VirtualBox

Ticket #19200: 20200203 VBoxHardening.log

File 20200203 VBoxHardening.log, 409.7 KB (added by Jacob Klein, 5 years ago)
Line 
11040.8e4: Log file opened: 6.1.2r135662 g_hStartupLog=0000000000000074 g_uNtVerCombined=0xa047bb00
21040.8e4: \SystemRoot\System32\ntdll.dll:
31040.8e4: CreationTime: 2019-10-09T22:05:28.256677000Z
41040.8e4: LastWriteTime: 2019-10-09T22:05:28.287941600Z
51040.8e4: ChangeTime: 2020-02-02T03:51:32.356542500Z
61040.8e4: FileAttributes: 0x20
71040.8e4: Size: 0x1e8528
81040.8e4: NT Headers: 0xd8
91040.8e4: Timestamp: 0x99ca0526
101040.8e4: Machine: 0x8664 - amd64
111040.8e4: Timestamp: 0x99ca0526
121040.8e4: Image Version: 10.0
131040.8e4: SizeOfImage: 0x1f0000 (2031616)
141040.8e4: Resource Dir: 0x17f000 LB 0x6f310
151040.8e4: [Version info resource found at 0xd8! (ID/Name: 0x1; SubID/SubName: 0x409)]
161040.8e4: [Raw version resource data: 0x17f0f0 LB 0x380, codepage 0x0 (reserved 0x0)]
171040.8e4: ProductName: Microsoft® Windows® Operating System
181040.8e4: ProductVersion: 10.0.18362.418
191040.8e4: FileVersion: 10.0.18362.418 (WinBuild.160101.0800)
201040.8e4: FileDescription: NT Layer DLL
211040.8e4: \SystemRoot\System32\kernel32.dll:
221040.8e4: CreationTime: 2019-09-28T13:35:30.203671600Z
231040.8e4: LastWriteTime: 2019-09-28T13:35:30.203671600Z
241040.8e4: ChangeTime: 2020-02-02T03:51:32.184680300Z
251040.8e4: FileAttributes: 0x20
261040.8e4: Size: 0xb0570
271040.8e4: NT Headers: 0xe8
281040.8e4: Timestamp: 0xd0cecc10
291040.8e4: Machine: 0x8664 - amd64
301040.8e4: Timestamp: 0xd0cecc10
311040.8e4: Image Version: 10.0
321040.8e4: SizeOfImage: 0xb2000 (729088)
331040.8e4: Resource Dir: 0xb0000 LB 0x520
341040.8e4: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
351040.8e4: [Raw version resource data: 0xb00b0 LB 0x3a4, codepage 0x0 (reserved 0x0)]
361040.8e4: ProductName: Microsoft® Windows® Operating System
371040.8e4: ProductVersion: 10.0.18362.329
381040.8e4: FileVersion: 10.0.18362.329 (WinBuild.160101.0800)
391040.8e4: FileDescription: Windows NT BASE API Client DLL
401040.8e4: \SystemRoot\System32\KernelBase.dll:
411040.8e4: CreationTime: 2020-02-02T03:51:03.280430600Z
421040.8e4: LastWriteTime: 2020-02-02T03:51:03.327303700Z
431040.8e4: ChangeTime: 2020-02-02T03:53:38.103441700Z
441040.8e4: FileAttributes: 0x20
451040.8e4: Size: 0x2a3508
461040.8e4: NT Headers: 0xf0
471040.8e4: Timestamp: 0xf96f12ee
481040.8e4: Machine: 0x8664 - amd64
491040.8e4: Timestamp: 0xf96f12ee
501040.8e4: Image Version: 10.0
511040.8e4: SizeOfImage: 0x2a3000 (2764800)
521040.8e4: Resource Dir: 0x27d000 LB 0x548
531040.8e4: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
541040.8e4: [Raw version resource data: 0x27d0b0 LB 0x3bc, codepage 0x0 (reserved 0x0)]
551040.8e4: ProductName: Microsoft® Windows® Operating System
561040.8e4: ProductVersion: 10.0.18362.628
571040.8e4: FileVersion: 10.0.18362.628 (WinBuild.160101.0800)
581040.8e4: FileDescription: Windows NT BASE API Client DLL
591040.8e4: \SystemRoot\System32\apisetschema.dll:
601040.8e4: CreationTime: 2019-03-19T04:43:54.837151500Z
611040.8e4: LastWriteTime: 2019-03-19T04:43:54.837151500Z
621040.8e4: ChangeTime: 2020-02-02T03:51:32.184680300Z
631040.8e4: FileAttributes: 0x20
641040.8e4: Size: 0x1d028
651040.8e4: NT Headers: 0xc8
661040.8e4: Timestamp: 0xd6ced080
671040.8e4: Machine: 0x8664 - amd64
681040.8e4: Timestamp: 0xd6ced080
691040.8e4: Image Version: 10.0
701040.8e4: SizeOfImage: 0x1e000 (122880)
711040.8e4: Resource Dir: 0x1d000 LB 0x408
721040.8e4: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
731040.8e4: [Raw version resource data: 0x1d060 LB 0x3a8, codepage 0x0 (reserved 0x0)]
741040.8e4: ProductName: Microsoft® Windows® Operating System
751040.8e4: ProductVersion: 10.0.18362.1
761040.8e4: FileVersion: 10.0.18362.1 (WinBuild.160101.0800)
771040.8e4: FileDescription: ApiSet Schema DLL
781040.8e4: NtOpenDirectoryObject failed on \Driver: 0xc0000022
791040.8e4: supR3HardenedWinFindAdversaries: 0x0
801040.8e4: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox'
811040.8e4: Calling main()
821040.8e4: SUPR3HardenedMain: pszProgName=VirtualBoxVM fFlags=0x2
831040.8e4: supR3HardenedWinInitAppBin(0x2): '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox'
841040.8e4: SUPR3HardenedMain: Respawn #1
851040.8e4: System32: \Device\HarddiskVolume6\Windows\System32
861040.8e4: WinSxS: \Device\HarddiskVolume6\Windows\WinSxS
871040.8e4: KnownDllPath: C:\Windows\System32
881040.8e4: supR3HardenedWinInit: Performing a limited self purification...
