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'gdi32.dll'.
14451a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'.
14461a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5guivbox.dll'.
14471a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'qt5corevbox.dll'.
14481a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'shell32.dll'.
14491a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'msvcp100.dll'.
14501a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msvcr100.dll'.
14511a0c.233c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll) WinVerifyTrust
14521a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
14531a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
14541a0c.233c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [redoing WinVerifyTrust]
14551a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
14561a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
14571a0c.233c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll
14581a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
14591a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
14601a0c.233c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll
14611a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
14621a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume3\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
14631a0c.233c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll [lacks WinVerifyTrust]
14641a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
14651a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
14661a0c.233c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
14671a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
14681a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
14691a0c.233c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
14701a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
14711a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
14721a0c.233c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
14731a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
14741a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
14751a0c.233c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
14761a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaccd0000 'C:\WINDOWS\system32\rsaenh.dll'
14771a0c.233c: supR3HardenedScreenImage/Imports: 0 (was 24202) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll'
14781a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
14791a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
14801a0c.233c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [redoing WinVerifyTrust]
14811a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaccd0000 'C:\WINDOWS\system32\rsaenh.dll'
14821a0c.233c: supR3HardenedScreenImage/Imports: 0 (was 24202) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll'
14831a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
14841a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
14851a0c.233c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll
14861a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
14871a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
14881a0c.233c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll
14891a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
14901a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
14911a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'uicommon.dll'...
14921a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'uicommon.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\uicommon.dll' [rcNtRedir=0xc0150008]
14931a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaccd0000 'C:\WINDOWS\system32\rsaenh.dll'
14941a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'vboxrt.dll'.
14951a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcr100.dll'.
14961a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5corevbox.dll'.
14971a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'qt5guivbox.dll'.
14981a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'qt5widgetsvbox.dll'.
14991a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'user32.dll'.
15001a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'advapi32.dll'.
15011a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'ole32.dll'.
15021a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'oleaut32.dll'.
15031a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'rpcrt4.dll'.
15041a0c.233c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\UICommon.dll) WinVerifyTrust
15051a0c.233c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\UICommon.dll
15061a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
15071a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume3\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008]
15081a0c.233c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\opengl32.dll [redoing WinVerifyTrust]
15091a0c.233c: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000000000003f8 pwszName=\Device\HarddiskVolume3\Windows\System32\opengl32.dll
15101a0c.233c: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000000d0e700
15111a0c.233c: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000d0e700
15121a0c.233c: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=F9EA7A084F8D34EE062D8C0EF5D96EF865883D56
15131a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
15141a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
15151a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
15161a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
15171a0c.233c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll
15181a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
15191a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
15201a0c.233c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ole32.dll
15211a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
15221a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
15231a0c.233c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll
15241a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
15251a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
15261a0c.233c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
15271a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5widgetsvbox.dll'...
15281a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5widgetsvbox.dll' [rcNtRedir=0xc0150008]
15291a0c.233c: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [lacks WinVerifyTrust]
15301a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
15311a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
15321a0c.233c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll
15331a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
15341a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
15351a0c.233c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll
15361a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
15371a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
15381a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
15391a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
15401a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaccd0000 'C:\WINDOWS\system32\rsaenh.dll'
15411a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaeb00000 'C:\WINDOWS\System32\crypt32.dll'
15421a0c.233c: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0112~31bf3856ad364e35~amd64~~10.0.17763.1.cat'; file='\Device\HarddiskVolume3\Windows\System32\opengl32.dll'
15431a0c.233c: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
15441a0c.233c: supR3HardenedScreenImage/Imports: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\opengl32.dll'
15451a0c.233c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000a01:<flags> [calling]
15461a0c.233c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll
15471a0c.233c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\opengl32.dll
15481a0c.233c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\UICommon.dll
15491a0c.233c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll
15501a0c.233c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll
15511a0c.233c: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [avoiding WinVerifyTrust]
15521a0c.233c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll
15531a0c.233c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmm.dll
15541a0c.233c: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\glu32.dll [avoiding WinVerifyTrust]
15551a0c.233c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\mpr.dll [avoiding WinVerifyTrust]
15561a0c.233c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmmbase.dll [avoiding WinVerifyTrust]
15571a0c.233c: supR3HardenedDllNotificationCallback: load 00007fffaeae0000 LB 0x00020000 C:\WINDOWS\System32\win32u.dll [fFlags=0x0]
15581a0c.233c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\win32u.dll [avoiding WinVerifyTrust]
15591a0c.233c: supR3HardenedDllNotificationCallback: load 00007fffae6c0000 LB 0x000a0000 C:\WINDOWS\System32\msvcp_win.dll [fFlags=0x0]
15601a0c.233c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll [avoiding WinVerifyTrust]
15611a0c.233c: supR3HardenedDllNotificationCallback: load 00007fffae520000 LB 0x00199000 C:\WINDOWS\System32\gdi32full.dll [fFlags=0x0]
15621a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcp_win.dll'.
15631a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #33 'gdi32.dll'.
15641a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #35 'user32.dll'.
15651a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #36 'win32u.dll'.
15661a0c.233c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\gdi32full.dll)
15671a0c.233c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\gdi32full.dll
15681a0c.233c: supR3HardenedDllNotificationCallback: load 00007fffafb00000 LB 0x00029000 C:\WINDOWS\System32\GDI32.dll [fFlags=0x0]
15691a0c.233c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [avoiding WinVerifyTrust]
15701a0c.233c: supR3HardenedDllNotificationCallback: load 00007fffaf720000 LB 0x00197000 C:\WINDOWS\System32\USER32.dll [fFlags=0x0]
15711a0c.233c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [avoiding WinVerifyTrust]
15721a0c.233c: supR3HardenedDllNotificationCallback: load 00007fff76050000 LB 0x0002c000 C:\WINDOWS\SYSTEM32\GLU32.dll [fFlags=0x0]
15731a0c.233c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\glu32.dll [avoiding WinVerifyTrust]
15741a0c.233c: supR3HardenedDllNotificationCallback: load 00007fff75ec0000 LB 0x00127000 C:\WINDOWS\SYSTEM32\OPENGL32.dll [fFlags=0x0]
15751a0c.233c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\opengl32.dll
15761a0c.233c: supR3HardenedDllNotificationCallback: load 00007fffaea30000 LB 0x0004a000 C:\WINDOWS\System32\cfgmgr32.dll [fFlags=0x0]
15771a0c.233c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll)
15781a0c.233c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll
15791a0c.233c: supR3HardenedDllNotificationCallback: load 00007fffb17c0000 LB 0x0032c000 C:\WINDOWS\System32\combase.dll [fFlags=0x0]
15801a0c.233c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\combase.dll [avoiding WinVerifyTrust]
15811a0c.233c: supR3HardenedDllNotificationCallback: load 00007fffb0160000 LB 0x000a8000 C:\WINDOWS\System32\shcore.dll [fFlags=0x0]
15821a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
15831a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #36 'rpcrt4.dll'.
15841a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #43 'combase.dll'.
15851a0c.233c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\SHCore.dll)
15861a0c.233c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\SHCore.dll
15871a0c.233c: supR3HardenedDllNotificationCallback: load 00007fffadc10000 LB 0x0005d000 C:\WINDOWS\System32\powrprof.dll [fFlags=0x0]
15881a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'rpcrt4.dll'.
15891a0c.233c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\powrprof.dll)
15901a0c.233c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\powrprof.dll
15911a0c.233c: supR3HardenedDllNotificationCallback: load 00007fffaf8c0000 LB 0x00052000 C:\WINDOWS\System32\shlwapi.dll [fFlags=0x0]
15921a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcrt.dll'.
15931a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #44 'gdi32.dll'.
15941a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #45 'user32.dll'.
15951a0c.233c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\shlwapi.dll)
15961a0c.233c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\shlwapi.dll
15971a0c.233c: supR3HardenedDllNotificationCallback: load 00007fffadc90000 LB 0x00011000 C:\WINDOWS\System32\kernel.appcore.dll [fFlags=0x0]
15981a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'msvcrt.dll'.
15991a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'rpcrt4.dll'.
16001a0c.233c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll)
16011a0c.233c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll
16021a0c.233c: supR3HardenedDllNotificationCallback: load 00007fffadcb0000 LB 0x0074d000 C:\WINDOWS\System32\windows.storage.dll [fFlags=0x0]
16031a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #31 'combase.dll'.
16041a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #32 'msvcp_win.dll'.
16051a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #39 'rpcrt4.dll'.
16061a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #56 'profapi.dll'.
16071a0c.233c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\windows.storage.dll)
16081a0c.233c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\windows.storage.dll
16091a0c.233c: supR3HardenedDllNotificationCallback: load 00007fffb02c0000 LB 0x014f4000 C:\WINDOWS\System32\SHELL32.dll [fFlags=0x0]
16101a0c.233c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll [avoiding WinVerifyTrust]
16111a0c.233c: supR3HardenedDllNotificationCallback: load 00007fffb0000000 LB 0x00155000 C:\WINDOWS\System32\ole32.dll [fFlags=0x0]
16121a0c.233c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ole32.dll
16131a0c.233c: supR3HardenedDllNotificationCallback: load 00007fff95ff0000 LB 0x0001b000 C:\WINDOWS\SYSTEM32\MPR.dll [fFlags=0x0]
16141a0c.233c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\mpr.dll [avoiding WinVerifyTrust]
16151a0c.233c: supR3HardenedDllNotificationCallback: load 000000006caf0000 LB 0x00565000 C:\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [fFlags=0x0]
16161a0c.233c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll
16171a0c.233c: supR3HardenedDllNotificationCallback: load 00007fff6a340000 LB 0x005f7000 C:\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [fFlags=0x0]
16181a0c.233c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll
16191a0c.233c: supR3HardenedDllNotificationCallback: load 000000006c580000 LB 0x00561000 C:\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [fFlags=0x0]
16201a0c.233c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [avoiding WinVerifyTrust]
16211a0c.233c: supR3HardenedDllNotificationCallback: load 00007fffaf140000 LB 0x000c4000 C:\WINDOWS\System32\OLEAUT32.dll [fFlags=0x0]
16221a0c.233c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll
16231a0c.233c: supR3HardenedDllNotificationCallback: load 00007fff6af30000 LB 0x0260b000 C:\Program Files\Oracle\VirtualBox\UICommon.dll [fFlags=0x0]
16241a0c.233c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\UICommon.dll
16251a0c.233c: supR3HardenedDllNotificationCallback: load 000000006c480000 LB 0x00054000 C:\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll [fFlags=0x0]
16261a0c.233c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll
16271a0c.233c: supR3HardenedDllNotificationCallback: load 00007fffaa530000 LB 0x0002d000 C:\WINDOWS\SYSTEM32\WINMMBASE.dll [fFlags=0x0]
16281a0c.233c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmmbase.dll [avoiding WinVerifyTrust]
16291a0c.233c: supR3HardenedDllNotificationCallback: load 00007fffaa7e0000 LB 0x00024000 C:\WINDOWS\SYSTEM32\WINMM.dll [fFlags=0x0]
16301a0c.233c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmm.dll
16311a0c.233c: supR3HardenedDllNotificationCallback: load 00007fff9d6d0000 LB 0x001c9000 C:\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll [fFlags=0x0]
16321a0c.233c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll
16331a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\windows.storage.dll'.
16341a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\windows.storage.dll' [rescheduled]
16351a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll'.
16361a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll' [rescheduled]
16371a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\shlwapi.dll'.
16381a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\shlwapi.dll' [rescheduled]
16391a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\powrprof.dll'.
16401a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\powrprof.dll' [rescheduled]
16411a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\SHCore.dll'.
16421a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\SHCore.dll' [rescheduled]
16431a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll'.
16441a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll' [rescheduled]
16451a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\gdi32full.dll'.
16461a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\gdi32full.dll' [rescheduled]
16471a0c.233c: Detected loader lock ownership: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume3\Windows\System32\glu32.dll'.
16481a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 22900 (was 22900) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\glu32.dll' [rescheduled]
16491a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\mpr.dll'.
16501a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\mpr.dll' [rescheduled]
16511a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\shell32.dll'.
16521a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\shell32.dll' [rescheduled]
16531a0c.233c: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'.
16541a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll' [rescheduled]
16551a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\win32u.dll'.
16561a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rescheduled]
16571a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\gdi32.dll'.
16581a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rescheduled]
16591a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\user32.dll'.
16601a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rescheduled]
16611a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll'.
16621a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rescheduled]
16631a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\combase.dll'.
16641a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rescheduled]
16651a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\winmmbase.dll'.
16661a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\winmmbase.dll' [rescheduled]
16671a0c.233c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\kernel32.dll
16681a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'profapi.dll'...
16691a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'profapi.dll' -> '\Device\HarddiskVolume3\Windows\System32\profapi.dll' [rcNtRedir=0xc0150008]
16701a0c.233c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\profapi.dll
16711a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
16721a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
16731a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
16741a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
16751a0c.233c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll [redoing WinVerifyTrust]
16761a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll'.
16771a0c.233c: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll
16781a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
16791a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
16801a0c.233c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\combase.dll [redoing WinVerifyTrust]
16811a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\combase.dll'.
16821a0c.233c: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume3\Windows\System32\combase.dll
16831a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
16841a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
16851a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
16861a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
16871a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
16881a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
16891a0c.233c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [redoing WinVerifyTrust]
16901a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\user32.dll'.
16911a0c.233c: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume3\Windows\System32\user32.dll
16921a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
16931a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
16941a0c.233c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [redoing WinVerifyTrust]
16951a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\gdi32.dll'.
16961a0c.233c: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume3\Windows\System32\gdi32.dll
16971a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
16981a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
16991a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
17001a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
17011a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
17021a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
17031a0c.233c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\combase.dll [redoing WinVerifyTrust]
17041a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\combase.dll'.
17051a0c.233c: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume3\Windows\System32\combase.dll
17061a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
17071a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
17081a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
17091a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
17101a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
17111a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
17121a0c.233c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\win32u.dll [redoing WinVerifyTrust]
17131a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\win32u.dll'.
17141a0c.233c: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume3\Windows\System32\win32u.dll
17151a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
17161a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
17171a0c.233c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [redoing WinVerifyTrust]
17181a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\user32.dll'.
17191a0c.233c: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume3\Windows\System32\user32.dll
17201a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
17211a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
17221a0c.233c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [redoing WinVerifyTrust]
17231a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\gdi32.dll'.