891040.8e4: supHardNtVpScanVirtualMemory: enmKind=SELF_PURIFICATION
901040.8e4: *0000000000000000-00000000007cffff 0x0001/0x0000 0x0000000
911040.8e4: *00000000007d0000-00000000007dffff 0x0004/0x0004 0x0040000
921040.8e4: 00000000007e0000-00000000007effff 0x0001/0x0000 0x0000000
931040.8e4: *00000000007f0000-00000000007f3fff 0x0002/0x0002 0x0040000
941040.8e4: 00000000007f4000-00000000007fffff 0x0001/0x0000 0x0000000
951040.8e4: *0000000000800000-000000000087dfff 0x0000/0x0004 0x0020000
961040.8e4: 000000000087e000-0000000000880fff 0x0004/0x0004 0x0020000
971040.8e4: 0000000000881000-00000000009fffff 0x0000/0x0004 0x0020000
981040.8e4: *0000000000a00000-0000000000a1afff 0x0002/0x0002 0x0040000
991040.8e4: 0000000000a1b000-0000000000a1ffff 0x0001/0x0000 0x0000000
1001040.8e4: *0000000000a20000-0000000000ad8fff 0x0000/0x0004 0x0020000
1011040.8e4: 0000000000ad9000-0000000000adbfff 0x0104/0x0004 0x0020000
1021040.8e4: 0000000000adc000-0000000000b1ffff 0x0004/0x0004 0x0020000
1031040.8e4: *0000000000b20000-0000000000b21fff 0x0004/0x0004 0x0020000
1041040.8e4: 0000000000b22000-0000000000b2ffff 0x0001/0x0000 0x0000000
1051040.8e4: *0000000000b30000-0000000000bf6fff 0x0002/0x0002 0x0040000
1061040.8e4: 0000000000bf7000-0000000000c1ffff 0x0001/0x0000 0x0000000
1071040.8e4: *0000000000c20000-0000000000c24fff 0x0004/0x0004 0x0020000
1081040.8e4: 0000000000c25000-0000000000d1ffff 0x0000/0x0004 0x0020000
1091040.8e4: 0000000000d20000-0000000000d5ffff 0x0001/0x0000 0x0000000
1101040.8e4: *0000000000d60000-0000000000d6efff 0x0004/0x0004 0x0020000
1111040.8e4: 0000000000d6f000-0000000000d6ffff 0x0000/0x0004 0x0020000
1121040.8e4: *0000000000d70000-0000000000d7efff 0x0000/0x0004 0x0020000
1131040.8e4: 0000000000d7f000-0000000000f6ffff 0x0004/0x0004 0x0020000
1141040.8e4: 0000000000f70000-0000000000f70fff 0x0000/0x0004 0x0020000
1151040.8e4: 0000000000f71000-0000000000f7ffff 0x0001/0x0000 0x0000000
1161040.8e4: *0000000000f80000-0000000000f81fff 0x0004/0x0004 0x0020000
1171040.8e4: 0000000000f82000-0000000000fe1fff 0x0000/0x0004 0x0020000
1181040.8e4: 0000000000fe2000-0000000000feffff 0x0001/0x0000 0x0000000
1191040.8e4: *0000000000ff0000-000000000100cfff 0x0004/0x0004 0x0020000
1201040.8e4: 000000000100d000-00000000010effff 0x0000/0x0004 0x0020000
1211040.8e4: 00000000010f0000-000000007ffdffff 0x0001/0x0000 0x0000000
1221040.8e4: *000000007ffe0000-000000007ffe0fff 0x0002/0x0002 0x0020000
1231040.8e4: 000000007ffe1000-000000007ffe2fff 0x0001/0x0000 0x0000000
1241040.8e4: *000000007ffe3000-000000007ffe3fff 0x0002/0x0002 0x0020000
1251040.8e4: 000000007ffe4000-00007ff44da2ffff 0x0001/0x0000 0x0000000
1261040.8e4: *00007ff44da30000-00007ff44da34fff 0x0002/0x0002 0x0040000
1271040.8e4: 00007ff44da35000-00007ff44db2ffff 0x0000/0x0002 0x0040000
1281040.8e4: *00007ff44db30000-00007ff54db4ffff 0x0000/0x0004 0x0020000
1291040.8e4: *00007ff54db50000-00007ff54fb4ffff 0x0000/0x0004 0x0020000
1301040.8e4: 00007ff54fb50000-00007ff54fb50fff 0x0004/0x0004 0x0020000
1311040.8e4: 00007ff54fb51000-00007ff54fb5ffff 0x0001/0x0000 0x0000000
1321040.8e4: *00007ff54fb60000-00007ff54fb60fff 0x0002/0x0002 0x0040000
1331040.8e4: 00007ff54fb61000-00007ff54fb6ffff 0x0001/0x0000 0x0000000
1341040.8e4: *00007ff54fb70000-00007ff54fb92fff 0x0002/0x0002 0x0040000
1351040.8e4: 00007ff54fb93000-00007ff7c184ffff 0x0001/0x0000 0x0000000
1361040.8e4: *00007ff7c1850000-00007ff7c1850fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
1371040.8e4: 00007ff7c1851000-00007ff7c18c6fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
1381040.8e4: 00007ff7c18c7000-00007ff7c18c7fff 0x0080/0x0080 0x1000000 \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
1391040.8e4: 00007ff7c18c8000-00007ff7c190ffff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
1401040.8e4: 00007ff7c1910000-00007ff7c1912fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
1411040.8e4: 00007ff7c1913000-00007ff7c1915fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
1421040.8e4: 00007ff7c1916000-00007ff7c1918fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
1431040.8e4: 00007ff7c1919000-00007ff7c1919fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
1441040.8e4: 00007ff7c191a000-00007ff7c191bfff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
1451040.8e4: 00007ff7c191c000-00007ff7c191cfff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
1461040.8e4: 00007ff7c191d000-00007ff7c1965fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
1471040.8e4: 00007ff7c1966000-00007ffbdf4affff 0x0001/0x0000 0x0000000
1481040.8e4: *00007ffbdf4b0000-00007ffbdf4b0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume6\Windows\System32\KernelBase.dll
1491040.8e4: 00007ffbdf4b1000-00007ffbdf5b5fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume6\Windows\System32\KernelBase.dll
1501040.8e4: 00007ffbdf5b6000-00007ffbdf717fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume6\Windows\System32\KernelBase.dll
1511040.8e4: 00007ffbdf718000-00007ffbdf71bfff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume6\Windows\System32\KernelBase.dll
1521040.8e4: 00007ffbdf71c000-00007ffbdf71cfff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume6\Windows\System32\KernelBase.dll
1531040.8e4: 00007ffbdf71d000-00007ffbdf752fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume6\Windows\System32\KernelBase.dll
1541040.8e4: 00007ffbdf753000-00007ffbe078ffff 0x0001/0x0000 0x0000000
1551040.8e4: *00007ffbe0790000-00007ffbe0790fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume6\Windows\System32\kernel32.dll
1561040.8e4: 00007ffbe0791000-00007ffbe0805fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume6\Windows\System32\kernel32.dll
1571040.8e4: 00007ffbe0806000-00007ffbe0837fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume6\Windows\System32\kernel32.dll
1581040.8e4: 00007ffbe0838000-00007ffbe0838fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume6\Windows\System32\kernel32.dll
1591040.8e4: 00007ffbe0839000-00007ffbe0839fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume6\Windows\System32\kernel32.dll
1601040.8e4: 00007ffbe083a000-00007ffbe0841fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume6\Windows\System32\kernel32.dll
1611040.8e4: 00007ffbe0842000-00007ffbe1abffff 0x0001/0x0000 0x0000000
1621040.8e4: *00007ffbe1ac0000-00007ffbe1ac0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume6\Windows\System32\ntdll.dll
1631040.8e4: 00007ffbe1ac1000-00007ffbe1bd7fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume6\Windows\System32\ntdll.dll
1641040.8e4: 00007ffbe1bd8000-00007ffbe1c1efff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume6\Windows\System32\ntdll.dll
1651040.8e4: 00007ffbe1c1f000-00007ffbe1c1ffff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume6\Windows\System32\ntdll.dll
1661040.8e4: 00007ffbe1c20000-00007ffbe1c21fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume6\Windows\System32\ntdll.dll
1671040.8e4: 00007ffbe1c22000-00007ffbe1c2afff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume6\Windows\System32\ntdll.dll
1681040.8e4: 00007ffbe1c2b000-00007ffbe1caffff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume6\Windows\System32\ntdll.dll
1691040.8e4: 00007ffbe1cb0000-00007ffffffeffff 0x0001/0x0000 0x0000000
1701040.8e4: kernel32.dll: timestamp 0xd0cecc10 (rc=VINF_SUCCESS)
1711040.8e4: kernelbase.dll: timestamp 0xf96f12ee (rc=VINF_SUCCESS)
1721040.8e4: VirtualBoxVM.exe: timestamp 0x5e1f1d0f (rc=VINF_SUCCESS)
1731040.8e4: '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe' has no imports
1741040.8e4: '\Device\HarddiskVolume6\Windows\System32\ntdll.dll' has no imports
1751040.8e4: supR3HardenedWinInit: SUPHARDNTVPKIND_SELF_PURIFICATION_LIMITED -> VINF_SUCCESS, cFixes=0
1761040.8e4: '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe' has no imports
1771040.8e4: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe)
1781040.8e4: supR3HardNtEnableThreadCreationEx:
1791040.8e4: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007ffbe1b317f0 pvNtTerminateThread=00007ffbe1b5cb10
1801040.8e4: supR3HardenedWinDoReSpawn(1): New child 3c64.2698 [kernel32].
1811040.8e4: supR3HardNtChildGatherData: PebBaseAddress=0000000000677000 cbPeb=0x388
1821040.8e4: supR3HardNtPuChFindNtdll: uNtDllParentAddr=00007ffbe1ac0000 uNtDllChildAddr=00007ffbe1ac0000
1831040.8e4: supR3HardenedWinSetupChildInit: uLdrInitThunk=00007ffbe1b317f0
1841040.8e4: supR3HardenedWinSetupChildInit: Initial context:
185 rax=0000000000000000 rbx=0000000000000000 rcx=00007ff7c1857900 rdx=0000000000677000
186 rsi=0000000000000000 rdi=0000000000000000 r8 =0000000000000000 r9 =0000000000000000
187 r10=0000000000000000 r11=0000000000000000 r12=0000000000000000 r13=0000000000000000
188 r14=0000000000000000 r15=0000000000000000 P1=0000000000000000 P2=0000000000000000
189 rip=00007ffbe1b2ceb0 rsp=00000000005cfd68 rbp=0000000000000000 ctxflags=0010001b
190 cs=0033 ss=002b ds=0000 es=0000 fs=0000 gs=0000 eflags=00000200 mxcrx=00001f80
191 P3=0000000000000000 P4=0000000000000000 P5=0000000000000000 P6=0000000000000000
192 dr0=0000000000000000 dr1=0000000000000000 dr2=0000000000000000 dr3=0000000000000000
193 dr6=0000000000000000 dr7=0000000000000000 vcr=0000000000000000 dcr=0000000000000000
194 lbt=0000000000000000 lbf=0000000000000000 lxt=0000000000000000 lxf=0000000000000000
1951040.8e4: supR3HardenedWinSetupChildInit: Start child.
1961040.8e4: supR3HardNtChildWaitFor: Found expected request 0 (PurifyChildAndCloseHandles) after 0 ms.
1971040.8e4: supR3HardNtChildPurify: Startup delay kludge #1/0: 265 ms, 17 sleeps
1981040.8e4: supHardNtVpScanVirtualMemory: enmKind=CHILD_PURIFICATION
1991040.8e4: *0000000000000000-000000000048ffff 0x0001/0x0000 0x0000000
2001040.8e4: *0000000000490000-00000000004affff 0x0004/0x0004 0x0020000
2011040.8e4: *00000000004b0000-00000000004cafff 0x0002/0x0002 0x0040000
2021040.8e4: 00000000004cb000-00000000004cffff 0x0001/0x0000 0x0000000
2031040.8e4: *00000000004d0000-00000000005cafff 0x0000/0x0004 0x0020000
2041040.8e4: 00000000005cb000-00000000005cdfff 0x0104/0x0004 0x0020000
2051040.8e4: 00000000005ce000-00000000005cffff 0x0004/0x0004 0x0020000
2061040.8e4: *00000000005d0000-00000000005d3fff 0x0002/0x0002 0x0040000
2071040.8e4: 00000000005d4000-00000000005dffff 0x0001/0x0000 0x0000000
2081040.8e4: *00000000005e0000-00000000005e1fff 0x0004/0x0004 0x0020000
2091040.8e4: 00000000005e2000-00000000005fffff 0x0001/0x0000 0x0000000
2101040.8e4: *0000000000600000-0000000000676fff 0x0000/0x0004 0x0020000
2111040.8e4: 0000000000677000-0000000000679fff 0x0004/0x0004 0x0020000
2121040.8e4: 000000000067a000-00000000007fffff 0x0000/0x0004 0x0020000
2131040.8e4: 0000000000800000-000000007ffdffff 0x0001/0x0000 0x0000000
2141040.8e4: *000000007ffe0000-000000007ffe0fff 0x0002/0x0002 0x0020000
2151040.8e4: 000000007ffe1000-000000007ffe2fff 0x0001/0x0000 0x0000000
2161040.8e4: *000000007ffe3000-000000007ffe3fff 0x0002/0x0002 0x0020000
2171040.8e4: 000000007ffe4000-00007ff5f152ffff 0x0001/0x0000 0x0000000
2181040.8e4: *00007ff5f1530000-00007ff5f1530fff 0x0002/0x0002 0x0040000
2191040.8e4: 00007ff5f1531000-00007ff5f153ffff 0x0001/0x0000 0x0000000
2201040.8e4: *00007ff5f1540000-00007ff5f1562fff 0x0002/0x0002 0x0040000
2211040.8e4: 00007ff5f1563000-00007ff7c184ffff 0x0001/0x0000 0x0000000
2221040.8e4: *00007ff7c1850000-00007ff7c1850fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
2231040.8e4: 00007ff7c1851000-00007ff7c18c6fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
2241040.8e4: 00007ff7c18c7000-00007ff7c18c7fff 0x0080/0x0080 0x1000000 \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
2251040.8e4: 00007ff7c18c8000-00007ff7c190ffff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
2261040.8e4: 00007ff7c1910000-00007ff7c1910fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
2271040.8e4: 00007ff7c1911000-00007ff7c1911fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
2281040.8e4: 00007ff7c1912000-00007ff7c1916fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
2291040.8e4: 00007ff7c1917000-00007ff7c1917fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
2301040.8e4: 00007ff7c1918000-00007ff7c1918fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
2311040.8e4: 00007ff7c1919000-00007ff7c191cfff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
2321040.8e4: 00007ff7c191d000-00007ff7c1965fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
2331040.8e4: 00007ff7c1966000-00007ffbe1abffff 0x0001/0x0000 0x0000000
2341040.8e4: *00007ffbe1ac0000-00007ffbe1ac0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume6\Windows\System32\ntdll.dll
2351040.8e4: 00007ffbe1ac1000-00007ffbe1bd7fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume6\Windows\System32\ntdll.dll
2361040.8e4: 00007ffbe1bd8000-00007ffbe1c1efff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume6\Windows\System32\ntdll.dll
2371040.8e4: 00007ffbe1c1f000-00007ffbe1c24fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume6\Windows\System32\ntdll.dll
2381040.8e4: 00007ffbe1c25000-00007ffbe1c25fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume6\Windows\System32\ntdll.dll
2391040.8e4: 00007ffbe1c26000-00007ffbe1c2afff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume6\Windows\System32\ntdll.dll
2401040.8e4: 00007ffbe1c2b000-00007ffbe1c39fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume6\Windows\System32\ntdll.dll
2411040.8e4: 00007ffbe1c3a000-00007ffbe1c3afff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume6\Windows\System32\ntdll.dll
2421040.8e4: 00007ffbe1c3b000-00007ffbe1c3dfff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume6\Windows\System32\ntdll.dll
2431040.8e4: 00007ffbe1c3e000-00007ffbe1caffff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume6\Windows\System32\ntdll.dll
2441040.8e4: 00007ffbe1cb0000-00007ffffffeffff 0x0001/0x0000 0x0000000
2451040.8e4: supR3HardNtChildPurify: Done after 265 ms and 0 fixes (loop #0).
2463c64.2698: Log file opened: 6.1.2r135662 g_hStartupLog=0000000000000004 g_uNtVerCombined=0xa047bb00
2473c64.2698: supR3HardenedVmProcessInit: uNtDllAddr=00007ffbe1ac0000 g_uNtVerCombined=0xa047bb00 (stack ~00000000005cf7f8)
2483c64.2698: ntdll.dll: timestamp 0x99ca0526 (rc=VINF_SUCCESS)
2493c64.2698: New simple heap: #1 0000000000900000 LB 0x400000 (for 2031616 allocation)
2501040.8e4: supR3HardNtEnableThreadCreationEx:
2513c64.2698: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox'
2523c64.2698: System32: \Device\HarddiskVolume6\Windows\System32
2533c64.2698: WinSxS: \Device\HarddiskVolume6\Windows\WinSxS
2543c64.2698: KnownDllPath: C:\Windows\System32
2553c64.2698: supR3HardenedVmProcessInit: Opening vboxdrv stub...
2563c64.2698: supR3HardenedVmProcessInit: Restoring LdrInitializeThunk...
2573c64.2698: supR3HardenedVmProcessInit: Returning to LdrInitializeThunk...
2583c64.2698: Registered Dll notification callback with NTDLL.
2593c64.2698: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume6\Windows\System32\kernel32.dll)
2603c64.2698: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume6\Windows\System32\kernel32.dll
2613c64.2698: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\KERNEL32.DLL (Input=KERNEL32.DLL, rcNtResolve=0xc0150008) *pfFlags=0xffffffff pwszSearchPath=0000000000004001:<flags> [calling]
2623c64.2698: supR3HardenedDllNotificationCallback: load 00007ffbdf4b0000 LB 0x002a3000 C:\Windows\System32\KERNELBASE.dll [fFlags=0x0]
2633c64.2698: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume6\Windows\System32\KernelBase.dll)
2643c64.2698: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume6\Windows\System32\KernelBase.dll
2653c64.2698: supR3HardenedDllNotificationCallback: load 00007ffbe0790000 LB 0x000b2000 C:\Windows\System32\KERNEL32.DLL [fFlags=0x0]
2663c64.2698: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
2673c64.2698: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbe0790000 'C:\Windows\System32\KERNEL32.DLL'
2683c64.2698: supR3HardenedDllNotificationCallback: load 00007ff7c1850000 LB 0x00116000 C:\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe [fFlags=0x0]
2693c64.2698: '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe' has no imports
2703c64.2698: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe)
2713c64.2698: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
2723c64.2698: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007ffbe1b317f0 pvNtTerminateThread=00007ffbe1b5cb10
2731040.8e4: supR3HardNtChildWaitFor: Found expected request 1 (CloseEvents) after 63 ms.