17241a0c.233c: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume3\Windows\System32\gdi32.dll
17251a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
17261a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
17271a0c.233c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll [redoing WinVerifyTrust]
17281a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll'.
17291a0c.233c: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll
17301a0c.233c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\kernel32.dll (Input=kernel32, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
17311a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaf3a0000 'C:\WINDOWS\System32\kernel32.dll'
17321a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\windows.storage.dll'.
17331a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\windows.storage.dll' [rescheduled]
17341a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll'.
17351a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll' [rescheduled]
17361a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\shlwapi.dll'.
17371a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\shlwapi.dll' [rescheduled]
17381a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\powrprof.dll'.
17391a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\powrprof.dll' [rescheduled]
17401a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\SHCore.dll'.
17411a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\SHCore.dll' [rescheduled]
17421a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll'.
17431a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll' [rescheduled]
17441a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\gdi32full.dll'.
17451a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\gdi32full.dll' [rescheduled]
17461a0c.233c: Detected loader lock ownership: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume3\Windows\System32\glu32.dll'.
17471a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 22900 (was 22900) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\glu32.dll' [rescheduled]
17481a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\mpr.dll'.
17491a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\mpr.dll' [rescheduled]
17501a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\shell32.dll'.
17511a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\shell32.dll' [rescheduled]
17521a0c.233c: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'.
17531a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll' [rescheduled]
17541a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\win32u.dll'.
17551a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rescheduled]
17561a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\gdi32.dll'.
17571a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rescheduled]
17581a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\user32.dll'.
17591a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rescheduled]
17601a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll'.
17611a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rescheduled]
17621a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\combase.dll'.
17631a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rescheduled]
17641a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\winmmbase.dll'.
17651a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\winmmbase.dll' [rescheduled]
17661a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\windows.storage.dll'.
17671a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\windows.storage.dll' [rescheduled]
17681a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll'.
17691a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll' [rescheduled]
17701a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\shlwapi.dll'.
17711a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\shlwapi.dll' [rescheduled]
17721a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\powrprof.dll'.
17731a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\powrprof.dll' [rescheduled]
17741a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\SHCore.dll'.
17751a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\SHCore.dll' [rescheduled]
17761a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll'.
17771a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll' [rescheduled]
17781a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\gdi32full.dll'.
17791a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\gdi32full.dll' [rescheduled]
17801a0c.233c: Detected loader lock ownership: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume3\Windows\System32\glu32.dll'.
17811a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 22900 (was 22900) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\glu32.dll' [rescheduled]
17821a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\mpr.dll'.
17831a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\mpr.dll' [rescheduled]
17841a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\shell32.dll'.
17851a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\shell32.dll' [rescheduled]
17861a0c.233c: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'.
17871a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll' [rescheduled]
17881a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\win32u.dll'.
17891a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rescheduled]
17901a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\gdi32.dll'.
17911a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rescheduled]
17921a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\user32.dll'.
17931a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rescheduled]
17941a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll'.
17951a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rescheduled]
17961a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\combase.dll'.
17971a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rescheduled]
17981a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\winmmbase.dll'.
17991a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\winmmbase.dll' [rescheduled]
18001a0c.233c: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-string-l1-1-0) -> 0x0, fPresent=1
18011a0c.233c: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-string-l1-1-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
18021a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffae760000 'api-ms-win-core-string-l1-1-0'
18031a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\windows.storage.dll'.
18041a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\windows.storage.dll' [rescheduled]
18051a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll'.
18061a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll' [rescheduled]
18071a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\shlwapi.dll'.
18081a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\shlwapi.dll' [rescheduled]
18091a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\powrprof.dll'.
18101a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\powrprof.dll' [rescheduled]
18111a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\SHCore.dll'.
18121a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\SHCore.dll' [rescheduled]
18131a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll'.
18141a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll' [rescheduled]
18151a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\gdi32full.dll'.
18161a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\gdi32full.dll' [rescheduled]
18171a0c.233c: Detected loader lock ownership: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume3\Windows\System32\glu32.dll'.
18181a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 22900 (was 22900) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\glu32.dll' [rescheduled]
18191a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\mpr.dll'.
18201a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\mpr.dll' [rescheduled]
18211a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\shell32.dll'.
18221a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\shell32.dll' [rescheduled]
18231a0c.233c: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'.
18241a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll' [rescheduled]
18251a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\win32u.dll'.
18261a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rescheduled]
18271a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\gdi32.dll'.
18281a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rescheduled]
18291a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\user32.dll'.
18301a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rescheduled]
18311a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll'.
18321a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rescheduled]
18331a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\combase.dll'.
18341a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rescheduled]
18351a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\winmmbase.dll'.
18361a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\winmmbase.dll' [rescheduled]
18371a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\windows.storage.dll'.
18381a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\windows.storage.dll' [rescheduled]
18391a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll'.
18401a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll' [rescheduled]
18411a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\shlwapi.dll'.
18421a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\shlwapi.dll' [rescheduled]
18431a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\powrprof.dll'.
18441a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\powrprof.dll' [rescheduled]
18451a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\SHCore.dll'.
18461a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\SHCore.dll' [rescheduled]
18471a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll'.
18481a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll' [rescheduled]
18491a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\gdi32full.dll'.
18501a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\gdi32full.dll' [rescheduled]
18511a0c.233c: Detected loader lock ownership: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume3\Windows\System32\glu32.dll'.
18521a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 22900 (was 22900) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\glu32.dll' [rescheduled]
18531a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\mpr.dll'.
18541a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\mpr.dll' [rescheduled]
18551a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\shell32.dll'.
18561a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\shell32.dll' [rescheduled]
18571a0c.233c: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'.
18581a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll' [rescheduled]
18591a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\win32u.dll'.
18601a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rescheduled]
18611a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\gdi32.dll'.
18621a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rescheduled]
18631a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\user32.dll'.
18641a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rescheduled]
18651a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll'.
18661a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rescheduled]
18671a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\combase.dll'.
18681a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rescheduled]
18691a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\winmmbase.dll'.
18701a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\winmmbase.dll' [rescheduled]
18711a0c.233c: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-datetime-l1-1-1) -> 0x0, fPresent=1
18721a0c.233c: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-datetime-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
18731a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffae760000 'api-ms-win-core-datetime-l1-1-1'
18741a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\windows.storage.dll'.
18751a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\windows.storage.dll' [rescheduled]
18761a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll'.
18771a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll' [rescheduled]
18781a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\shlwapi.dll'.
18791a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\shlwapi.dll' [rescheduled]
18801a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\powrprof.dll'.
18811a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\powrprof.dll' [rescheduled]
18821a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\SHCore.dll'.
18831a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\SHCore.dll' [rescheduled]
18841a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll'.
18851a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll' [rescheduled]
18861a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\gdi32full.dll'.
18871a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\gdi32full.dll' [rescheduled]
18881a0c.233c: Detected loader lock ownership: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume3\Windows\System32\glu32.dll'.
18891a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 22900 (was 22900) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\glu32.dll' [rescheduled]
18901a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\mpr.dll'.
18911a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\mpr.dll' [rescheduled]
18921a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\shell32.dll'.
18931a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\shell32.dll' [rescheduled]
18941a0c.233c: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'.
18951a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll' [rescheduled]
18961a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\win32u.dll'.
18971a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rescheduled]
18981a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\gdi32.dll'.
18991a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rescheduled]
19001a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\user32.dll'.
19011a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rescheduled]
19021a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll'.
19031a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rescheduled]
19041a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\combase.dll'.
19051a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rescheduled]
19061a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\winmmbase.dll'.
19071a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\winmmbase.dll' [rescheduled]
19081a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\windows.storage.dll'.
19091a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\windows.storage.dll' [rescheduled]
19101a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll'.
19111a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll' [rescheduled]
19121a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\shlwapi.dll'.
19131a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\shlwapi.dll' [rescheduled]
19141a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\powrprof.dll'.
19151a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\powrprof.dll' [rescheduled]
19161a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\SHCore.dll'.
19171a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\SHCore.dll' [rescheduled]
19181a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll'.
19191a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll' [rescheduled]
19201a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\gdi32full.dll'.
19211a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\gdi32full.dll' [rescheduled]
19221a0c.233c: Detected loader lock ownership: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume3\Windows\System32\glu32.dll'.
19231a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 22900 (was 22900) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\glu32.dll' [rescheduled]
19241a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\mpr.dll'.
19251a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\mpr.dll' [rescheduled]
19261a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\shell32.dll'.
19271a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\shell32.dll' [rescheduled]
19281a0c.233c: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'.
19291a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll' [rescheduled]
19301a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\win32u.dll'.
19311a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rescheduled]
19321a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\gdi32.dll'.
19331a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rescheduled]
19341a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\user32.dll'.
19351a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rescheduled]
19361a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll'.
19371a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rescheduled]
19381a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\combase.dll'.
19391a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rescheduled]
19401a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\winmmbase.dll'.
19411a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\winmmbase.dll' [rescheduled]
19421a0c.233c: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-localization-obsolete-l1-2-0) -> 0x0, fPresent=1
19431a0c.233c: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-obsolete-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
19441a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffae760000 'api-ms-win-core-localization-obsolete-l1-2-0'
19451a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\windows.storage.dll'.
19461a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\windows.storage.dll' [rescheduled]
19471a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll'.
19481a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll' [rescheduled]
19491a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\shlwapi.dll'.
19501a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\shlwapi.dll' [rescheduled]
19511a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\powrprof.dll'.
19521a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\powrprof.dll' [rescheduled]
19531a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\SHCore.dll'.
19541a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\SHCore.dll' [rescheduled]
19551a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll'.
19561a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll' [rescheduled]
19571a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\gdi32full.dll'.
19581a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\gdi32full.dll' [rescheduled]
19591a0c.233c: Detected loader lock ownership: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume3\Windows\System32\glu32.dll'.
19601a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 22900 (was 22900) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\glu32.dll' [rescheduled]
19611a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\mpr.dll'.
19621a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\mpr.dll' [rescheduled]
19631a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\shell32.dll'.
19641a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\shell32.dll' [rescheduled]
19651a0c.233c: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'.
19661a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll' [rescheduled]
19671a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\win32u.dll'.
19681a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rescheduled]
19691a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\gdi32.dll'.
19701a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rescheduled]
19711a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\user32.dll'.
19721a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rescheduled]
19731a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll'.
19741a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rescheduled]
19751a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\combase.dll'.
19761a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rescheduled]
19771a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\winmmbase.dll'.
19781a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\winmmbase.dll' [rescheduled]
19791a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\windows.storage.dll'.
19801a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\windows.storage.dll' [rescheduled]
19811a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll'.
19821a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll' [rescheduled]
19831a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\shlwapi.dll'.
19841a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\shlwapi.dll' [rescheduled]
19851a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\powrprof.dll'.
19861a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\powrprof.dll' [rescheduled]
19871a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\SHCore.dll'.
19881a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\SHCore.dll' [rescheduled]
19891a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll'.
19901a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll' [rescheduled]
19911a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\gdi32full.dll'.
19921a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\gdi32full.dll' [rescheduled]
19931a0c.233c: Detected loader lock ownership: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume3\Windows\System32\glu32.dll'.
19941a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 22900 (was 22900) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\glu32.dll' [rescheduled]
19951a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\mpr.dll'.
19961a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\mpr.dll' [rescheduled]
19971a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\shell32.dll'.
19981a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\shell32.dll' [rescheduled]
19991a0c.233c: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'.
20001a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll' [rescheduled]
20011a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\win32u.dll'.
20021a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rescheduled]
20031a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\gdi32.dll'.
20041a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rescheduled]
20051a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\user32.dll'.
20061a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rescheduled]
20071a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll'.
20081a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rescheduled]
20091a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\combase.dll'.
20101a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rescheduled]
20111a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\winmmbase.dll'.
20121a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\winmmbase.dll' [rescheduled]
20131a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\imm32.dll'.
20141a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'user32.dll'.
20151a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #25 'win32u.dll'.
20161a0c.233c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\imm32.dll)
20171a0c.233c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\imm32.dll
20181a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
20191a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
20201a0c.233c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\win32u.dll [redoing WinVerifyTrust]
20211a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\win32u.dll'.
20221a0c.233c: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume3\Windows\System32\win32u.dll
20231a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
20241a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
20251a0c.233c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [redoing WinVerifyTrust]
20261a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\user32.dll'.
20271a0c.233c: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume3\Windows\System32\user32.dll
20281a0c.233c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\IMM32.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
20291a0c.233c: supR3HardenedDllNotificationCallback: load 00007fffaffd0000 LB 0x0002e000 C:\WINDOWS\System32\IMM32.DLL [fFlags=0x0]
20301a0c.233c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\imm32.dll [avoiding WinVerifyTrust]
20311a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaffd0000 'C:\WINDOWS\system32\IMM32.DLL'
20321a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\imm32.dll'.
20331a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\imm32.dll' [rescheduled]
20341a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\windows.storage.dll'.
20351a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\windows.storage.dll' [rescheduled]
20361a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll'.
20371a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll' [rescheduled]
20381a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\shlwapi.dll'.
20391a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\shlwapi.dll' [rescheduled]
20401a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\powrprof.dll'.
20411a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\powrprof.dll' [rescheduled]
20421a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\SHCore.dll'.
20431a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\SHCore.dll' [rescheduled]
20441a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll'.
20451a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll' [rescheduled]
20461a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\gdi32full.dll'.
20471a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\gdi32full.dll' [rescheduled]
20481a0c.233c: Detected loader lock ownership: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume3\Windows\System32\glu32.dll'.
20491a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 22900 (was 22900) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\glu32.dll' [rescheduled]
20501a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\mpr.dll'.
20511a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\mpr.dll' [rescheduled]
20521a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\shell32.dll'.
20531a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\shell32.dll' [rescheduled]
20541a0c.233c: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'.
20551a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll' [rescheduled]
20561a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\win32u.dll'.
20571a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rescheduled]
20581a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\gdi32.dll'.
20591a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rescheduled]
20601a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\user32.dll'.
20611a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rescheduled]
20621a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll'.
20631a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rescheduled]
20641a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\combase.dll'.
20651a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rescheduled]
20661a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\winmmbase.dll'.
20671a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\winmmbase.dll' [rescheduled]
20681a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\imm32.dll'.