2743c64.2698: \SystemRoot\System32\ntdll.dll:
2753c64.2698: CreationTime: 2019-10-09T22:05:28.256677000Z
2763c64.2698: LastWriteTime: 2019-10-09T22:05:28.287941600Z
2773c64.2698: ChangeTime: 2020-02-02T03:51:32.356542500Z
2783c64.2698: FileAttributes: 0x20
2793c64.2698: Size: 0x1e8528
2803c64.2698: NT Headers: 0xd8
2813c64.2698: Timestamp: 0x99ca0526
2823c64.2698: Machine: 0x8664 - amd64
2833c64.2698: Timestamp: 0x99ca0526
2843c64.2698: Image Version: 10.0
2853c64.2698: SizeOfImage: 0x1f0000 (2031616)
2863c64.2698: Resource Dir: 0x17f000 LB 0x6f310
2873c64.2698: [Version info resource found at 0xd8! (ID/Name: 0x1; SubID/SubName: 0x409)]
2883c64.2698: [Raw version resource data: 0x17f0f0 LB 0x380, codepage 0x0 (reserved 0x0)]
2893c64.2698: ProductName: Microsoft® Windows® Operating System
2903c64.2698: ProductVersion: 10.0.18362.418
2913c64.2698: FileVersion: 10.0.18362.418 (WinBuild.160101.0800)
2923c64.2698: FileDescription: NT Layer DLL
2933c64.2698: \SystemRoot\System32\kernel32.dll:
2943c64.2698: CreationTime: 2019-09-28T13:35:30.203671600Z
2953c64.2698: LastWriteTime: 2019-09-28T13:35:30.203671600Z
2963c64.2698: ChangeTime: 2020-02-02T03:51:32.184680300Z
2973c64.2698: FileAttributes: 0x20
2983c64.2698: Size: 0xb0570
2993c64.2698: NT Headers: 0xe8
3003c64.2698: Timestamp: 0xd0cecc10
3013c64.2698: Machine: 0x8664 - amd64
3023c64.2698: Timestamp: 0xd0cecc10
3033c64.2698: Image Version: 10.0
3043c64.2698: SizeOfImage: 0xb2000 (729088)
3053c64.2698: Resource Dir: 0xb0000 LB 0x520
3063c64.2698: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
3073c64.2698: [Raw version resource data: 0xb00b0 LB 0x3a4, codepage 0x0 (reserved 0x0)]
3083c64.2698: ProductName: Microsoft® Windows® Operating System
3093c64.2698: ProductVersion: 10.0.18362.329
3103c64.2698: FileVersion: 10.0.18362.329 (WinBuild.160101.0800)
3113c64.2698: FileDescription: Windows NT BASE API Client DLL
3123c64.2698: \SystemRoot\System32\KernelBase.dll:
3133c64.2698: CreationTime: 2020-02-02T03:51:03.280430600Z
3143c64.2698: LastWriteTime: 2020-02-02T03:51:03.327303700Z
3153c64.2698: ChangeTime: 2020-02-02T03:53:38.103441700Z
3163c64.2698: FileAttributes: 0x20
3173c64.2698: Size: 0x2a3508
3183c64.2698: NT Headers: 0xf0
3193c64.2698: Timestamp: 0xf96f12ee
3203c64.2698: Machine: 0x8664 - amd64
3213c64.2698: Timestamp: 0xf96f12ee
3223c64.2698: Image Version: 10.0
3233c64.2698: SizeOfImage: 0x2a3000 (2764800)
3243c64.2698: Resource Dir: 0x27d000 LB 0x548
3253c64.2698: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
3263c64.2698: [Raw version resource data: 0x27d0b0 LB 0x3bc, codepage 0x0 (reserved 0x0)]
3273c64.2698: ProductName: Microsoft® Windows® Operating System
3283c64.2698: ProductVersion: 10.0.18362.628
3293c64.2698: FileVersion: 10.0.18362.628 (WinBuild.160101.0800)
3303c64.2698: FileDescription: Windows NT BASE API Client DLL
3313c64.2698: \SystemRoot\System32\apisetschema.dll:
3323c64.2698: CreationTime: 2019-03-19T04:43:54.837151500Z
3333c64.2698: LastWriteTime: 2019-03-19T04:43:54.837151500Z
3343c64.2698: ChangeTime: 2020-02-02T03:51:32.184680300Z
3353c64.2698: FileAttributes: 0x20
3363c64.2698: Size: 0x1d028
3373c64.2698: NT Headers: 0xc8
3383c64.2698: Timestamp: 0xd6ced080
3393c64.2698: Machine: 0x8664 - amd64
3403c64.2698: Timestamp: 0xd6ced080
3413c64.2698: Image Version: 10.0
3423c64.2698: SizeOfImage: 0x1e000 (122880)
3433c64.2698: Resource Dir: 0x1d000 LB 0x408
3443c64.2698: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
3453c64.2698: [Raw version resource data: 0x1d060 LB 0x3a8, codepage 0x0 (reserved 0x0)]
3463c64.2698: ProductName: Microsoft® Windows® Operating System
3473c64.2698: ProductVersion: 10.0.18362.1
3483c64.2698: FileVersion: 10.0.18362.1 (WinBuild.160101.0800)
3493c64.2698: FileDescription: ApiSet Schema DLL
3503c64.2698: NtOpenDirectoryObject failed on \Driver: 0xc0000022
3513c64.2698: supR3HardenedWinFindAdversaries: 0x0
3523c64.2698: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox'
3533c64.2698: Calling main()
3543c64.2698: SUPR3HardenedMain: pszProgName=VirtualBoxVM fFlags=0x2
3553c64.2698: supR3HardenedWinInitAppBin(0x2): '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox'
3563c64.2698: '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe' has no imports
3573c64.2698: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe)
3583c64.2698: SUPR3HardenedMain: Respawn #2
3593c64.2698: supR3HardNtEnableThreadCreationEx:
3603c64.2698: supR3HardenedDllNotificationCallback: load 00007ffbe15f0000 LB 0x00120000 C:\Windows\System32\RPCRT4.dll [fFlags=0x0]
3613c64.2698: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume6\Windows\System32\rpcrt4.dll)
3623c64.2698: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume6\Windows\System32\rpcrt4.dll
3633c64.2698: supR3HardenedDllNotificationCallback: load 00007ffbe0860000 LB 0x00097000 C:\Windows\System32\sechost.dll [fFlags=0x0]
3643c64.2698: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'rpcrt4.dll'.
3653c64.2698: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume6\Windows\System32\sechost.dll)
3663c64.2698: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume6\Windows\System32\sechost.dll
3673c64.2698: '\Device\HarddiskVolume6\Windows\System32\ntdll.dll' has no imports
3683c64.2698: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume6\Windows\System32\ntdll.dll)
3693c64.2698: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume6\Windows\System32\ntdll.dll
3703c64.2698: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
3713c64.2698: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume6\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
3723c64.2698: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
3733c64.2698: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\ntdll.dll (Input=ntdll.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
3743c64.2698: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbe1ac0000 'C:\Windows\System32\ntdll.dll'
3753c64.2698: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007ffbe1b317f0 pvNtTerminateThread=00007ffbe1b5cb10
3763c64.2698: supR3HardenedWinDoReSpawn(2): New child 34f0.3aa4 [kernel32].
3773c64.2698: supR3HardenedWinReSpawn: NtSetInformationThread/ThreadHideFromDebugger failed: 0xc0000022 (harmless)
3783c64.2698: supR3HardNtChildGatherData: PebBaseAddress=0000000000f8a000 cbPeb=0x388
3793c64.2698: supR3HardNtPuChFindNtdll: uNtDllParentAddr=00007ffbe1ac0000 uNtDllChildAddr=00007ffbe1ac0000
3803c64.2698: supR3HardenedWinSetupChildInit: uLdrInitThunk=00007ffbe1b317f0
3813c64.2698: supR3HardenedWinSetupChildInit: Initial context:
382 rax=0000000000000000 rbx=0000000000000000 rcx=00007ff7c1857900 rdx=0000000000f8a000
383 rsi=0000000000000000 rdi=0000000000000000 r8 =0000000000000000 r9 =0000000000000000
384 r10=0000000000000000 r11=0000000000000000 r12=0000000000000000 r13=0000000000000000
385 r14=0000000000000000 r15=0000000000000000 P1=0000000000000000 P2=0000000000000000
386 rip=00007ffbe1b2ceb0 rsp=00000000010ffe38 rbp=0000000000000000 ctxflags=0010001b
387 cs=0033 ss=002b ds=0000 es=0000 fs=0000 gs=0000 eflags=00000200 mxcrx=00001f80
388 P3=0000000000000000 P4=0000000000000000 P5=0000000000000000 P6=0000000000000000
389 dr0=0000000000000000 dr1=0000000000000000 dr2=0000000000000000 dr3=0000000000000000
390 dr6=0000000000000000 dr7=0000000000000000 vcr=0000000000000000 dcr=0000000000000000
391 lbt=0000000000000000 lbf=0000000000000000 lxt=0000000000000000 lxf=0000000000000000
3923c64.2698: kernel32.dll: timestamp 0xd0cecc10 (rc=VINF_SUCCESS)
3933c64.2698: supR3HardenedWinSetupChildInit: Start child.
3943c64.2698: supR3HardNtChildWaitFor: Found expected request 0 (PurifyChildAndCloseHandles) after 0 ms.
3953c64.2698: supR3HardNtChildPurify: Startup delay kludge #1/0: 258 ms, 18 sleeps
3963c64.2698: supHardNtVpScanVirtualMemory: enmKind=CHILD_PURIFICATION
3973c64.2698: *0000000000000000-0000000000d1ffff 0x0001/0x0000 0x0000000
3983c64.2698: *0000000000d20000-0000000000d3ffff 0x0004/0x0004 0x0020000
3993c64.2698: *0000000000d40000-0000000000d5afff 0x0002/0x0002 0x0040000
4003c64.2698: 0000000000d5b000-0000000000d5ffff 0x0001/0x0000 0x0000000
4013c64.2698: *0000000000d60000-0000000000d63fff 0x0002/0x0002 0x0040000
4023c64.2698: 0000000000d64000-0000000000d6ffff 0x0001/0x0000 0x0000000
4033c64.2698: *0000000000d70000-0000000000d71fff 0x0004/0x0004 0x0020000
4043c64.2698: 0000000000d72000-0000000000dfffff 0x0001/0x0000 0x0000000
4053c64.2698: *0000000000e00000-0000000000f89fff 0x0000/0x0004 0x0020000
4063c64.2698: 0000000000f8a000-0000000000f8cfff 0x0004/0x0004 0x0020000
4073c64.2698: 0000000000f8d000-0000000000ffffff 0x0000/0x0004 0x0020000
4083c64.2698: *0000000001000000-00000000010fafff 0x0000/0x0004 0x0020000
4093c64.2698: 00000000010fb000-00000000010fdfff 0x0104/0x0004 0x0020000
4103c64.2698: 00000000010fe000-00000000010fffff 0x0004/0x0004 0x0020000
4113c64.2698: 0000000001100000-000000007ffdffff 0x0001/0x0000 0x0000000
4123c64.2698: *000000007ffe0000-000000007ffe0fff 0x0002/0x0002 0x0020000
4133c64.2698: 000000007ffe1000-000000007ffe2fff 0x0001/0x0000 0x0000000
4143c64.2698: *000000007ffe3000-000000007ffe3fff 0x0002/0x0002 0x0020000
4153c64.2698: 000000007ffe4000-00007ff525c6ffff 0x0001/0x0000 0x0000000
4163c64.2698: *00007ff525c70000-00007ff525c70fff 0x0002/0x0002 0x0040000
4173c64.2698: 00007ff525c71000-00007ff525c7ffff 0x0001/0x0000 0x0000000
4183c64.2698: *00007ff525c80000-00007ff525ca2fff 0x0002/0x0002 0x0040000
4193c64.2698: 00007ff525ca3000-00007ff7c184ffff 0x0001/0x0000 0x0000000
4203c64.2698: *00007ff7c1850000-00007ff7c1850fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
4213c64.2698: 00007ff7c1851000-00007ff7c18c6fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
4223c64.2698: 00007ff7c18c7000-00007ff7c18c7fff 0x0080/0x0080 0x1000000 \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
4233c64.2698: 00007ff7c18c8000-00007ff7c190ffff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
4243c64.2698: 00007ff7c1910000-00007ff7c1910fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
4253c64.2698: 00007ff7c1911000-00007ff7c1911fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
4263c64.2698: 00007ff7c1912000-00007ff7c1916fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
4273c64.2698: 00007ff7c1917000-00007ff7c1917fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
4283c64.2698: 00007ff7c1918000-00007ff7c1918fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
4293c64.2698: 00007ff7c1919000-00007ff7c191cfff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
4303c64.2698: 00007ff7c191d000-00007ff7c1965fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
4313c64.2698: 00007ff7c1966000-00007ffbe1abffff 0x0001/0x0000 0x0000000
4323c64.2698: *00007ffbe1ac0000-00007ffbe1ac0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume6\Windows\System32\ntdll.dll
4333c64.2698: 00007ffbe1ac1000-00007ffbe1bd7fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume6\Windows\System32\ntdll.dll
4343c64.2698: 00007ffbe1bd8000-00007ffbe1c1efff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume6\Windows\System32\ntdll.dll
4353c64.2698: 00007ffbe1c1f000-00007ffbe1c2afff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume6\Windows\System32\ntdll.dll
4363c64.2698: 00007ffbe1c2b000-00007ffbe1c39fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume6\Windows\System32\ntdll.dll
4373c64.2698: 00007ffbe1c3a000-00007ffbe1c3afff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume6\Windows\System32\ntdll.dll
4383c64.2698: 00007ffbe1c3b000-00007ffbe1c3dfff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume6\Windows\System32\ntdll.dll
4393c64.2698: 00007ffbe1c3e000-00007ffbe1caffff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume6\Windows\System32\ntdll.dll
4403c64.2698: 00007ffbe1cb0000-00007ffffffeffff 0x0001/0x0000 0x0000000
4413c64.2698: VirtualBoxVM.exe: timestamp 0x5e1f1d0f (rc=VINF_SUCCESS)
4423c64.2698: '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe' has no imports
4433c64.2698: '\Device\HarddiskVolume6\Windows\System32\ntdll.dll' has no imports
4443c64.2698: supR3HardNtChildPurify: Done after 285 ms and 0 fixes (loop #0).
44534f0.3aa4: Log file opened: 6.1.2r135662 g_hStartupLog=0000000000000004 g_uNtVerCombined=0xa047bb00
44634f0.3aa4: supR3HardenedVmProcessInit: uNtDllAddr=00007ffbe1ac0000 g_uNtVerCombined=0xa047bb00 (stack ~00000000010ff8c8)
44734f0.3aa4: ntdll.dll: timestamp 0x99ca0526 (rc=VINF_SUCCESS)
44834f0.3aa4: New simple heap: #1 0000000001200000 LB 0x400000 (for 2031616 allocation)
4493c64.2698: supR3HardenedEarlyCompact: Removed heap 1 (0x00000000900000 LB 0x400000)
4503c64.2698: supR3HardNtEnableThreadCreationEx:
45134f0.3aa4: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox'
45234f0.3aa4: System32: \Device\HarddiskVolume6\Windows\System32
45334f0.3aa4: WinSxS: \Device\HarddiskVolume6\Windows\WinSxS
45434f0.3aa4: KnownDllPath: C:\Windows\System32
45534f0.3aa4: supR3HardenedVmProcessInit: Opening vboxdrv...
45634f0.3aa4: supR3HardenedVmProcessInit: Restoring LdrInitializeThunk...
45734f0.3aa4: supR3HardenedVmProcessInit: Returning to LdrInitializeThunk...
45834f0.3aa4: Registered Dll notification callback with NTDLL.
45934f0.3aa4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume6\Windows\System32\kernel32.dll)
46034f0.3aa4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume6\Windows\System32\kernel32.dll
46134f0.3aa4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\KERNEL32.DLL (Input=KERNEL32.DLL, rcNtResolve=0xc0150008) *pfFlags=0xffffffff pwszSearchPath=0000000000004001:<flags> [calling]
46234f0.3aa4: supR3HardenedDllNotificationCallback: load 00007ffbdf4b0000 LB 0x002a3000 C:\Windows\System32\KERNELBASE.dll [fFlags=0x0]
46334f0.3aa4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume6\Windows\System32\KernelBase.dll)
46434f0.3aa4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume6\Windows\System32\KernelBase.dll
46534f0.3aa4: supR3HardenedDllNotificationCallback: load 00007ffbe0790000 LB 0x000b2000 C:\Windows\System32\KERNEL32.DLL [fFlags=0x0]
46634f0.3aa4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
46734f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbe0790000 'C:\Windows\System32\KERNEL32.DLL'
46834f0.3aa4: supR3HardenedDllNotificationCallback: load 00007ff7c1850000 LB 0x00116000 C:\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe [fFlags=0x0]
46934f0.3aa4: '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe' has no imports
47034f0.3aa4: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe)
47134f0.3aa4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
47234f0.3aa4: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007ffbe1b317f0 pvNtTerminateThread=00007ffbe1b5cb10
4733c64.2698: supR3HardNtChildWaitFor: Found expected request 1 (CloseEvents) after 78 ms.