20691a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\imm32.dll' [rescheduled]
20701a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\windows.storage.dll'.
20711a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\windows.storage.dll' [rescheduled]
20721a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll'.
20731a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll' [rescheduled]
20741a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\shlwapi.dll'.
20751a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\shlwapi.dll' [rescheduled]
20761a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\powrprof.dll'.
20771a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\powrprof.dll' [rescheduled]
20781a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\SHCore.dll'.
20791a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\SHCore.dll' [rescheduled]
20801a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll'.
20811a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll' [rescheduled]
20821a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\gdi32full.dll'.
20831a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\gdi32full.dll' [rescheduled]
20841a0c.233c: Detected loader lock ownership: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume3\Windows\System32\glu32.dll'.
20851a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 22900 (was 22900) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\glu32.dll' [rescheduled]
20861a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\mpr.dll'.
20871a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\mpr.dll' [rescheduled]
20881a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\shell32.dll'.
20891a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\shell32.dll' [rescheduled]
20901a0c.233c: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'.
20911a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll' [rescheduled]
20921a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\win32u.dll'.
20931a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rescheduled]
20941a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\gdi32.dll'.
20951a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rescheduled]
20961a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\user32.dll'.
20971a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rescheduled]
20981a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll'.
20991a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rescheduled]
21001a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\combase.dll'.
21011a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rescheduled]
21021a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\winmmbase.dll'.
21031a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\winmmbase.dll' [rescheduled]
21041a0c.233c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll
21051a0c.233c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\ADVAPI32.DLL (Input=ADVAPI32.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
21061a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffafa50000 'C:\WINDOWS\System32\ADVAPI32.DLL'
21071a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\imm32.dll'.
21081a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\imm32.dll' [rescheduled]
21091a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\windows.storage.dll'.
21101a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\windows.storage.dll' [rescheduled]
21111a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll'.
21121a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll' [rescheduled]
21131a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\shlwapi.dll'.
21141a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\shlwapi.dll' [rescheduled]
21151a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\powrprof.dll'.
21161a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\powrprof.dll' [rescheduled]
21171a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\SHCore.dll'.
21181a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\SHCore.dll' [rescheduled]
21191a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll'.
21201a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll' [rescheduled]
21211a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\gdi32full.dll'.
21221a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\gdi32full.dll' [rescheduled]
21231a0c.233c: Detected loader lock ownership: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume3\Windows\System32\glu32.dll'.
21241a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 22900 (was 22900) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\glu32.dll' [rescheduled]
21251a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\mpr.dll'.
21261a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\mpr.dll' [rescheduled]
21271a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\shell32.dll'.
21281a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\shell32.dll' [rescheduled]
21291a0c.233c: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'.
21301a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll' [rescheduled]
21311a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\win32u.dll'.
21321a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rescheduled]
21331a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\gdi32.dll'.
21341a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rescheduled]
21351a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\user32.dll'.
21361a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rescheduled]
21371a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll'.
21381a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rescheduled]
21391a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\combase.dll'.
21401a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rescheduled]
21411a0c.233c: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\winmmbase.dll'.
21421a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\winmmbase.dll' [rescheduled]
21431a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff9d6d0000 'C:\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll'
21441a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaccd0000 'C:\WINDOWS\system32\rsaenh.dll'
21451a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaeb00000 'C:\WINDOWS\System32\crypt32.dll'
21461a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\imm32.dll'
21471a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaccd0000 'C:\WINDOWS\system32\rsaenh.dll'
21481a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaeb00000 'C:\WINDOWS\System32\crypt32.dll'
21491a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\windows.storage.dll'
21501a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaccd0000 'C:\WINDOWS\system32\rsaenh.dll'
21511a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaeb00000 'C:\WINDOWS\System32\crypt32.dll'
21521a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll'
21531a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaccd0000 'C:\WINDOWS\system32\rsaenh.dll'
21541a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaeb00000 'C:\WINDOWS\System32\crypt32.dll'
21551a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\shlwapi.dll'
21561a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaccd0000 'C:\WINDOWS\system32\rsaenh.dll'
21571a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaeb00000 'C:\WINDOWS\System32\crypt32.dll'
21581a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\powrprof.dll'
21591a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaccd0000 'C:\WINDOWS\system32\rsaenh.dll'
21601a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaeb00000 'C:\WINDOWS\System32\crypt32.dll'
21611a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\SHCore.dll'
21621a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaccd0000 'C:\WINDOWS\system32\rsaenh.dll'
21631a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaeb00000 'C:\WINDOWS\System32\crypt32.dll'
21641a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll'
21651a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaccd0000 'C:\WINDOWS\system32\rsaenh.dll'
21661a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaeb00000 'C:\WINDOWS\System32\crypt32.dll'
21671a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\gdi32full.dll'
21681a0c.233c: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000388 pwszName=\Device\HarddiskVolume3\Windows\System32\glu32.dll
21691a0c.233c: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000000d0e700
21701a0c.233c: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000d0e700
21711a0c.233c: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=45FF4C1DBC7AE18A1DA512455F13BC17EA659425
21721a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaccd0000 'C:\WINDOWS\system32\rsaenh.dll'
21731a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaeb00000 'C:\WINDOWS\System32\crypt32.dll'
21741a0c.233c: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0112~31bf3856ad364e35~amd64~~10.0.17763.1.cat'; file='\Device\HarddiskVolume3\Windows\System32\glu32.dll'
21751a0c.233c: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
21761a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\glu32.dll'
21771a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaccd0000 'C:\WINDOWS\system32\rsaenh.dll'
21781a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaeb00000 'C:\WINDOWS\System32\crypt32.dll'
21791a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\mpr.dll'
21801a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaccd0000 'C:\WINDOWS\system32\rsaenh.dll'
21811a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaeb00000 'C:\WINDOWS\System32\crypt32.dll'
21821a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\shell32.dll'
21831a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaccd0000 'C:\WINDOWS\system32\rsaenh.dll'
21841a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 24202) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'
21851a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaccd0000 'C:\WINDOWS\system32\rsaenh.dll'
21861a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaeb00000 'C:\WINDOWS\System32\crypt32.dll'
21871a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\win32u.dll'
21881a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaccd0000 'C:\WINDOWS\system32\rsaenh.dll'
21891a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaeb00000 'C:\WINDOWS\System32\crypt32.dll'
21901a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\gdi32.dll'
21911a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaccd0000 'C:\WINDOWS\system32\rsaenh.dll'
21921a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaeb00000 'C:\WINDOWS\System32\crypt32.dll'
21931a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\user32.dll'
21941a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaccd0000 'C:\WINDOWS\system32\rsaenh.dll'
21951a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaeb00000 'C:\WINDOWS\System32\crypt32.dll'
21961a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll'
21971a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaccd0000 'C:\WINDOWS\system32\rsaenh.dll'
21981a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaeb00000 'C:\WINDOWS\System32\crypt32.dll'
21991a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\combase.dll'
22001a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaccd0000 'C:\WINDOWS\system32\rsaenh.dll'
22011a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaeb00000 'C:\WINDOWS\System32\crypt32.dll'
22021a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\winmmbase.dll'
22031a0c.233c: SUPR3HardenedMain: Calling TrustedMain (00007fff9d6d16c0)...
22041a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaccd0000 'C:\WINDOWS\system32\rsaenh.dll'
22051a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'gdi32.dll'.
22061a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'ole32.dll'.
22071a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'user32.dll'.
22081a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'imm32.dll'.
22091a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'winmm.dll'.
22101a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'oleaut32.dll'.
22111a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'shell32.dll'.
22121a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'advapi32.dll'.
22131a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'qt5guivbox.dll'.
22141a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'qt5corevbox.dll'.
22151a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'msvcr100.dll'.
22161a0c.233c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\platforms\qwindows.dll) WinVerifyTrust
22171a0c.233c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\platforms\qwindows.dll
22181a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
22191a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
22201a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
22211a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
22221a0c.233c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll
22231a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
22241a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
22251a0c.233c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll
22261a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
22271a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
22281a0c.233c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll
22291a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
22301a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume3\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
22311a0c.233c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
22321a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
22331a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
22341a0c.233c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll
22351a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
22361a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume3\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008]
22371a0c.233c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmm.dll
22381a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'imm32.dll'...
22391a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'imm32.dll' -> '\Device\HarddiskVolume3\Windows\System32\imm32.dll' [rcNtRedir=0xc0150008]
22401a0c.233c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\imm32.dll
22411a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
22421a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
22431a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
22441a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
22451a0c.233c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ole32.dll
22461a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
22471a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
22481a0c.233c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\platforms\qwindows.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
22491a0c.233c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\platforms\qwindows.dll
22501a0c.233c: supR3HardenedDllNotificationCallback: load 00007fff7ce10000 LB 0x0012e000 C:\Program Files\Oracle\VirtualBox\platforms\qwindows.dll [fFlags=0x0]
22511a0c.233c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\platforms\qwindows.dll
22521a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff7ce10000 'C:\Program Files\Oracle\VirtualBox\platforms\qwindows.dll'
22531a0c.233c: supR3HardNtViCallWinVerifyTrustCatFile: hFile=000000000000065c pwszName=\Device\HarddiskVolume3\Windows\System32\uxtheme.dll
22541a0c.233c: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000000d0e700
22551a0c.233c: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000d0e700
22561a0c.233c: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=95D37E64CA891771B24BCB9E34C5B634D5D68443
22571a0c.233c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
22581a0c.233c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
22591a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaccd0000 'C:\WINDOWS\system32\rsaenh.dll'
22601a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaeb00000 'C:\WINDOWS\System32\crypt32.dll'
22611a0c.233c: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1315_for_KB4530715~31bf3856ad364e35~amd64~~10.0.1.4.cat'; file='\Device\HarddiskVolume3\Windows\System32\uxtheme.dll'
22621a0c.233c: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
22631a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
22641a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #33 'gdi32.dll'.
22651a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #34 'user32.dll'.
22661a0c.233c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\uxtheme.dll) WinVerifyTrust
22671a0c.233c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\uxtheme.dll
22681a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
22691a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
22701a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
22711a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
22721a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
22731a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
22741a0c.233c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\uxtheme.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
22751a0c.233c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\uxtheme.dll
22761a0c.233c: supR3HardenedDllNotificationCallback: load 00007fffabb00000 LB 0x0009c000 C:\WINDOWS\system32\uxtheme.dll [fFlags=0x0]
22771a0c.233c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\uxtheme.dll
22781a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffabb00000 'C:\WINDOWS\system32\uxtheme.dll'
22791a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaf720000 'C:\WINDOWS\system32\user32.dll'
22801a0c.233c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
22811a0c.233c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\shell32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
22821a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffb02c0000 'C:\WINDOWS\system32\shell32.dll'
22831a0c.233c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\SHCore.dll
22841a0c.233c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\SHCore.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
22851a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffb0160000 'C:\WINDOWS\system32\SHCore.dll'
22861a0c.233c: supR3HardenedMonitor_LdrLoadDll: error opening 'C:\WINDOWS\system32\wintab32.dll': 0 (NtPath=\??\C:\WINDOWS\system32\wintab32.dll; Input=C:\WINDOWS\system32\wintab32.dll; rcNtGetDll=0x0
22871a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0xc0000034 'C:\WINDOWS\system32\wintab32.dll'
22881a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
22891a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #13 'crypt32.dll'.
22901a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #25 'cryptsp.dll'.
22911a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #26 'win32u.dll'.
22921a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #27 'user32.dll'.
22931a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #28 'gdi32.dll'.
22941a0c.233c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\dwmapi.dll)
22951a0c.233c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\dwmapi.dll
22961a0c.233c: supR3HardenedDllNotificationCallback: load 00007fffabd80000 LB 0x0002e000 C:\WINDOWS\system32\dwmapi.dll [fFlags=0x0]
22971a0c.233c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\dwmapi.dll [avoiding WinVerifyTrust]
22981a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
22991a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
23001a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
23011a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
23021a0c.233c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll
23031a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
23041a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
23051a0c.233c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\win32u.dll
23061a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'cryptsp.dll'...
23071a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'cryptsp.dll' -> '\Device\HarddiskVolume3\Windows\System32\cryptsp.dll' [rcNtRedir=0xc0150008]
23081a0c.233c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\cryptsp.dll
23091a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'crypt32.dll'...
23101a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'crypt32.dll' -> '\Device\HarddiskVolume3\Windows\System32\crypt32.dll' [rcNtRedir=0xc0150008]
23111a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
23121a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
23131a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaccd0000 'C:\WINDOWS\system32\rsaenh.dll'
23141a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaeb00000 'C:\WINDOWS\System32\crypt32.dll'
23151a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\dwmapi.dll'
23161a0c.233c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmm.dll
23171a0c.233c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\winmm.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
23181a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaa7e0000 'C:\WINDOWS\system32\winmm.dll'
23191a0c.233c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmm.dll
23201a0c.233c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\winmm.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
23211a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaa7e0000 'C:\WINDOWS\system32\winmm.dll'
23221a0c.233c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
23231a0c.233c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\shell32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
23241a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffb02c0000 'C:\WINDOWS\system32\shell32.dll'
23251a0c.233c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\uxtheme.dll
23261a0c.233c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\uxtheme.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
23271a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffabb00000 'C:\WINDOWS\system32\uxtheme.dll'
23281a0c.233c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll
23291a0c.233c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\advapi32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
23301a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffafa50000 'C:\WINDOWS\system32\advapi32.dll'
23311a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaccd0000 'C:\WINDOWS\system32\rsaenh.dll'
23321a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaeb00000 'C:\WINDOWS\System32\crypt32.dll'
23331a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #17 'rpcrt4.dll'.
23341a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #29 'profapi.dll'.
23351a0c.233c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\userenv.dll) WinVerifyTrust
23361a0c.233c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\userenv.dll
23371a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'profapi.dll'...
23381a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'profapi.dll' -> '\Device\HarddiskVolume3\Windows\System32\profapi.dll' [rcNtRedir=0xc0150008]
23391a0c.233c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\profapi.dll
23401a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
23411a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
23421a0c.233c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll
23431a0c.233c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\userenv.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
23441a0c.233c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\userenv.dll
23451a0c.233c: supR3HardenedDllNotificationCallback: load 00007fffadb10000 LB 0x00028000 C:\WINDOWS\system32\userenv.dll [fFlags=0x0]
23461a0c.233c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\userenv.dll
23471a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffadb10000 'C:\WINDOWS\system32\userenv.dll'
23481a0c.233c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\kernel32.dll
23491a0c.233c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\kernel32.dll (Input=kernel32, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
23501a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaf3a0000 'C:\WINDOWS\System32\kernel32.dll'
23511a0c.233c: supR3HardenedDllNotificationCallback: load 00007fffb0210000 LB 0x000a2000 C:\WINDOWS\System32\clbcatq.dll [fFlags=0x0]
23521a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
23531a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #28 'rpcrt4.dll'.