47434f0.3aa4: \SystemRoot\System32\ntdll.dll:
47534f0.3aa4: CreationTime: 2019-10-09T22:05:28.256677000Z
47634f0.3aa4: LastWriteTime: 2019-10-09T22:05:28.287941600Z
47734f0.3aa4: ChangeTime: 2020-02-02T03:51:32.356542500Z
47834f0.3aa4: FileAttributes: 0x20
47934f0.3aa4: Size: 0x1e8528
48034f0.3aa4: NT Headers: 0xd8
48134f0.3aa4: Timestamp: 0x99ca0526
48234f0.3aa4: Machine: 0x8664 - amd64
48334f0.3aa4: Timestamp: 0x99ca0526
48434f0.3aa4: Image Version: 10.0
48534f0.3aa4: SizeOfImage: 0x1f0000 (2031616)
48634f0.3aa4: Resource Dir: 0x17f000 LB 0x6f310
48734f0.3aa4: [Version info resource found at 0xd8! (ID/Name: 0x1; SubID/SubName: 0x409)]
48834f0.3aa4: [Raw version resource data: 0x17f0f0 LB 0x380, codepage 0x0 (reserved 0x0)]
48934f0.3aa4: ProductName: Microsoft® Windows® Operating System
49034f0.3aa4: ProductVersion: 10.0.18362.418
49134f0.3aa4: FileVersion: 10.0.18362.418 (WinBuild.160101.0800)
49234f0.3aa4: FileDescription: NT Layer DLL
49334f0.3aa4: \SystemRoot\System32\kernel32.dll:
49434f0.3aa4: CreationTime: 2019-09-28T13:35:30.203671600Z
49534f0.3aa4: LastWriteTime: 2019-09-28T13:35:30.203671600Z
49634f0.3aa4: ChangeTime: 2020-02-02T03:51:32.184680300Z
49734f0.3aa4: FileAttributes: 0x20
49834f0.3aa4: Size: 0xb0570
49934f0.3aa4: NT Headers: 0xe8
50034f0.3aa4: Timestamp: 0xd0cecc10
50134f0.3aa4: Machine: 0x8664 - amd64
50234f0.3aa4: Timestamp: 0xd0cecc10
50334f0.3aa4: Image Version: 10.0
50434f0.3aa4: SizeOfImage: 0xb2000 (729088)
50534f0.3aa4: Resource Dir: 0xb0000 LB 0x520
50634f0.3aa4: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
50734f0.3aa4: [Raw version resource data: 0xb00b0 LB 0x3a4, codepage 0x0 (reserved 0x0)]
50834f0.3aa4: ProductName: Microsoft® Windows® Operating System
50934f0.3aa4: ProductVersion: 10.0.18362.329
51034f0.3aa4: FileVersion: 10.0.18362.329 (WinBuild.160101.0800)
51134f0.3aa4: FileDescription: Windows NT BASE API Client DLL
51234f0.3aa4: \SystemRoot\System32\KernelBase.dll:
51334f0.3aa4: CreationTime: 2020-02-02T03:51:03.280430600Z
51434f0.3aa4: LastWriteTime: 2020-02-02T03:51:03.327303700Z
51534f0.3aa4: ChangeTime: 2020-02-02T03:53:38.103441700Z
51634f0.3aa4: FileAttributes: 0x20
51734f0.3aa4: Size: 0x2a3508
51834f0.3aa4: NT Headers: 0xf0
51934f0.3aa4: Timestamp: 0xf96f12ee
52034f0.3aa4: Machine: 0x8664 - amd64
52134f0.3aa4: Timestamp: 0xf96f12ee
52234f0.3aa4: Image Version: 10.0
52334f0.3aa4: SizeOfImage: 0x2a3000 (2764800)
52434f0.3aa4: Resource Dir: 0x27d000 LB 0x548
52534f0.3aa4: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
52634f0.3aa4: [Raw version resource data: 0x27d0b0 LB 0x3bc, codepage 0x0 (reserved 0x0)]
52734f0.3aa4: ProductName: Microsoft® Windows® Operating System
52834f0.3aa4: ProductVersion: 10.0.18362.628
52934f0.3aa4: FileVersion: 10.0.18362.628 (WinBuild.160101.0800)
53034f0.3aa4: FileDescription: Windows NT BASE API Client DLL
53134f0.3aa4: \SystemRoot\System32\apisetschema.dll:
53234f0.3aa4: CreationTime: 2019-03-19T04:43:54.837151500Z
53334f0.3aa4: LastWriteTime: 2019-03-19T04:43:54.837151500Z
53434f0.3aa4: ChangeTime: 2020-02-02T03:51:32.184680300Z
53534f0.3aa4: FileAttributes: 0x20
53634f0.3aa4: Size: 0x1d028
53734f0.3aa4: NT Headers: 0xc8
53834f0.3aa4: Timestamp: 0xd6ced080
53934f0.3aa4: Machine: 0x8664 - amd64
54034f0.3aa4: Timestamp: 0xd6ced080
54134f0.3aa4: Image Version: 10.0
54234f0.3aa4: SizeOfImage: 0x1e000 (122880)
54334f0.3aa4: Resource Dir: 0x1d000 LB 0x408
54434f0.3aa4: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
54534f0.3aa4: [Raw version resource data: 0x1d060 LB 0x3a8, codepage 0x0 (reserved 0x0)]
54634f0.3aa4: ProductName: Microsoft® Windows® Operating System
54734f0.3aa4: ProductVersion: 10.0.18362.1
54834f0.3aa4: FileVersion: 10.0.18362.1 (WinBuild.160101.0800)
54934f0.3aa4: FileDescription: ApiSet Schema DLL
55034f0.3aa4: NtOpenDirectoryObject failed on \Driver: 0xc0000022
55134f0.3aa4: supR3HardenedWinFindAdversaries: 0x0
55234f0.3aa4: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox'
55334f0.3aa4: Calling main()
55434f0.3aa4: SUPR3HardenedMain: pszProgName=VirtualBoxVM fFlags=0x2
55534f0.3aa4: supR3HardenedWinInitAppBin(0x2): '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox'
55634f0.3aa4: '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe' has no imports
55734f0.3aa4: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe)
55834f0.3aa4: SUPR3HardenedMain: Final process, opening VBoxDrv...
55934f0.3aa4: supR3HardenedEarlyCompact: Removed heap 1 (0x00000001200000 LB 0x400000)
56034f0.3aa4: supR3HardNtEnableThreadCreationEx:
56134f0.3aa4: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\VBoxSupLib.dll)
56234f0.3aa4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\VBoxSupLib.dll
56334f0.3aa4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
56434f0.3aa4: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\VBoxSupLib.dll [lacks WinVerifyTrust]
56534f0.3aa4: supR3HardenedDllNotificationCallback: load 00007ffbdb330000 LB 0x00005000 C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL [fFlags=0x0]
56634f0.3aa4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\VBoxSupLib.dll [lacks WinVerifyTrust]
56734f0.3aa4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\VBoxSupLib.dll [lacks WinVerifyTrust]
56834f0.3aa4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
56934f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbdb330000 'C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL'
57034f0.3aa4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\VBoxSupLib.dll [lacks WinVerifyTrust]
57134f0.3aa4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
57234f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbdb330000 'C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL'
57334f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbdb330000 'C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL'
57434f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
57534f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msasn1.dll'.
57634f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'crypt32.dll'.
57734f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #27 'rpcrt4.dll'.
57834f0.3aa4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume6\Windows\System32\wintrust.dll)
57934f0.3aa4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume6\Windows\System32\wintrust.dll
58034f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
58134f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume6\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
58234f0.3aa4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume6\Windows\System32\rpcrt4.dll)
58334f0.3aa4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume6\Windows\System32\rpcrt4.dll
58434f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'crypt32.dll'...
58534f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'crypt32.dll' -> '\Device\HarddiskVolume6\Windows\System32\crypt32.dll' [rcNtRedir=0xc0150008]
58634f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #32 'msasn1.dll'.
58734f0.3aa4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume6\Windows\System32\crypt32.dll)
58834f0.3aa4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume6\Windows\System32\crypt32.dll
58934f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msasn1.dll'...
59034f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msasn1.dll' -> '\Device\HarddiskVolume6\Windows\System32\msasn1.dll' [rcNtRedir=0xc0150008]
59134f0.3aa4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume6\Windows\System32\msasn1.dll)
59234f0.3aa4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume6\Windows\System32\msasn1.dll
59334f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
59434f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume6\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
59534f0.3aa4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume6\Windows\System32\msvcrt.dll)
59634f0.3aa4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume6\Windows\System32\msvcrt.dll
59734f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msasn1.dll'...
59834f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msasn1.dll' -> '\Device\HarddiskVolume6\Windows\System32\msasn1.dll' [rcNtRedir=0xc0150008]
59934f0.3aa4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\msasn1.dll [lacks WinVerifyTrust]
60034f0.3aa4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\Wintrust.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
60134f0.3aa4: supR3HardenedDllNotificationCallback: load 00007ffbe0110000 LB 0x0009e000 C:\Windows\System32\msvcrt.dll [fFlags=0x0]
60234f0.3aa4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
60334f0.3aa4: supR3HardenedDllNotificationCallback: load 00007ffbdea30000 LB 0x00012000 C:\Windows\System32\MSASN1.dll [fFlags=0x0]
60434f0.3aa4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\msasn1.dll [lacks WinVerifyTrust]
60534f0.3aa4: supR3HardenedDllNotificationCallback: load 00007ffbdf960000 LB 0x000fa000 C:\Windows\System32\ucrtbase.dll [fFlags=0x0]
60634f0.3aa4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume6\Windows\System32\ucrtbase.dll)
60734f0.3aa4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume6\Windows\System32\ucrtbase.dll
60834f0.3aa4: supR3HardenedDllNotificationCallback: load 00007ffbdf760000 LB 0x00149000 C:\Windows\System32\CRYPT32.dll [fFlags=0x0]
60934f0.3aa4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\crypt32.dll [lacks WinVerifyTrust]
61034f0.3aa4: supR3HardenedDllNotificationCallback: load 00007ffbe15f0000 LB 0x00120000 C:\Windows\System32\RPCRT4.dll [fFlags=0x0]
61134f0.3aa4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
61234f0.3aa4: supR3HardenedDllNotificationCallback: load 00007ffbdf450000 LB 0x0005c000 C:\Windows\System32\Wintrust.dll [fFlags=0x0]
61334f0.3aa4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
61434f0.3aa4: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-synch-l1-2-0) -> 0x0, fPresent=1
61534f0.3aa4: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-synch-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
61634f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbdf4b0000 'api-ms-win-core-synch-l1-2-0'
61734f0.3aa4: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-fibers-l1-1-1) -> 0x0, fPresent=1
61834f0.3aa4: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-fibers-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
61934f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbdf4b0000 'api-ms-win-core-fibers-l1-1-1'
62034f0.3aa4: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-fibers-l1-1-1) -> 0x0, fPresent=1
62134f0.3aa4: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-fibers-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
62234f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbdf4b0000 'api-ms-win-core-fibers-l1-1-1'
62334f0.3aa4: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-synch-l1-2-0) -> 0x0, fPresent=1
62434f0.3aa4: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-synch-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
62534f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbdf4b0000 'api-ms-win-core-synch-l1-2-0'
62634f0.3aa4: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-localization-l1-2-1) -> 0x0, fPresent=1
62734f0.3aa4: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-l1-2-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
62834f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbdf4b0000 'api-ms-win-core-localization-l1-2-1'
62934f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbdf450000 'C:\Windows\system32\Wintrust.dll'
63034f0.3aa4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume6\Windows\System32\bcrypt.dll)
63134f0.3aa4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume6\Windows\System32\bcrypt.dll
63234f0.3aa4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\bcrypt.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
63334f0.3aa4: supR3HardenedDllNotificationCallback: load 00007ffbdea80000 LB 0x00026000 C:\Windows\System32\bcrypt.dll [fFlags=0x0]
63434f0.3aa4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\bcrypt.dll [lacks WinVerifyTrust]
63534f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbdea80000 'C:\Windows\system32\bcrypt.dll'
63634f0.3aa4: bcrypt.dll loaded at 00007ffbdea80000, BCryptOpenAlgorithmProvider at 00007ffbdea84c70, preloading providers:
63734f0.3aa4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume6\Windows\System32\bcryptprimitives.dll)
63834f0.3aa4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume6\Windows\System32\bcryptprimitives.dll
63934f0.3aa4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\bcryptprimitives.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
64034f0.3aa4: supR3HardenedDllNotificationCallback: load 00007ffbdeab0000 LB 0x00080000 C:\Windows\System32\bcryptprimitives.dll [fFlags=0x0]
64134f0.3aa4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\bcryptprimitives.dll [lacks WinVerifyTrust]
64234f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbdeab0000 'C:\Windows\system32\bcryptprimitives.dll'
64334f0.3aa4: BCryptOpenAlgorithmProvider(,'MD2',0,0) -> 0x0 (hAlgo=000000000172d650)
64434f0.3aa4: BCryptOpenAlgorithmProvider(,'MD4',0,0) -> 0x0 (hAlgo=000000000172e3b0)
64534f0.3aa4: BCryptOpenAlgorithmProvider(,'MD5',0,0) -> 0x0 (hAlgo=000000000172e6b0)
64634f0.3aa4: BCryptOpenAlgorithmProvider(,'SHA1',0,0) -> 0x0 (hAlgo=000000000172f1c0)
64734f0.3aa4: BCryptOpenAlgorithmProvider(,'SHA256',0,0) -> 0x0 (hAlgo=000000000172f4c0)
64834f0.3aa4: BCryptOpenAlgorithmProvider(,'SHA512',0,0) -> 0x0 (hAlgo=000000000172f7c0)
64934f0.3aa4: BCryptOpenAlgorithmProvider(,'RSA',0,0) -> 0x0 (hAlgo=000000000172fac0)
65034f0.3aa4: BCryptOpenAlgorithmProvider(,'DSA',0,0) -> 0x0 (hAlgo=000000000172fdc0)
65134f0.3aa4: supR3HardenedDllNotificationCallback: load 00007ffbdfb00000 LB 0x00017000 C:\Windows\System32\CRYPTSP.dll [fFlags=0x0]
65234f0.3aa4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume6\Windows\System32\cryptsp.dll)
65334f0.3aa4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume6\Windows\System32\cryptsp.dll
65434f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #18 'bcrypt.dll'.
65534f0.3aa4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume6\Windows\System32\rsaenh.dll)
65634f0.3aa4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume6\Windows\System32\rsaenh.dll
65734f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcrypt.dll'...
65834f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcrypt.dll' -> '\Device\HarddiskVolume6\Windows\System32\bcrypt.dll' [rcNtRedir=0xc0150008]
65934f0.3aa4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\bcrypt.dll [lacks WinVerifyTrust]
66034f0.3aa4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
66134f0.3aa4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
66234f0.3aa4: supR3HardenedDllNotificationCallback: load 00007ffbddd10000 LB 0x00033000 C:\Windows\system32\rsaenh.dll [fFlags=0x0]
66334f0.3aa4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
66434f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbddd10000 'C:\Windows\system32\rsaenh.dll'
66534f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'bcryptprimitives.dll'.
66634f0.3aa4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume6\Windows\System32\cryptbase.dll)
66734f0.3aa4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume6\Windows\System32\cryptbase.dll
66834f0.3aa4: supR3HardenedDllNotificationCallback: load 00007ffbde370000 LB 0x0000c000 C:\Windows\SYSTEM32\CRYPTBASE.dll [fFlags=0x0]
66934f0.3aa4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\cryptbase.dll [lacks WinVerifyTrust]
67034f0.3aa4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
67134f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcryptprimitives.dll'...
67234f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcryptprimitives.dll' -> '\Device\HarddiskVolume6\Windows\System32\bcryptprimitives.dll' [rcNtRedir=0xc0150008]
67334f0.3aa4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\bcryptprimitives.dll [lacks WinVerifyTrust]
67434f0.3aa4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\kernel32.dll (Input=kernel32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
67534f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbe0790000 'C:\Windows\System32\kernel32.dll'
67634f0.3aa4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
67734f0.3aa4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\WINTRUST.DLL (Input=WINTRUST.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
67834f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbdf450000 'C:\Windows\System32\WINTRUST.DLL'
67934f0.3aa4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\crypt32.dll [lacks WinVerifyTrust]
68034f0.3aa4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\CRYPT32.dll (rcNtResolve=0xc0150008) *pfFlags=0x2 pwszSearchPath=0000000000000001:<flags> [calling]
68134f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbdf760000 'C:\Windows\System32\CRYPT32.dll'
68234f0.3aa4: supR3HardenedDllNotificationCallback: load 00007ffbe0300000 LB 0x0001d000 C:\Windows\System32\imagehlp.dll [fFlags=0x0]
68334f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #20 'rpcrt4.dll'.
68434f0.3aa4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume6\Windows\System32\imagehlp.dll)
68534f0.3aa4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume6\Windows\System32\imagehlp.dll
68634f0.3aa4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
68734f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
68834f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume6\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
68934f0.3aa4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
69034f0.3aa4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
69134f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbddd10000 'C:\Windows\system32\rsaenh.dll'
69234f0.3aa4: supR3HardenedDllNotificationCallback: load 00007ffbe0860000 LB 0x00097000 C:\Windows\System32\sechost.dll [fFlags=0x0]
69334f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'rpcrt4.dll'.