23541a0c.233c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\clbcatq.dll)
23551a0c.233c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\clbcatq.dll
23561a0c.2c4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
23571a0c.2c4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
23581a0c.2c4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
23591a0c.2c4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
23601a0c.2c4c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaccd0000 'C:\WINDOWS\system32\rsaenh.dll'
23611a0c.2c4c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaeb00000 'C:\WINDOWS\System32\crypt32.dll'
23621a0c.2c4c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\clbcatq.dll'
23631a0c.2c4c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaccd0000 'C:\WINDOWS\system32\rsaenh.dll'
23641a0c.2c4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
23651a0c.2c4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp100.dll'.
23661a0c.2c4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxrt.dll'.
23671a0c.2c4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'advapi32.dll'.
23681a0c.2c4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'ole32.dll'.
23691a0c.2c4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'oleaut32.dll'.
23701a0c.2c4c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxC.dll) WinVerifyTrust
23711a0c.2c4c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxC.dll
23721a0c.2c4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
23731a0c.2c4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
23741a0c.2c4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll
23751a0c.2c4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
23761a0c.2c4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
23771a0c.2c4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ole32.dll
23781a0c.2c4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
23791a0c.2c4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
23801a0c.2c4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll
23811a0c.2c4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
23821a0c.2c4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
23831a0c.2c4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
23841a0c.2c4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
23851a0c.2c4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll
23861a0c.2c4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
23871a0c.2c4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
23881a0c.2c4c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxC.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
23891a0c.2c4c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxC.dll
23901a0c.2c4c: supR3HardenedDllNotificationCallback: load 00007fff69f90000 LB 0x003b0000 C:\Program Files\Oracle\VirtualBox\VBoxC.dll [fFlags=0x0]
23911a0c.2c4c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxC.dll
23921a0c.2c4c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff69f90000 'C:\Program Files\Oracle\VirtualBox\VBoxC.dll'
23931a0c.2c4c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaccd0000 'C:\WINDOWS\system32\rsaenh.dll'
23941a0c.2c4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
23951a0c.2c4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
23961a0c.2c4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'advapi32.dll'.
23971a0c.2c4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'shlwapi.dll'.
23981a0c.2c4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'ole32.dll'.
23991a0c.2c4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'oleaut32.dll'.
24001a0c.2c4c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'rpcrt4.dll'.
24011a0c.2c4c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxProxyStub.dll) WinVerifyTrust
24021a0c.2c4c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxProxyStub.dll
24031a0c.2c4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
24041a0c.2c4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
24051a0c.2c4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
24061a0c.2c4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
24071a0c.2c4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll
24081a0c.2c4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
24091a0c.2c4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
24101a0c.2c4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ole32.dll
24111a0c.2c4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shlwapi.dll'...
24121a0c.2c4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'shlwapi.dll' -> '\Device\HarddiskVolume3\Windows\System32\shlwapi.dll' [rcNtRedir=0xc0150008]
24131a0c.2c4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shlwapi.dll
24141a0c.2c4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
24151a0c.2c4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
24161a0c.2c4c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll
24171a0c.2c4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
24181a0c.2c4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
24191a0c.2c4c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
24201a0c.2c4c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
24211a0c.2c4c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxProxyStub.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
24221a0c.2c4c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxProxyStub.dll
24231a0c.2c4c: supR3HardenedDllNotificationCallback: load 00007fff7cd20000 LB 0x000ed000 C:\Program Files\Oracle\VirtualBox\VBoxProxyStub.dll [fFlags=0x0]
24241a0c.2c4c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxProxyStub.dll
24251a0c.2c4c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff7cd20000 'C:\Program Files\Oracle\VirtualBox\VBoxProxyStub.dll'
24261a0c.2c4c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll
24271a0c.2c4c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\oleaut32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
24281a0c.2c4c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaf140000 'C:\Windows\System32\oleaut32.dll'
24291a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffafb00000 'C:\WINDOWS\system32\gdi32.dll'
24301a0c.233c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
24311a0c.233c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\shell32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
24321a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffb02c0000 'C:\WINDOWS\system32\shell32.dll'
24331a0c.233c: supR3HardenedDllNotificationCallback: load 00007fffaf520000 LB 0x0016c000 C:\WINDOWS\System32\MSCTF.dll [fFlags=0x0]
24341a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
24351a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #18 'oleaut32.dll'.
24361a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #38 'user32.dll'.
24371a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #39 'gdi32.dll'.
24381a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #40 'imm32.dll'.
24391a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #41 'advapi32.dll'.
24401a0c.233c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\msctf.dll)
24411a0c.233c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\msctf.dll
24421a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
24431a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
24441a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'imm32.dll'...
24451a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'imm32.dll' -> '\Device\HarddiskVolume3\Windows\System32\imm32.dll' [rcNtRedir=0xc0150008]
24461a0c.233c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\imm32.dll
24471a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
24481a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
24491a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
24501a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
24511a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
24521a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
24531a0c.233c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll
24541a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
24551a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
24561a0c.233c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll
24571a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaccd0000 'C:\WINDOWS\system32\rsaenh.dll'
24581a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaeb00000 'C:\WINDOWS\System32\crypt32.dll'
24591a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\msctf.dll'
24601a0c.233c: supR3HardNtViCallWinVerifyTrustCatFile: hFile=000000000000095c pwszName=\Device\HarddiskVolume3\Windows\System32\DataExchange.dll
24611a0c.233c: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000000d0e700
24621a0c.233c: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000d0e700
24631a0c.233c: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=59F3AE35C1BD7FF73B733C35DF45575279B981AF
24641a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaccd0000 'C:\WINDOWS\system32\rsaenh.dll'
24651a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaeb00000 'C:\WINDOWS\System32\crypt32.dll'
24661a0c.233c: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0310~31bf3856ad364e35~amd64~~10.0.17763.1.cat'; file='\Device\HarddiskVolume3\Windows\System32\DataExchange.dll'
24671a0c.233c: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
24681a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
24691a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'shcore.dll'.
24701a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #28 'combase.dll'.
24711a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #33 'd3d11.dll'.
24721a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #34 'dcomp.dll'.
24731a0c.233c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\DataExchange.dll) WinVerifyTrust
24741a0c.233c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\DataExchange.dll
24751a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'dcomp.dll'...
24761a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'dcomp.dll' -> '\Device\HarddiskVolume3\Windows\System32\dcomp.dll' [rcNtRedir=0xc0150008]
24771a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaccd0000 'C:\WINDOWS\system32\rsaenh.dll'
24781a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaeb00000 'C:\WINDOWS\System32\crypt32.dll'
24791a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'win32u.dll'.
24801a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp_win.dll'.
24811a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #34 'oleaut32.dll'.
24821a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #35 'dxgi.dll'.
24831a0c.233c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\dcomp.dll) WinVerifyTrust
24841a0c.233c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\dcomp.dll
24851a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'd3d11.dll'...
24861a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'd3d11.dll' -> '\Device\HarddiskVolume3\Windows\System32\d3d11.dll' [rcNtRedir=0xc0150008]
24871a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'dxgi.dll'...
24881a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'dxgi.dll' -> '\Device\HarddiskVolume3\Windows\System32\dxgi.dll' [rcNtRedir=0xc0150008]
24891a0c.233c: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\dxgi.dll'.
24901a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
24911a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'win32u.dll'.
24921a0c.233c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\dxgi.dll)
24931a0c.233c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\dxgi.dll
24941a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
24951a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
24961a0c.233c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll
24971a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
24981a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
24991a0c.233c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll
25001a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
25011a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
25021a0c.233c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\win32u.dll
25031a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
25041a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
25051a0c.233c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\win32u.dll
25061a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
25071a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
25081a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaccd0000 'C:\WINDOWS\system32\rsaenh.dll'
25091a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaeb00000 'C:\WINDOWS\System32\crypt32.dll'
25101a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
25111a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'dxgi.dll'.
25121a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #35 'win32u.dll'.
25131a0c.233c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\d3d11.dll) WinVerifyTrust
25141a0c.233c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\d3d11.dll
25151a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
25161a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
25171a0c.233c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\combase.dll
25181a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shcore.dll'...
25191a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'shcore.dll' -> '\Device\HarddiskVolume3\Windows\System32\shcore.dll' [rcNtRedir=0xc0150008]
25201a0c.233c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\SHCore.dll
25211a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
25221a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
25231a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
25241a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
25251a0c.233c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\win32u.dll
25261a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'dxgi.dll'...
25271a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'dxgi.dll' -> '\Device\HarddiskVolume3\Windows\System32\dxgi.dll' [rcNtRedir=0xc0150008]
25281a0c.233c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\dxgi.dll [redoing WinVerifyTrust]
25291a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaccd0000 'C:\WINDOWS\system32\rsaenh.dll'
25301a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaeb00000 'C:\WINDOWS\System32\crypt32.dll'
25311a0c.233c: supR3HardenedScreenImage/Imports: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\dxgi.dll'
25321a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
25331a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
25341a0c.233c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\dataexchange.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
25351a0c.233c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\DataExchange.dll
25361a0c.233c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\d3d11.dll
25371a0c.233c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\dcomp.dll
25381a0c.233c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\dxgi.dll
25391a0c.233c: supR3HardenedDllNotificationCallback: load 00007fffac520000 LB 0x000c2000 C:\WINDOWS\system32\dxgi.dll [fFlags=0x0]
25401a0c.233c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\dxgi.dll
25411a0c.233c: supR3HardenedDllNotificationCallback: load 00007fffaa560000 LB 0x0027e000 C:\WINDOWS\system32\d3d11.dll [fFlags=0x0]
25421a0c.233c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\d3d11.dll
25431a0c.233c: supR3HardenedDllNotificationCallback: load 00007fffaadd0000 LB 0x001c3000 C:\WINDOWS\system32\dcomp.dll [fFlags=0x0]
25441a0c.233c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\dcomp.dll
25451a0c.233c: supR3HardenedDllNotificationCallback: load 00007fff7c610000 LB 0x00056000 C:\WINDOWS\system32\dataexchange.dll [fFlags=0x0]
25461a0c.233c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\DataExchange.dll
25471a0c.233c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll
25481a0c.233c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\gdi32.dll (Input=gdi32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
25491a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffafb00000 'C:\WINDOWS\System32\gdi32.dll'
25501a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff7c610000 'C:\WINDOWS\system32\dataexchange.dll'
25511a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'rmclient.dll'.
25521a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #33 'rpcrt4.dll'.
25531a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #47 'combase.dll'.
25541a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #49 'msvcp_win.dll'.
25551a0c.233c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\twinapi.appcore.dll)
25561a0c.233c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\twinapi.appcore.dll
25571a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
25581a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'rpcrt4.dll'.
25591a0c.233c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\rmclient.dll)
25601a0c.233c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\rmclient.dll
25611a0c.233c: supR3HardenedDllNotificationCallback: load 00007fffac070000 LB 0x00028000 C:\WINDOWS\system32\RMCLIENT.dll [fFlags=0x0]
25621a0c.233c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rmclient.dll [avoiding WinVerifyTrust]
25631a0c.233c: supR3HardenedDllNotificationCallback: load 00007fffabe60000 LB 0x0020d000 C:\WINDOWS\system32\twinapi.appcore.dll [fFlags=0x0]
25641a0c.233c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\twinapi.appcore.dll [avoiding WinVerifyTrust]
25651a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
25661a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
25671a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
25681a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
25691a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
25701a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
25711a0c.233c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll
25721a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
25731a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
25741a0c.233c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\combase.dll
25751a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
25761a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
25771a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rmclient.dll'...
25781a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rmclient.dll' -> '\Device\HarddiskVolume3\Windows\System32\rmclient.dll' [rcNtRedir=0xc0150008]
25791a0c.233c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rmclient.dll [lacks WinVerifyTrust]
25801a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaccd0000 'C:\WINDOWS\system32\rsaenh.dll'
25811a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaeb00000 'C:\WINDOWS\System32\crypt32.dll'
25821a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\rmclient.dll'
25831a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaccd0000 'C:\WINDOWS\system32\rsaenh.dll'
25841a0c.233c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll
25851a0c.233c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\crypt32.dll (Input=crypt32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
25861a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaeb00000 'C:\WINDOWS\System32\crypt32.dll'
25871a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\twinapi.appcore.dll'
25881a0c.233c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\SHCore.dll
25891a0c.233c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\Shcore.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
25901a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffb0160000 'C:\WINDOWS\system32\Shcore.dll'
25911a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
25921a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #15 'rpcrt4.dll'.
25931a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #19 'coreuicomponents.dll'.
25941a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #20 'coremessaging.dll'.
25951a0c.233c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\TextInputFramework.dll)
25961a0c.233c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\TextInputFramework.dll
25971a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
25981a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #35 'coremessaging.dll'.
25991a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #48 'shcore.dll'.
26001a0c.233c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\CoreUIComponents.dll)
26011a0c.233c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\CoreUIComponents.dll
26021a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
26031a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #24 'rpcrt4.dll'.
26041a0c.233c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\CoreMessaging.dll)
26051a0c.233c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\CoreMessaging.dll
26061a0c.233c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\ntmarta.dll)
26071a0c.233c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\ntmarta.dll
26081a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'combase.dll'.
26091a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #23 'rpcrt4.dll'.
26101a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #30 'bcryptprimitives.dll'.
26111a0c.233c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\WinTypes.dll)
26121a0c.233c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\WinTypes.dll
26131a0c.233c: supR3HardenedDllNotificationCallback: load 00007fffac860000 LB 0x00031000 C:\WINDOWS\SYSTEM32\ntmarta.dll [fFlags=0x0]
26141a0c.233c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ntmarta.dll [avoiding WinVerifyTrust]
26151a0c.233c: supR3HardenedDllNotificationCallback: load 00007fffab3d0000 LB 0x000e2000 C:\WINDOWS\System32\CoreMessaging.dll [fFlags=0x0]
26161a0c.233c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\CoreMessaging.dll [avoiding WinVerifyTrust]
26171a0c.233c: supR3HardenedDllNotificationCallback: load 00007fffa93f0000 LB 0x00153000 C:\WINDOWS\SYSTEM32\wintypes.dll [fFlags=0x0]
26181a0c.233c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\WinTypes.dll [avoiding WinVerifyTrust]
26191a0c.233c: supR3HardenedDllNotificationCallback: load 00007fffa9550000 LB 0x00322000 C:\WINDOWS\System32\CoreUIComponents.dll [fFlags=0x0]
26201a0c.233c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\CoreUIComponents.dll [avoiding WinVerifyTrust]
26211a0c.233c: supR3HardenedDllNotificationCallback: load 00007fff9ee40000 LB 0x00095000 C:\WINDOWS\System32\TextInputFramework.dll [fFlags=0x0]
26221a0c.233c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\TextInputFramework.dll [avoiding WinVerifyTrust]
26231a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcryptprimitives.dll'...
26241a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcryptprimitives.dll' -> '\Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll' [rcNtRedir=0xc0150008]
26251a0c.233c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll
26261a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
26271a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
26281a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
26291a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
26301a0c.233c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\combase.dll
26311a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
26321a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
26331a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
26341a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
26351a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shcore.dll'...
26361a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'shcore.dll' -> '\Device\HarddiskVolume3\Windows\System32\shcore.dll' [rcNtRedir=0xc0150008]
26371a0c.233c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\SHCore.dll
26381a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'coremessaging.dll'...
26391a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'coremessaging.dll' -> '\Device\HarddiskVolume3\Windows\System32\coremessaging.dll' [rcNtRedir=0xc0150008]
26401a0c.233c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\CoreMessaging.dll [lacks WinVerifyTrust]
26411a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
26421a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
26431a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'coremessaging.dll'...
26441a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'coremessaging.dll' -> '\Device\HarddiskVolume3\Windows\System32\coremessaging.dll' [rcNtRedir=0xc0150008]
26451a0c.233c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\CoreMessaging.dll [lacks WinVerifyTrust]
26461a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'coreuicomponents.dll'...
26471a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'coreuicomponents.dll' -> '\Device\HarddiskVolume3\Windows\System32\coreuicomponents.dll' [rcNtRedir=0xc0150008]
26481a0c.233c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\CoreUIComponents.dll [lacks WinVerifyTrust]
26491a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
26501a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
26511a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
26521a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
26531a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaccd0000 'C:\WINDOWS\system32\rsaenh.dll'
26541a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaeb00000 'C:\WINDOWS\System32\crypt32.dll'
26551a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\WinTypes.dll'
26561a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaccd0000 'C:\WINDOWS\system32\rsaenh.dll'
26571a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaeb00000 'C:\WINDOWS\System32\crypt32.dll'
26581a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\ntmarta.dll'
26591a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaccd0000 'C:\WINDOWS\system32\rsaenh.dll'
26601a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaeb00000 'C:\WINDOWS\System32\crypt32.dll'
26611a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\CoreMessaging.dll'
26621a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaccd0000 'C:\WINDOWS\system32\rsaenh.dll'
26631a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaeb00000 'C:\WINDOWS\System32\crypt32.dll'
26641a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\CoreUIComponents.dll'
26651a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaccd0000 'C:\WINDOWS\system32\rsaenh.dll'
26661a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaeb00000 'C:\WINDOWS\System32\crypt32.dll'
26671a0c.233c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\TextInputFramework.dll'
26681a0c.233c: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(ext-ms-win-rtcore-ntuser-window-ext-l1-1-0.dll) -> 0x0, fPresent=1
26691a0c.233c: supR3HardenedMonitor_LdrLoadDll: pName=ext-ms-win-rtcore-ntuser-window-ext-l1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
26701a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaf720000 'ext-ms-win-rtcore-ntuser-window-ext-l1-1-0.dll'
26711a0c.233c: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(ext-ms-win-rtcore-ntuser-integration-l1-1-0.dll) -> 0x0, fPresent=1
26721a0c.233c: supR3HardenedMonitor_LdrLoadDll: pName=ext-ms-win-rtcore-ntuser-integration-l1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
26731a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaf720000 'ext-ms-win-rtcore-ntuser-integration-l1-1-0.dll'
26741a0c.233c: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-com-l1-1-0.dll) -> 0x0, fPresent=1
26751a0c.233c: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-com-l1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
26761a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffb17c0000 'api-ms-win-core-com-l1-1-0.dll'
26771a0c.233c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msctf.dll
26781a0c.233c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\MSCTF.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
26791a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaf520000 'C:\WINDOWS\System32\MSCTF.dll'
26801a0c.233c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
26811a0c.233c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\shell32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
26821a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffb02c0000 'C:\WINDOWS\system32\shell32.dll'
26831a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffb02c0000 'C:\WINDOWS\system32\shell32.dll'
26841a0c.233c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ole32.dll
26851a0c.233c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\ole32.dll (Input=ole32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
26861a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffb0000000 'C:\WINDOWS\System32\ole32.dll'
26871a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaf140000 'C:\WINDOWS\System32\OLEAUT32.dll'
26881a0c.233c: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000000000009c8 pwszName=\Device\HarddiskVolume3\Windows\System32\wbem\wbemprox.dll
26891a0c.233c: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000000d0e700
26901a0c.233c: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000d0e700
26911a0c.233c: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=61B08AF50BF6163BDE34EB0C9B6605297BA2441A
26921a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaccd0000 'C:\WINDOWS\system32\rsaenh.dll'
26931a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaeb00000 'C:\WINDOWS\System32\crypt32.dll'
26941a0c.233c: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1085_for_KB4530715~31bf3856ad364e35~amd64~~10.0.1.4.cat'; file='\Device\HarddiskVolume3\Windows\System32\wbem\wbemprox.dll'
26951a0c.233c: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
26961a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
26971a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'ws2_32.dll'.
26981a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #18 'wbemcomn.dll'.
26991a0c.233c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\wbem\wbemprox.dll) WinVerifyTrust
27001a0c.233c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\wbem\wbemprox.dll
27011a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'wbemcomn.dll'...
27021a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'wbemcomn.dll' -> '\Device\HarddiskVolume3\Windows\System32\wbemcomn.dll' [rcNtRedir=0xc0150008]
27031a0c.233c: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000968 pwszName=\Device\HarddiskVolume3\Windows\System32\wbemcomn.dll
27041a0c.233c: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000000d0e700
27051a0c.233c: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000d0e700
27061a0c.233c: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=585E55607969886FF9DCECA6C86E3FD6D59F65D2
27071a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaccd0000 'C:\WINDOWS\system32\rsaenh.dll'
27081a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaeb00000 'C:\WINDOWS\System32\crypt32.dll'
27091a0c.233c: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.17763.1.cat'; file='\Device\HarddiskVolume3\Windows\System32\wbemcomn.dll'
27101a0c.233c: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
27111a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
27121a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #14 'bcrypt.dll'.
27131a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #18 'ws2_32.dll'.
27141a0c.233c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\wbemcomn.dll) WinVerifyTrust
27151a0c.233c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\wbemcomn.dll
27161a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
27171a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
27181a0c.233c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ws2_32.dll
27191a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
27201a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
27211a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
27221a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
27231a0c.233c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ws2_32.dll
27241a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcrypt.dll'...
27251a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcrypt.dll' -> '\Device\HarddiskVolume3\Windows\System32\bcrypt.dll' [rcNtRedir=0xc0150008]
27261a0c.233c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\bcrypt.dll
27271a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
27281a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
27291a0c.233c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\wbem\wbemprox.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
27301a0c.233c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wbem\wbemprox.dll
27311a0c.233c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wbemcomn.dll
27321a0c.233c: supR3HardenedDllNotificationCallback: load 00007fff9bbe0000 LB 0x00085000 C:\WINDOWS\SYSTEM32\wbemcomn.dll [fFlags=0x0]
27331a0c.233c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wbemcomn.dll
27341a0c.233c: supR3HardenedDllNotificationCallback: load 00007fff9bc70000 LB 0x00011000 C:\WINDOWS\system32\wbem\wbemprox.dll [fFlags=0x0]
27351a0c.233c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wbem\wbemprox.dll
27361a0c.233c: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(API-MS-Win-Core-LocalRegistry-L1-1-0.dll) -> 0x0, fPresent=1
27371a0c.233c: supR3HardenedMonitor_LdrLoadDll: pName=API-MS-Win-Core-LocalRegistry-L1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
27381a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffae760000 'API-MS-Win-Core-LocalRegistry-L1-1-0.dll'
27391a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff9bc70000 'C:\WINDOWS\system32\wbem\wbemprox.dll'
27401a0c.233c: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000000000009d0 pwszName=\Device\HarddiskVolume3\Windows\System32\wbem\wbemsvc.dll
27411a0c.233c: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000000d0e700
27421a0c.233c: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000d0e700
27431a0c.233c: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=2479751D59078C3499423233D67A94D93457E663
27441a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaccd0000 'C:\WINDOWS\system32\rsaenh.dll'
27451a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaeb00000 'C:\WINDOWS\System32\crypt32.dll'
27461a0c.233c: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_1085_for_KB4530715~31bf3856ad364e35~amd64~~10.0.1.4.cat'; file='\Device\HarddiskVolume3\Windows\System32\wbem\wbemsvc.dll'
27471a0c.233c: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
27481a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
27491a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'rpcrt4.dll'.
27501a0c.233c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\wbem\wbemsvc.dll) WinVerifyTrust
27511a0c.233c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\wbem\wbemsvc.dll
27521a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
27531a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
27541a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
27551a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
27561a0c.233c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\wbem\wbemsvc.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
27571a0c.233c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wbem\wbemsvc.dll
27581a0c.233c: supR3HardenedDllNotificationCallback: load 00007fff9b0e0000 LB 0x00014000 C:\WINDOWS\system32\wbem\wbemsvc.dll [fFlags=0x0]
27591a0c.233c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wbem\wbemsvc.dll
27601a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff9b0e0000 'C:\WINDOWS\system32\wbem\wbemsvc.dll'
27611a0c.233c: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-localization-l1-2-0.dll) -> 0x0, fPresent=1
27621a0c.233c: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-l1-2-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
27631a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffae760000 'api-ms-win-core-localization-l1-2-0.dll'
27641a0c.233c: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-localization-obsolete-l1-1-0.dll) -> 0x0, fPresent=1
27651a0c.233c: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-obsolete-l1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
27661a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffae760000 'api-ms-win-core-localization-obsolete-l1-1-0.dll'
27671a0c.233c: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000aec pwszName=\Device\HarddiskVolume3\Windows\System32\wbem\fastprox.dll
27681a0c.233c: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000000d0e700
27691a0c.233c: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000d0e700
27701a0c.233c: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=5D738E4890595C8890290239456518F354997BFD
27711a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaccd0000 'C:\WINDOWS\system32\rsaenh.dll'
27721a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaeb00000 'C:\WINDOWS\System32\crypt32.dll'
27731a0c.233c: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package02~31bf3856ad364e35~amd64~~10.0.17763.1.cat'; file='\Device\HarddiskVolume3\Windows\System32\wbem\fastprox.dll'
27741a0c.233c: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
27751a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
27761a0c.233c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #19 'wbemcomn.dll'.
27771a0c.233c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\wbem\fastprox.dll) WinVerifyTrust
27781a0c.233c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\wbem\fastprox.dll
27791a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'wbemcomn.dll'...
27801a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'wbemcomn.dll' -> '\Device\HarddiskVolume3\Windows\System32\wbemcomn.dll' [rcNtRedir=0xc0150008]
27811a0c.233c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wbemcomn.dll
27821a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
27831a0c.233c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
27841a0c.233c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\wbem\fastprox.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
27851a0c.233c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wbem\fastprox.dll
27861a0c.233c: supR3HardenedDllNotificationCallback: load 00007fff9b190000 LB 0x000f1000 C:\WINDOWS\system32\wbem\fastprox.dll [fFlags=0x0]
27871a0c.233c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wbem\fastprox.dll
27881a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff9b190000 'C:\WINDOWS\system32\wbem\fastprox.dll'
27891a0c.233c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffafa50000 'C:\WINDOWS\System32\ADVAPI32.dll'
27901a0c.d40: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaccd0000 'C:\WINDOWS\system32\rsaenh.dll'
27911a0c.d40: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
27921a0c.d40: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
27931a0c.d40: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxVMM.dll) WinVerifyTrust
27941a0c.d40: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxVMM.dll
27951a0c.d40: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
27961a0c.d40: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
27971a0c.d40: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
27981a0c.d40: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
27991a0c.d40: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxVMM.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
28001a0c.d40: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxVMM.dll
28011a0c.d40: supR3HardenedDllNotificationCallback: load 00007fff891c0000 LB 0x0037d000 C:\Program Files\Oracle\VirtualBox\VBoxVMM.DLL [fFlags=0x0]
28021a0c.d40: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxVMM.dll
28031a0c.d40: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff891c0000 'C:\Program Files\Oracle\VirtualBox\VBoxVMM.DLL'
28041a0c.3c78: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaccd0000 'C:\WINDOWS\system32\rsaenh.dll'
28051a0c.20d0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaccd0000 'C:\WINDOWS\system32\rsaenh.dll'
28061a0c.20d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
28071a0c.20d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp100.dll'.
28081a0c.20d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxvmm.dll'.
28091a0c.20d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'vboxrt.dll'.
28101a0c.20d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'user32.dll'.
28111a0c.20d0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxSharedClipboard.dll) WinVerifyTrust
28121a0c.20d0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxSharedClipboard.dll
28131a0c.20d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
28141a0c.20d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
28151a0c.20d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
28161a0c.20d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
28171a0c.20d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxvmm.dll'...
28181a0c.20d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxvmm.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxvmm.dll' [rcNtRedir=0xc0150008]
28191a0c.20d0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxVMM.dll
28201a0c.20d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
28211a0c.20d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
28221a0c.20d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
28231a0c.20d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
28241a0c.20d0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxSharedClipboard.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
28251a0c.20d0: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxSharedClipboard.dll
28261a0c.20d0: supR3HardenedDllNotificationCallback: load 00007fffab010000 LB 0x0000f000 C:\Program Files\Oracle\VirtualBox\VBoxSharedClipboard.DLL [fFlags=0x0]
28271a0c.20d0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxSharedClipboard.dll
28281a0c.20d0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffab010000 'C:\Program Files\Oracle\VirtualBox\VBoxSharedClipboard.DLL'
28291a0c.1048: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaccd0000 'C:\WINDOWS\system32\rsaenh.dll'
28301a0c.1048: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
28311a0c.1048: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp100.dll'.
28321a0c.1048: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxrt.dll'.
28331a0c.1048: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxDragAndDropSvc.dll) WinVerifyTrust
28341a0c.1048: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxDragAndDropSvc.dll
28351a0c.1048: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
28361a0c.1048: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
28371a0c.1048: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
28381a0c.1048: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
28391a0c.1048: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
28401a0c.1048: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
28411a0c.1048: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxDragAndDropSvc.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
28421a0c.1048: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxDragAndDropSvc.dll
28431a0c.1048: supR3HardenedDllNotificationCallback: load 00007fffaafd0000 LB 0x0000d000 C:\Program Files\Oracle\VirtualBox\VBoxDragAndDropSvc.DLL [fFlags=0x0]
28441a0c.1048: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxDragAndDropSvc.dll
28451a0c.1048: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaafd0000 'C:\Program Files\Oracle\VirtualBox\VBoxDragAndDropSvc.DLL'
28461a0c.3c78: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffb02c0000 'C:\WINDOWS\system32\Shell32.dll'
28471a0c.3c78: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000c30 pwszName=\Device\HarddiskVolume3\Windows\System32\WinHvPlatform.dll
28481a0c.3c78: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000000d0e700
28491a0c.3c78: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000d0e700
28501a0c.3c78: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=3BBDC439FCA89DD0B9BCBE395DB8BE300F208423
28511a0c.3c78: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaccd0000 'C:\WINDOWS\system32\rsaenh.dll'
28521a0c.3c78: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaeb00000 'C:\WINDOWS\System32\crypt32.dll'
28531a0c.3c78: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_51_for_KB4530715~31bf3856ad364e35~amd64~~10.0.1.4.cat'; file='\Device\HarddiskVolume3\Windows\System32\WinHvPlatform.dll'
28541a0c.3c78: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
28551a0c.3c78: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'vid.dll'.
28561a0c.3c78: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\WinHvPlatform.dll) WinVerifyTrust
28571a0c.3c78: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\WinHvPlatform.dll
28581a0c.3c78: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vid.dll'...
28591a0c.3c78: supR3HardenedWinVerifyCacheProcessImportTodos: 'vid.dll' -> '\Device\HarddiskVolume3\Windows\System32\vid.dll' [rcNtRedir=0xc0150008]
28601a0c.3c78: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaccd0000 'C:\WINDOWS\system32\rsaenh.dll'
28611a0c.3c78: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaeb00000 'C:\WINDOWS\System32\crypt32.dll'
28621a0c.3c78: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\vid.dll) WinVerifyTrust
28631a0c.3c78: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\vid.dll
28641a0c.3c78: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\WinHvPlatform.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
28651a0c.3c78: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\WinHvPlatform.dll
28661a0c.3c78: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\vid.dll
28671a0c.3c78: supR3HardenedDllNotificationCallback: load 00007fff96140000 LB 0x00017000 C:\WINDOWS\SYSTEM32\vid.dll [fFlags=0x0]
28681a0c.3c78: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\vid.dll
28691a0c.3c78: supR3HardenedDllNotificationCallback: load 00007fffaafb0000 LB 0x0001f000 C:\WINDOWS\system32\WinHvPlatform.dll [fFlags=0x0]
28701a0c.3c78: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\WinHvPlatform.dll
28711a0c.3c78: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaafb0000 'C:\WINDOWS\system32\WinHvPlatform.dll'
28721a0c.3c78: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\vid.dll
28731a0c.3c78: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\vid.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
28741a0c.3c78: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff96140000 'C:\WINDOWS\system32\vid.dll'
28751a0c.3c78: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaccd0000 'C:\WINDOWS\system32\rsaenh.dll'
28761a0c.3c78: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaeb00000 'C:\WINDOWS\System32\crypt32.dll'
28771a0c.3c78: '\Device\HarddiskVolume3\Windows\System32\ntdll.dll' has no imports
28781a0c.3c78: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\ntdll.dll) WinVerifyTrust
28791a0c.3c78: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\ntdll.dll
28801a0c.3c78: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\NTDLL.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
28811a0c.3c78: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffb1bf0000 'C:\WINDOWS\system32\NTDLL.DLL'
28821a0c.3c78: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaccd0000 'C:\WINDOWS\system32\rsaenh.dll'
28831a0c.3c78: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaccd0000 'C:\WINDOWS\system32\rsaenh.dll'
28841a0c.3c78: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
28851a0c.3c78: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxvmm.dll'.
28861a0c.3c78: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxrt.dll'.
28871a0c.3c78: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'vboxddu.dll'.
28881a0c.3c78: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'vboxdd2.dll'.
28891a0c.3c78: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'user32.dll'.
28901a0c.3c78: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'setupapi.dll'.
28911a0c.3c78: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'ws2_32.dll'.
28921a0c.3c78: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'ole32.dll'.
28931a0c.3c78: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'iphlpapi.dll'.
28941a0c.3c78: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxDD.dll) WinVerifyTrust
28951a0c.3c78: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxDD.dll
28961a0c.3c78: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'iphlpapi.dll'...
28971a0c.3c78: supR3HardenedWinVerifyCacheProcessImportTodos: 'iphlpapi.dll' -> '\Device\HarddiskVolume3\Windows\System32\iphlpapi.dll' [rcNtRedir=0xc0150008]
28981a0c.3c78: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaccd0000 'C:\WINDOWS\system32\rsaenh.dll'
28991a0c.3c78: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaeb00000 'C:\WINDOWS\System32\crypt32.dll'
29001a0c.3c78: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #21 'rpcrt4.dll'.
29011a0c.3c78: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\IPHLPAPI.DLL) WinVerifyTrust
29021a0c.3c78: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\IPHLPAPI.DLL
29031a0c.3c78: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
29041a0c.3c78: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
29051a0c.3c78: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
29061a0c.3c78: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
29071a0c.3c78: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ws2_32.dll
29081a0c.3c78: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'setupapi.dll'...
29091a0c.3c78: supR3HardenedWinVerifyCacheProcessImportTodos: 'setupapi.dll' -> '\Device\HarddiskVolume3\Windows\System32\setupapi.dll' [rcNtRedir=0xc0150008]
29101a0c.3c78: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
29111a0c.3c78: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
29121a0c.3c78: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaccd0000 'C:\WINDOWS\system32\rsaenh.dll'
29131a0c.3c78: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaeb00000 'C:\WINDOWS\System32\crypt32.dll'
29141a0c.3c78: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
29151a0c.3c78: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #29 'rpcrt4.dll'.
29161a0c.3c78: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #37 'cfgmgr32.dll'.
29171a0c.3c78: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #41 'bcrypt.dll'.
29181a0c.3c78: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\setupapi.dll) WinVerifyTrust
29191a0c.3c78: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\setupapi.dll
29201a0c.3c78: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
29211a0c.3c78: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
29221a0c.3c78: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxdd2.dll'...
29231a0c.3c78: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxdd2.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxdd2.dll' [rcNtRedir=0xc0150008]
29241a0c.3c78: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcrypt.dll'...
29251a0c.3c78: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcrypt.dll' -> '\Device\HarddiskVolume3\Windows\System32\bcrypt.dll' [rcNtRedir=0xc0150008]
29261a0c.3c78: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\bcrypt.dll
29271a0c.3c78: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'cfgmgr32.dll'...
29281a0c.3c78: supR3HardenedWinVerifyCacheProcessImportTodos: 'cfgmgr32.dll' -> '\Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll' [rcNtRedir=0xc0150008]
29291a0c.3c78: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll
29301a0c.3c78: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
29311a0c.3c78: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
29321a0c.3c78: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
29331a0c.3c78: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
29341a0c.3c78: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaccd0000 'C:\WINDOWS\system32\rsaenh.dll'
29351a0c.3c78: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
29361a0c.3c78: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
29371a0c.3c78: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxDD2.dll) WinVerifyTrust
29381a0c.3c78: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxDD2.dll
29391a0c.3c78: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxddu.dll'...
29401a0c.3c78: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxddu.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxddu.dll' [rcNtRedir=0xc0150008]
29411a0c.3c78: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
29421a0c.3c78: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
29431a0c.3c78: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
29441a0c.3c78: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
29451a0c.3c78: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll
29461a0c.3c78: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaccd0000 'C:\WINDOWS\system32\rsaenh.dll'
29471a0c.3c78: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
29481a0c.3c78: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
29491a0c.3c78: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
29501a0c.3c78: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'setupapi.dll'.
29511a0c.3c78: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'advapi32.dll'.
29521a0c.3c78: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxDDU.dll) WinVerifyTrust
29531a0c.3c78: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxDDU.dll
29541a0c.3c78: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
29551a0c.3c78: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
29561a0c.3c78: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxvmm.dll'...
29571a0c.3c78: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxvmm.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxvmm.dll' [rcNtRedir=0xc0150008]
29581a0c.3c78: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxVMM.dll
29591a0c.3c78: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
29601a0c.3c78: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
29611a0c.3c78: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
29621a0c.3c78: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
29631a0c.3c78: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'setupapi.dll'...
29641a0c.3c78: supR3HardenedWinVerifyCacheProcessImportTodos: 'setupapi.dll' -> '\Device\HarddiskVolume3\Windows\System32\setupapi.dll' [rcNtRedir=0xc0150008]
29651a0c.3c78: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\setupapi.dll
29661a0c.3c78: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
29671a0c.3c78: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
29681a0c.3c78: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
29691a0c.3c78: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
29701a0c.3c78: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
29711a0c.3c78: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
29721a0c.3c78: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxDD.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
29731a0c.3c78: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxDD.dll
29741a0c.3c78: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxDDU.dll
29751a0c.3c78: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxDD2.dll
29761a0c.3c78: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\IPHLPAPI.DLL
29771a0c.3c78: supR3HardenedDllNotificationCallback: load 00007fffafb50000 LB 0x00476000 C:\WINDOWS\System32\SETUPAPI.dll [fFlags=0x0]
29781a0c.3c78: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\setupapi.dll
29791a0c.3c78: supR3HardenedDllNotificationCallback: load 00007fff7dc60000 LB 0x00066000 C:\Program Files\Oracle\VirtualBox\VBoxDDU.dll [fFlags=0x0]
29801a0c.3c78: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxDDU.dll
29811a0c.3c78: supR3HardenedDllNotificationCallback: load 00007fff69730000 LB 0x0085c000 C:\Program Files\Oracle\VirtualBox\VBoxDD2.dll [fFlags=0x0]
29821a0c.3c78: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxDD2.dll
29831a0c.3c78: supR3HardenedDllNotificationCallback: load 00007fffad0d0000 LB 0x0003d000 C:\WINDOWS\SYSTEM32\IPHLPAPI.DLL [fFlags=0x0]
29841a0c.3c78: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\IPHLPAPI.DLL
29851a0c.3c78: supR3HardenedDllNotificationCallback: load 00007fff87690000 LB 0x009e1000 C:\Program Files\Oracle\VirtualBox\VBoxDD.DLL [fFlags=0x0]
29861a0c.3c78: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxDD.dll
29871a0c.3c78: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff87690000 'C:\Program Files\Oracle\VirtualBox\VBoxDD.DLL'
29881a0c.3c78: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaccd0000 'C:\WINDOWS\system32\rsaenh.dll'
29891a0c.3c78: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxC.dll
29901a0c.3c78: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxC.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
29911a0c.3c78: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff69f90000 'C:\Program Files\Oracle\VirtualBox\VBoxC.DLL'
29921a0c.3c78: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaccd0000 'C:\WINDOWS\system32\rsaenh.dll'
29931a0c.3c78: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxDD2.dll
29941a0c.3c78: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxDD2.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
29951a0c.3c78: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff69730000 'C:\Program Files\Oracle\VirtualBox\VBoxDD2.DLL'
29961a0c.3c78: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaccd0000 'C:\WINDOWS\system32\rsaenh.dll'
29971a0c.2e28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaccd0000 'C:\WINDOWS\system32\rsaenh.dll'
29981a0c.2e28: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
29991a0c.2e28: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxvmm.dll'.
30001a0c.2e28: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxrt.dll'.
30011a0c.2e28: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxSharedFolders.dll) WinVerifyTrust
30021a0c.2e28: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxSharedFolders.dll
30031a0c.2e28: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
30041a0c.2e28: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
30051a0c.2e28: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxvmm.dll'...
30061a0c.2e28: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxvmm.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxvmm.dll' [rcNtRedir=0xc0150008]
30071a0c.2e28: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxVMM.dll
30081a0c.2e28: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
30091a0c.2e28: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
30101a0c.2e28: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxSharedFolders.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
30111a0c.2e28: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxSharedFolders.dll
30121a0c.2e28: supR3HardenedDllNotificationCallback: load 00007fffa9f30000 LB 0x00014000 C:\Program Files\Oracle\VirtualBox\VBoxSharedFolders.DLL [fFlags=0x0]
30131a0c.2e28: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxSharedFolders.dll
30141a0c.2e28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffa9f30000 'C:\Program Files\Oracle\VirtualBox\VBoxSharedFolders.DLL'
30151a0c.25e8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaccd0000 'C:\WINDOWS\system32\rsaenh.dll'
30161a0c.25e8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
30171a0c.25e8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp100.dll'.
30181a0c.25e8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxvmm.dll'.
30191a0c.25e8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'vboxrt.dll'.
30201a0c.25e8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxGuestControlSvc.dll) WinVerifyTrust
30211a0c.25e8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxGuestControlSvc.dll
30221a0c.25e8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
30231a0c.25e8: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
30241a0c.25e8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxvmm.dll'...
30251a0c.25e8: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxvmm.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxvmm.dll' [rcNtRedir=0xc0150008]
30261a0c.25e8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxVMM.dll
30271a0c.25e8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
30281a0c.25e8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
30291a0c.25e8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
30301a0c.25e8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
30311a0c.25e8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxGuestControlSvc.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
30321a0c.25e8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxGuestControlSvc.dll
30331a0c.25e8: supR3HardenedDllNotificationCallback: load 00007fffaafa0000 LB 0x0000c000 C:\Program Files\Oracle\VirtualBox\VBoxGuestControlSvc.DLL [fFlags=0x0]
30341a0c.25e8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxGuestControlSvc.dll
30351a0c.25e8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaafa0000 'C:\Program Files\Oracle\VirtualBox\VBoxGuestControlSvc.DLL'
30361a0c.3198: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaccd0000 'C:\WINDOWS\system32\rsaenh.dll'
30371a0c.3198: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
30381a0c.3198: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp100.dll'.
30391a0c.3198: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxrt.dll'.
30401a0c.3198: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxGuestPropSvc.dll) WinVerifyTrust
30411a0c.3198: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxGuestPropSvc.dll
30421a0c.3198: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
30431a0c.3198: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
30441a0c.3198: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
30451a0c.3198: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
30461a0c.3198: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
30471a0c.3198: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
30481a0c.3198: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxGuestPropSvc.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
30491a0c.3198: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxGuestPropSvc.dll
30501a0c.3198: supR3HardenedDllNotificationCallback: load 00007fffa9f20000 LB 0x0000d000 C:\Program Files\Oracle\VirtualBox\VBoxGuestPropSvc.DLL [fFlags=0x0]
30511a0c.3198: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxGuestPropSvc.dll
30521a0c.3198: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffa9f20000 'C:\Program Files\Oracle\VirtualBox\VBoxGuestPropSvc.DLL'
30531a0c.3c78: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\IPHLPAPI.DLL
30541a0c.3c78: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\Iphlpapi.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
30551a0c.3c78: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffad0d0000 'C:\WINDOWS\system32\Iphlpapi.dll'
30561a0c.3c78: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'rpcrt4.dll'.
30571a0c.3c78: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'nsi.dll'.
30581a0c.3c78: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\winnsi.dll)
30591a0c.3c78: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\winnsi.dll
30601a0c.3c78: supR3HardenedDllNotificationCallback: load 00007fffaf460000 LB 0x00008000 C:\WINDOWS\System32\NSI.dll [fFlags=0x0]
30611a0c.3c78: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\nsi.dll)
30621a0c.3c78: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\nsi.dll
30631a0c.3c78: supR3HardenedDllNotificationCallback: load 00007fffa7480000 LB 0x0000b000 C:\WINDOWS\SYSTEM32\WINNSI.DLL [fFlags=0x0]
30641a0c.3c78: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winnsi.dll [avoiding WinVerifyTrust]
30651a0c.3c78: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'rpcrt4.dll'.
30661a0c.3c78: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\dhcpcsvc6.dll)
30671a0c.3c78: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\dhcpcsvc6.dll
30681a0c.3c78: supR3HardenedDllNotificationCallback: load 00007fffa1990000 LB 0x00016000 C:\WINDOWS\SYSTEM32\dhcpcsvc6.DLL [fFlags=0x0]
30691a0c.3c78: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\dhcpcsvc6.dll [avoiding WinVerifyTrust]
30701a0c.3c78: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'rpcrt4.dll'.
30711a0c.3c78: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'ws2_32.dll'.
30721a0c.3c78: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'nsi.dll'.
30731a0c.3c78: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\dhcpcsvc.dll)
30741a0c.3c78: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\dhcpcsvc.dll
30751a0c.3c78: supR3HardenedDllNotificationCallback: load 00007fffa0aa0000 LB 0x0001c000 C:\WINDOWS\SYSTEM32\dhcpcsvc.DLL [fFlags=0x0]
30761a0c.3c78: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\dhcpcsvc.dll [avoiding WinVerifyTrust]
30771a0c.3c78: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #21 'ws2_32.dll'.
30781a0c.3c78: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #23 'nsi.dll'.
30791a0c.3c78: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\dnsapi.dll)
30801a0c.3c78: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\dnsapi.dll
30811a0c.3c78: supR3HardenedDllNotificationCallback: load 00007fffad110000 LB 0x000c6000 C:\WINDOWS\SYSTEM32\DNSAPI.dll [fFlags=0x0]
30821a0c.3c78: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\dnsapi.dll [avoiding WinVerifyTrust]
30831a0c.3c78: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'nsi.dll'...
30841a0c.3c78: supR3HardenedWinVerifyCacheProcessImportTodos: 'nsi.dll' -> '\Device\HarddiskVolume3\Windows\System32\nsi.dll' [rcNtRedir=0xc0150008]
30851a0c.3c78: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\nsi.dll [lacks WinVerifyTrust]
30861a0c.3c78: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
30871a0c.3c78: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
30881a0c.3c78: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ws2_32.dll
30891a0c.3c78: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'nsi.dll'...
30901a0c.3c78: supR3HardenedWinVerifyCacheProcessImportTodos: 'nsi.dll' -> '\Device\HarddiskVolume3\Windows\System32\nsi.dll' [rcNtRedir=0xc0150008]
30911a0c.3c78: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\nsi.dll [lacks WinVerifyTrust]
30921a0c.3c78: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
30931a0c.3c78: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
30941a0c.3c78: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ws2_32.dll
30951a0c.3c78: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
30961a0c.3c78: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
30971a0c.3c78: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
30981a0c.3c78: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
30991a0c.3c78: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'nsi.dll'...
31001a0c.3c78: supR3HardenedWinVerifyCacheProcessImportTodos: 'nsi.dll' -> '\Device\HarddiskVolume3\Windows\System32\nsi.dll' [rcNtRedir=0xc0150008]
31011a0c.3c78: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\nsi.dll [lacks WinVerifyTrust]
31021a0c.3c78: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
31031a0c.3c78: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
31041a0c.3c78: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaccd0000 'C:\WINDOWS\system32\rsaenh.dll'
31051a0c.3c78: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaeb00000 'C:\WINDOWS\System32\crypt32.dll'
31061a0c.3c78: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\dnsapi.dll'
31071a0c.3c78: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000f08 pwszName=\Device\HarddiskVolume3\Windows\System32\dhcpcsvc.dll
31081a0c.3c78: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000000d0e700
31091a0c.3c78: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000d0e700
31101a0c.3c78: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=023C8DA2B39F9AA3A5B23F6B14BA6DD8E8288590
31111a0c.3c78: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaccd0000 'C:\WINDOWS\system32\rsaenh.dll'
31121a0c.3c78: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaeb00000 'C:\WINDOWS\System32\crypt32.dll'
31131a0c.3c78: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0316~31bf3856ad364e35~amd64~~10.0.17763.1.cat'; file='\Device\HarddiskVolume3\Windows\System32\dhcpcsvc.dll'
31141a0c.3c78: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
31151a0c.3c78: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\dhcpcsvc.dll'
31161a0c.3c78: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000f00 pwszName=\Device\HarddiskVolume3\Windows\System32\dhcpcsvc6.dll
31171a0c.3c78: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000000d0e700
31181a0c.3c78: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000d0e700
31191a0c.3c78: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=E0A1EEF9F9131F768A30314D53D98D8EC54A521D
31201a0c.3c78: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaccd0000 'C:\WINDOWS\system32\rsaenh.dll'
31211a0c.3c78: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaeb00000 'C:\WINDOWS\System32\crypt32.dll'
31221a0c.3c78: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0316~31bf3856ad364e35~amd64~~10.0.17763.1.cat'; file='\Device\HarddiskVolume3\Windows\System32\dhcpcsvc6.dll'
31231a0c.3c78: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
31241a0c.3c78: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\dhcpcsvc6.dll'
31251a0c.3c78: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaccd0000 'C:\WINDOWS\system32\rsaenh.dll'
31261a0c.3c78: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaeb00000 'C:\WINDOWS\System32\crypt32.dll'
31271a0c.3c78: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\nsi.dll'
31281a0c.3c78: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaccd0000 'C:\WINDOWS\system32\rsaenh.dll'
31291a0c.3c78: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaeb00000 'C:\WINDOWS\System32\crypt32.dll'
31301a0c.3c78: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\winnsi.dll'
31311a0c.3c78: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaccd0000 'C:\WINDOWS\system32\rsaenh.dll'
31321a0c.3c78: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaeb00000 'C:\WINDOWS\System32\crypt32.dll'
31331a0c.3c78: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #16 'rpcrt4.dll'.
31341a0c.3c78: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #25 'devobj.dll'.
31351a0c.3c78: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #37 'propsys.dll'.
31361a0c.3c78: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\MMDevAPI.dll) WinVerifyTrust
31371a0c.3c78: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\MMDevAPI.dll
31381a0c.3c78: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'propsys.dll'...
31391a0c.3c78: supR3HardenedWinVerifyCacheProcessImportTodos: 'propsys.dll' -> '\Device\HarddiskVolume3\Windows\System32\propsys.dll' [rcNtRedir=0xc0150008]
31401a0c.3c78: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaccd0000 'C:\WINDOWS\system32\rsaenh.dll'
31411a0c.3c78: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaeb00000 'C:\WINDOWS\System32\crypt32.dll'
31421a0c.3c78: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
31431a0c.3c78: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #15 'oleaut32.dll'.
31441a0c.3c78: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #31 'rpcrt4.dll'.
31451a0c.3c78: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\propsys.dll) WinVerifyTrust
31461a0c.3c78: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\propsys.dll
31471a0c.3c78: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'devobj.dll'...
31481a0c.3c78: supR3HardenedWinVerifyCacheProcessImportTodos: 'devobj.dll' -> '\Device\HarddiskVolume3\Windows\System32\devobj.dll' [rcNtRedir=0xc0150008]
31491a0c.3c78: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
31501a0c.3c78: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
31511a0c.3c78: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
31521a0c.3c78: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
31531a0c.3c78: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
31541a0c.3c78: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
31551a0c.3c78: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaccd0000 'C:\WINDOWS\system32\rsaenh.dll'
31561a0c.3c78: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaeb00000 'C:\WINDOWS\System32\crypt32.dll'
31571a0c.3c78: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #18 'cfgmgr32.dll'.
31581a0c.3c78: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\devobj.dll) WinVerifyTrust
31591a0c.3c78: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\devobj.dll
31601a0c.3c78: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
31611a0c.3c78: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
31621a0c.3c78: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'cfgmgr32.dll'...
31631a0c.3c78: supR3HardenedWinVerifyCacheProcessImportTodos: 'cfgmgr32.dll' -> '\Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll' [rcNtRedir=0xc0150008]
31641a0c.3c78: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll
31651a0c.3c78: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\MMDevApi.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
31661a0c.3c78: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\MMDevAPI.dll
31671a0c.3c78: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\devobj.dll
31681a0c.3c78: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\propsys.dll
31691a0c.3c78: supR3HardenedDllNotificationCallback: load 00007fffad9f0000 LB 0x00029000 C:\WINDOWS\System32\DEVOBJ.dll [fFlags=0x0]
31701a0c.3c78: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\devobj.dll
31711a0c.3c78: supR3HardenedDllNotificationCallback: load 00007fffa9880000 LB 0x001a9000 C:\WINDOWS\System32\PROPSYS.dll [fFlags=0x0]
31721a0c.3c78: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\propsys.dll
31731a0c.3c78: supR3HardenedDllNotificationCallback: load 00007fffa0630000 LB 0x00070000 C:\WINDOWS\System32\MMDevApi.dll [fFlags=0x0]
31741a0c.3c78: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\MMDevAPI.dll
31751a0c.3c78: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffa0630000 'C:\WINDOWS\System32\MMDevApi.dll'
31761a0c.3c78: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000fe0 pwszName=\Device\HarddiskVolume3\Windows\System32\dsound.dll
31771a0c.3c78: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000000d0e700
31781a0c.3c78: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000d0e700
31791a0c.3c78: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=8AD365A940454786DE7BEC545039701B233FD977
31801a0c.3c78: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaccd0000 'C:\WINDOWS\system32\rsaenh.dll'
31811a0c.3c78: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaeb00000 'C:\WINDOWS\System32\crypt32.dll'
31821a0c.3c78: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_505_for_KB4507469~31bf3856ad364e35~amd64~~10.0.1.5.cat'; file='\Device\HarddiskVolume3\Windows\System32\dsound.dll'
31831a0c.3c78: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
31841a0c.3c78: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
31851a0c.3c78: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #32 'winmm.dll'.
31861a0c.3c78: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\dsound.dll) WinVerifyTrust
31871a0c.3c78: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\dsound.dll
31881a0c.3c78: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
31891a0c.3c78: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume3\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008]
31901a0c.3c78: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmm.dll
31911a0c.3c78: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
31921a0c.3c78: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
31931a0c.3c78: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\dsound.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
31941a0c.3c78: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\dsound.dll
31951a0c.3c78: supR3HardenedDllNotificationCallback: load 00007fff9f500000 LB 0x00096000 C:\WINDOWS\System32\dsound.dll [fFlags=0x0]
31961a0c.3c78: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\dsound.dll
31971a0c.3c78: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\dsound.dll
31981a0c.3c78: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\dsound.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
31991a0c.3c78: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff9f500000 'C:\WINDOWS\System32\dsound.dll'
32001a0c.3c78: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff9f500000 'C:\WINDOWS\System32\dsound.dll'
32011a0c.3c78: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\dsound.dll
32021a0c.3c78: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\dsound.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
32031a0c.3c78: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff9f500000 'C:\WINDOWS\system32\dsound.dll'
32041a0c.3c78: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\MMDevAPI.dll
32051a0c.3c78: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\MMDEVAPI.DLL (Input=MMDEVAPI.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
32061a0c.3c78: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffa0630000 'C:\WINDOWS\System32\MMDEVAPI.DLL'
32071a0c.2d88: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaccd0000 'C:\WINDOWS\system32\rsaenh.dll'
32081a0c.2d88: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaeb00000 'C:\WINDOWS\System32\crypt32.dll'
32091a0c.2d88: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcp_win.dll'.
32101a0c.2d88: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'rpcrt4.dll'.
32111a0c.2d88: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'oleaut32.dll'.
32121a0c.2d88: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #57 'mmdevapi.dll'.
32131a0c.2d88: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #58 'avrt.dll'.
32141a0c.2d88: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\AudioSes.dll) WinVerifyTrust
32151a0c.2d88: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\AudioSes.dll
32161a0c.2d88: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'avrt.dll'...
32171a0c.2d88: supR3HardenedWinVerifyCacheProcessImportTodos: 'avrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\avrt.dll' [rcNtRedir=0xc0150008]
32181a0c.2d88: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaccd0000 'C:\WINDOWS\system32\rsaenh.dll'
32191a0c.2d88: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaeb00000 'C:\WINDOWS\System32\crypt32.dll'
32201a0c.2d88: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\avrt.dll) WinVerifyTrust
32211a0c.2d88: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\avrt.dll
32221a0c.2d88: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mmdevapi.dll'...
32231a0c.2d88: supR3HardenedWinVerifyCacheProcessImportTodos: 'mmdevapi.dll' -> '\Device\HarddiskVolume3\Windows\System32\mmdevapi.dll' [rcNtRedir=0xc0150008]
32241a0c.2d88: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\MMDevAPI.dll
32251a0c.2d88: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
32261a0c.2d88: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
32271a0c.2d88: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
32281a0c.2d88: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
32291a0c.2d88: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll
32301a0c.2d88: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
32311a0c.2d88: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
32321a0c.2d88: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll
32331a0c.2d88: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\AUDIOSES.DLL (Input=AUDIOSES.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
32341a0c.2d88: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\AudioSes.dll
32351a0c.2d88: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\avrt.dll
32361a0c.2d88: supR3HardenedDllNotificationCallback: load 00007fffa9cd0000 LB 0x0000a000 C:\WINDOWS\SYSTEM32\AVRT.dll [fFlags=0x0]
32371a0c.2d88: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\avrt.dll
32381a0c.2d88: supR3HardenedDllNotificationCallback: load 00007fff92300000 LB 0x00148000 C:\WINDOWS\System32\AUDIOSES.DLL [fFlags=0x0]
32391a0c.2d88: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\AudioSes.dll
32401a0c.2d88: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff92300000 'C:\WINDOWS\System32\AUDIOSES.DLL'
32411a0c.3c78: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmm.dll
32421a0c.3c78: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\winmm.dll (Input=winmm.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
32431a0c.3c78: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaa7e0000 'C:\WINDOWS\System32\winmm.dll'
32441a0c.3c78: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000001068 pwszName=\Device\HarddiskVolume3\Windows\System32\wdmaud.drv
32451a0c.3c78: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000000d0e700
32461a0c.3c78: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000d0e700
32471a0c.3c78: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=22E5B934FBB9B8EED168F5BD0121AD902CCB797A
32481a0c.3c78: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaccd0000 'C:\WINDOWS\system32\rsaenh.dll'
32491a0c.3c78: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaeb00000 'C:\WINDOWS\System32\crypt32.dll'
32501a0c.3c78: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.17763.1.cat'; file='\Device\HarddiskVolume3\Windows\System32\wdmaud.drv'
32511a0c.3c78: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
32521a0c.3c78: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
32531a0c.3c78: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'mmdevapi.dll'.
32541a0c.3c78: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #27 'ksuser.dll'.
32551a0c.3c78: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #28 'avrt.dll'.
32561a0c.3c78: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\wdmaud.drv) WinVerifyTrust
32571a0c.3c78: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\wdmaud.drv
32581a0c.3c78: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'avrt.dll'...
32591a0c.3c78: supR3HardenedWinVerifyCacheProcessImportTodos: 'avrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\avrt.dll' [rcNtRedir=0xc0150008]
32601a0c.3c78: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\avrt.dll
32611a0c.3c78: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ksuser.dll'...
32621a0c.3c78: supR3HardenedWinVerifyCacheProcessImportTodos: 'ksuser.dll' -> '\Device\HarddiskVolume3\Windows\System32\ksuser.dll' [rcNtRedir=0xc0150008]
32631a0c.3c78: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaccd0000 'C:\WINDOWS\system32\rsaenh.dll'
32641a0c.3c78: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaeb00000 'C:\WINDOWS\System32\crypt32.dll'
32651a0c.3c78: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
32661a0c.3c78: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\ksuser.dll) WinVerifyTrust
32671a0c.3c78: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\ksuser.dll
32681a0c.3c78: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mmdevapi.dll'...
32691a0c.3c78: supR3HardenedWinVerifyCacheProcessImportTodos: 'mmdevapi.dll' -> '\Device\HarddiskVolume3\Windows\System32\mmdevapi.dll' [rcNtRedir=0xc0150008]
32701a0c.3c78: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\MMDevAPI.dll
32711a0c.3c78: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
32721a0c.3c78: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
32731a0c.3c78: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
32741a0c.3c78: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
32751a0c.3c78: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll
32761a0c.3c78: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
32771a0c.3c78: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wdmaud.drv
32781a0c.3c78: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ksuser.dll
32791a0c.3c78: supR3HardenedDllNotificationCallback: load 00007fffa41e0000 LB 0x00009000 C:\WINDOWS\SYSTEM32\ksuser.dll [fFlags=0x0]
32801a0c.3c78: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ksuser.dll
32811a0c.3c78: supR3HardenedDllNotificationCallback: load 00007fffa4520000 LB 0x00044000 C:\WINDOWS\System32\wdmaud.drv [fFlags=0x0]
32821a0c.3c78: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wdmaud.drv
32831a0c.3c78: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffa4520000 'C:\WINDOWS\System32\wdmaud.drv'
32841a0c.3c78: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wdmaud.drv
32851a0c.3c78: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
32861a0c.3c78: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffa4520000 'C:\WINDOWS\System32\wdmaud.drv'
32871a0c.3c78: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wdmaud.drv
32881a0c.3c78: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
32891a0c.3c78: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffa4520000 'C:\WINDOWS\System32\wdmaud.drv'
32901a0c.3c78: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wdmaud.drv
32911a0c.3c78: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
32921a0c.3c78: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffa4520000 'C:\WINDOWS\System32\wdmaud.drv'
32931a0c.3c78: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wdmaud.drv
32941a0c.3c78: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
32951a0c.3c78: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffa4520000 'C:\WINDOWS\System32\wdmaud.drv'
32961a0c.3c78: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wdmaud.drv
32971a0c.3c78: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
32981a0c.3c78: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffa4520000 'C:\WINDOWS\System32\wdmaud.drv'
32991a0c.3c78: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wdmaud.drv
33001a0c.3c78: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
33011a0c.3c78: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffa4520000 'C:\WINDOWS\System32\wdmaud.drv'
33021a0c.3c78: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffa4520000 'C:\WINDOWS\System32\wdmaud.drv'
33031a0c.3c78: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000001038 pwszName=\Device\HarddiskVolume3\Windows\System32\msacm32.drv
33041a0c.3c78: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000000d0e700
33051a0c.3c78: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000d0e700
33061a0c.3c78: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=DF9222E8F115E50DE05D7AD2D27BDC071ADD62AF
33071a0c.3c78: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaccd0000 'C:\WINDOWS\system32\rsaenh.dll'
33081a0c.3c78: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaeb00000 'C:\WINDOWS\System32\crypt32.dll'
33091a0c.3c78: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.17763.1.cat'; file='\Device\HarddiskVolume3\Windows\System32\msacm32.drv'
33101a0c.3c78: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
33111a0c.3c78: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
33121a0c.3c78: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'mmdevapi.dll'.
33131a0c.3c78: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #13 'msacm32.dll'.
33141a0c.3c78: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #14 'winmmbase.dll'.
33151a0c.3c78: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\msacm32.drv) WinVerifyTrust
33161a0c.3c78: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\msacm32.drv
33171a0c.3c78: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmmbase.dll'...
33181a0c.3c78: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmmbase.dll' -> '\Device\HarddiskVolume3\Windows\System32\winmmbase.dll' [rcNtRedir=0xc0150008]
33191a0c.3c78: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmmbase.dll
33201a0c.3c78: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msacm32.dll'...
33211a0c.3c78: supR3HardenedWinVerifyCacheProcessImportTodos: 'msacm32.dll' -> '\Device\HarddiskVolume3\Windows\System32\msacm32.dll' [rcNtRedir=0xc0150008]
33221a0c.3c78: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaccd0000 'C:\WINDOWS\system32\rsaenh.dll'
33231a0c.3c78: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaeb00000 'C:\WINDOWS\System32\crypt32.dll'
33241a0c.3c78: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
33251a0c.3c78: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\msacm32.dll) WinVerifyTrust
33261a0c.3c78: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\msacm32.dll
33271a0c.3c78: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mmdevapi.dll'...
33281a0c.3c78: supR3HardenedWinVerifyCacheProcessImportTodos: 'mmdevapi.dll' -> '\Device\HarddiskVolume3\Windows\System32\mmdevapi.dll' [rcNtRedir=0xc0150008]
33291a0c.3c78: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\MMDevAPI.dll
33301a0c.3c78: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
33311a0c.3c78: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
33321a0c.3c78: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
33331a0c.3c78: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
33341a0c.3c78: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
33351a0c.3c78: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msacm32.drv
33361a0c.3c78: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msacm32.dll
33371a0c.3c78: supR3HardenedDllNotificationCallback: load 00007fffa44f0000 LB 0x0001c000 C:\WINDOWS\SYSTEM32\MSACM32.dll [fFlags=0x0]
33381a0c.3c78: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msacm32.dll
33391a0c.3c78: supR3HardenedDllNotificationCallback: load 00007fffa4510000 LB 0x0000d000 C:\WINDOWS\System32\msacm32.drv [fFlags=0x0]
33401a0c.3c78: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msacm32.drv
33411a0c.3c78: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffa4510000 'C:\WINDOWS\System32\msacm32.drv'
33421a0c.3c78: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msacm32.drv
33431a0c.3c78: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
33441a0c.3c78: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffa4510000 'C:\WINDOWS\System32\msacm32.drv'
33451a0c.3c78: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msacm32.drv
33461a0c.3c78: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
33471a0c.3c78: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffa4510000 'C:\WINDOWS\System32\msacm32.drv'
33481a0c.3c78: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msacm32.drv
33491a0c.3c78: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
33501a0c.3c78: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffa4510000 'C:\WINDOWS\System32\msacm32.drv'
33511a0c.3c78: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msacm32.drv
33521a0c.3c78: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
33531a0c.3c78: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffa4510000 'C:\WINDOWS\System32\msacm32.drv'
33541a0c.3c78: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msacm32.drv
33551a0c.3c78: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
33561a0c.3c78: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffa4510000 'C:\WINDOWS\System32\msacm32.drv'
33571a0c.3c78: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msacm32.drv
33581a0c.3c78: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
33591a0c.3c78: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffa4510000 'C:\WINDOWS\System32\msacm32.drv'
33601a0c.3c78: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffa4510000 'C:\WINDOWS\System32\msacm32.drv'
33611a0c.3c78: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffa4510000 'C:\WINDOWS\System32\msacm32.drv'
33621a0c.3c78: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffa4510000 'C:\WINDOWS\System32\msacm32.drv'
33631a0c.3c78: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000000000010f4 pwszName=\Device\HarddiskVolume3\Windows\System32\midimap.dll
33641a0c.3c78: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000000d0e700
33651a0c.3c78: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000d0e700
33661a0c.3c78: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=FE1B51D5EFA4634DA5F3478BB920BDCB24116539
33671a0c.3c78: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaccd0000 'C:\WINDOWS\system32\rsaenh.dll'
33681a0c.3c78: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaeb00000 'C:\WINDOWS\System32\crypt32.dll'
33691a0c.3c78: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.17763.1.cat'; file='\Device\HarddiskVolume3\Windows\System32\midimap.dll'
33701a0c.3c78: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
33711a0c.3c78: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
33721a0c.3c78: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'winmm.dll'.
33731a0c.3c78: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\midimap.dll) WinVerifyTrust
33741a0c.3c78: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\midimap.dll
33751a0c.3c78: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
33761a0c.3c78: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume3\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008]
33771a0c.3c78: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmm.dll
33781a0c.3c78: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
33791a0c.3c78: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
33801a0c.3c78: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\midimap.dll (Input=midimap.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
33811a0c.3c78: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\midimap.dll
33821a0c.3c78: supR3HardenedDllNotificationCallback: load 00007fffa44e0000 LB 0x0000a000 C:\WINDOWS\System32\midimap.dll [fFlags=0x0]
33831a0c.3c78: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\midimap.dll
33841a0c.3c78: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffa44e0000 'C:\WINDOWS\System32\midimap.dll'
33851a0c.3c78: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\midimap.dll
33861a0c.3c78: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\midimap.dll (Input=midimap.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
33871a0c.3c78: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffa44e0000 'C:\WINDOWS\System32\midimap.dll'
33881a0c.3c78: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\midimap.dll
33891a0c.3c78: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\midimap.dll (Input=midimap.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
33901a0c.3c78: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffa44e0000 'C:\WINDOWS\System32\midimap.dll'
33911a0c.3c78: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\midimap.dll
33921a0c.3c78: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\midimap.dll (Input=midimap.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
33931a0c.3c78: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffa44e0000 'C:\WINDOWS\System32\midimap.dll'
33941a0c.3c78: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaa7e0000 'C:\WINDOWS\System32\winmm.dll'
33951a0c.3c78: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaa7e0000 'C:\WINDOWS\System32\winmm.dll'
33961a0c.3c78: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaa7e0000 'C:\WINDOWS\System32\winmm.dll'
33971a0c.3c78: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaa7e0000 'C:\WINDOWS\System32\winmm.dll'
33981a0c.3c78: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaa7e0000 'C:\WINDOWS\System32\winmm.dll'
33991a0c.3c78: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaa7e0000 'C:\WINDOWS\System32\winmm.dll'
34001a0c.3c78: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaa7e0000 'C:\WINDOWS\System32\winmm.dll'
34011a0c.3c78: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmm.dll
34021a0c.3c78: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\winmm.dll (Input=winmm.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
34031a0c.3c78: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaa7e0000 'C:\WINDOWS\System32\winmm.dll'
34041a0c.3c78: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaa7e0000 'C:\WINDOWS\System32\winmm.dll'
34051a0c.3c78: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaa7e0000 'C:\WINDOWS\System32\winmm.dll'
34061a0c.3c78: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaa7e0000 'C:\WINDOWS\System32\winmm.dll'
34071a0c.3c78: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\dsound.dll
34081a0c.3c78: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\dsound.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
34091a0c.3c78: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff9f500000 'C:\WINDOWS\system32\dsound.dll'
34101a0c.3c78: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaa7e0000 'C:\WINDOWS\System32\winmm.dll'
34111a0c.3c78: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaa7e0000 'C:\WINDOWS\System32\winmm.dll'
34121a0c.3c78: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaa7e0000 'C:\WINDOWS\System32\winmm.dll'
34131a0c.3c78: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaa7e0000 'C:\WINDOWS\System32\winmm.dll'
34141a0c.3c78: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaa7e0000 'C:\WINDOWS\System32\winmm.dll'
34151a0c.3c78: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffaa7e0000 'C:\WINDOWS\System32\winmm.dll'

© 2024 Oracle Support Privacy / Do Not Sell My Info Terms of Use Trademark Policy