69434f0.3aa4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume6\Windows\System32\sechost.dll)
69534f0.3aa4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume6\Windows\System32\sechost.dll
69634f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
69734f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'rpcrt4.dll'.
69834f0.3aa4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume6\Windows\System32\gpapi.dll)
69934f0.3aa4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume6\Windows\System32\gpapi.dll
70034f0.3aa4: supR3HardenedDllNotificationCallback: load 00007ffbdd5b0000 LB 0x00022000 C:\Windows\SYSTEM32\gpapi.dll [fFlags=0x0]
70134f0.3aa4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\gpapi.dll [lacks WinVerifyTrust]
70234f0.3aa4: supR3HardenedDllNotificationCallback: load 00007ffbdea10000 LB 0x0001f000 C:\Windows\System32\profapi.dll [fFlags=0x0]
70334f0.3aa4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume6\Windows\System32\profapi.dll)
70434f0.3aa4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume6\Windows\System32\profapi.dll
70534f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
70634f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'crypt32.dll'.
70734f0.3aa4: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume6\Windows\System32\cryptnet.dll)
70834f0.3aa4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume6\Windows\System32\cryptnet.dll
70934f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'crypt32.dll'...
71034f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'crypt32.dll' -> '\Device\HarddiskVolume6\Windows\System32\crypt32.dll' [rcNtRedir=0xc0150008]
71134f0.3aa4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\crypt32.dll [lacks WinVerifyTrust]
71234f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
71334f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume6\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
71434f0.3aa4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
71534f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
71634f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume6\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
71734f0.3aa4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
71834f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
71934f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume6\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
72034f0.3aa4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
72134f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
72234f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume6\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
72334f0.3aa4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
72434f0.3aa4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\cryptnet.dll (Input=cryptnet.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
72534f0.3aa4: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume6\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
72634f0.3aa4: supR3HardenedDllNotificationCallback: load 00007ffbd8c70000 LB 0x0002f000 C:\Windows\System32\cryptnet.dll [fFlags=0x0]
72734f0.3aa4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume6\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
72834f0.3aa4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume6\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
72934f0.3aa4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x2 pwszSearchPath=0000000000000001:<flags> [calling]
73034f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbd8c70000 'C:\Windows\System32\cryptnet.dll'
73134f0.3aa4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume6\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
73234f0.3aa4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x2 pwszSearchPath=0000000000000001:<flags> [calling]
73334f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbd8c70000 'C:\Windows\System32\cryptnet.dll'
73434f0.3aa4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume6\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
73534f0.3aa4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x2 pwszSearchPath=0000000000000001:<flags> [calling]
73634f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbd8c70000 'C:\Windows\System32\cryptnet.dll'
73734f0.3aa4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume6\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
73834f0.3aa4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x2 pwszSearchPath=0000000000000001:<flags> [calling]
73934f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbd8c70000 'C:\Windows\System32\cryptnet.dll'
74034f0.3aa4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume6\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
74134f0.3aa4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x2 pwszSearchPath=0000000000000001:<flags> [calling]
74234f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbd8c70000 'C:\Windows\System32\cryptnet.dll'
74334f0.3aa4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume6\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
74434f0.3aa4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x2 pwszSearchPath=0000000000000001:<flags> [calling]
74534f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbd8c70000 'C:\Windows\System32\cryptnet.dll'
74634f0.3aa4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume6\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
74734f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbd8c70000 'C:\Windows\System32\cryptnet.dll'
74834f0.3aa4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume6\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
74934f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbd8c70000 'C:\Windows\System32\cryptnet.dll'
75034f0.3aa4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume6\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
75134f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbd8c70000 'C:\Windows\System32\cryptnet.dll'
75234f0.3aa4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume6\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
75334f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbd8c70000 'C:\Windows\System32\cryptnet.dll'
75434f0.3aa4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume6\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
75534f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbd8c70000 'C:\Windows\System32\cryptnet.dll'
75634f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbd8c70000 'C:\Windows\System32\cryptnet.dll'
75734f0.3aa4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume6\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
75834f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbd8c70000 'C:\Windows\System32\cryptnet.dll'
75934f0.3aa4: supR3HardenedDllNotificationCallback: load 00007ffbe0b90000 LB 0x000a3000 C:\Windows\System32\advapi32.dll [fFlags=0x0]
76034f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
76134f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'sechost.dll'.
76234f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #27 'rpcrt4.dll'.
76334f0.3aa4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume6\Windows\System32\advapi32.dll)
76434f0.3aa4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume6\Windows\System32\advapi32.dll
76534f0.3aa4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
76634f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
76734f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume6\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
76834f0.3aa4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
76934f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'sechost.dll'...
77034f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'sechost.dll' -> '\Device\HarddiskVolume6\Windows\System32\sechost.dll' [rcNtRedir=0xc0150008]
77134f0.3aa4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\sechost.dll [lacks WinVerifyTrust]
77234f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
77334f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume6\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
77434f0.3aa4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
77534f0.3aa4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
77634f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbddd10000 'C:\Windows\system32\rsaenh.dll'
77734f0.3aa4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\crypt32.dll [lacks WinVerifyTrust]
77834f0.3aa4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\crypt32.dll (Input=crypt32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
77934f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbdf760000 'C:\Windows\System32\crypt32.dll'
78034f0.3aa4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000000 pwszName=\SystemRoot\System32\ntdll.dll
78134f0.3aa4: supR3HardNtViCallWinVerifyTrustCatFile: New context 000000000181c280
78234f0.3aa4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=000000000181c280
78334f0.3aa4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=E42142C43484BA84DDDB10D97303487D47E882DE
78434f0.3aa4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
78534f0.3aa4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\rpcrt4.dll (Input=rpcrt4.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
78634f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbe15f0000 'C:\Windows\System32\rpcrt4.dll'
78734f0.3aa4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
78834f0.3aa4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
78934f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbddd10000 'C:\Windows\system32\rsaenh.dll'
79034f0.3aa4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\crypt32.dll [lacks WinVerifyTrust]
79134f0.3aa4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\crypt32.dll (Input=crypt32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
79234f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbdf760000 'C:\Windows\System32\crypt32.dll'
79334f0.3aa4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.18362.535.cat'; file='\SystemRoot\System32\ntdll.dll'
79434f0.3aa4: g_pfnWinVerifyTrust=00007ffbdf4561f0
79534f0.3aa4: supR3HardenedScreenImage/preload: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\crypt32.dll [redoing WinVerifyTrust]
79634f0.3aa4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
79734f0.3aa4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
79834f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbddd10000 'C:\Windows\system32\rsaenh.dll'
79934f0.3aa4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\crypt32.dll [lacks WinVerifyTrust]
80034f0.3aa4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\crypt32.dll (Input=crypt32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
80134f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbdf760000 'C:\Windows\System32\crypt32.dll'
80234f0.3aa4: supR3HardenedScreenImage/preload: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume6\Windows\System32\crypt32.dll'
80334f0.3aa4: supR3HardenedScreenImage/preload: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\wintrust.dll [redoing WinVerifyTrust]
80434f0.3aa4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
80534f0.3aa4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
80634f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbddd10000 'C:\Windows\system32\rsaenh.dll'
80734f0.3aa4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\crypt32.dll
80834f0.3aa4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\crypt32.dll (Input=crypt32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
80934f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbdf760000 'C:\Windows\System32\crypt32.dll'
81034f0.3aa4: supR3HardenedScreenImage/preload: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume6\Windows\System32\wintrust.dll'
81134f0.3aa4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
81234f0.3aa4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
81334f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbddd10000 'C:\Windows\system32\rsaenh.dll'
81434f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbdf760000 'C:\Windows\System32\crypt32.dll'
81534f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume6\Windows\System32\advapi32.dll'
81634f0.3aa4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000384 pwszName=\Device\HarddiskVolume6\Windows\System32\cryptnet.dll
81734f0.3aa4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 000000000181c280
81834f0.3aa4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=000000000181c280
81934f0.3aa4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=09032EBC3D9D9BDDC0EE4A6463C043296B79FF20
82034f0.3aa4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
82134f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbddd10000 'C:\Windows\system32\rsaenh.dll'
82234f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbdf760000 'C:\Windows\System32\crypt32.dll'
82334f0.3aa4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.18362.535.cat'; file='\Device\HarddiskVolume6\Windows\System32\cryptnet.dll'
82434f0.3aa4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
82534f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume6\Windows\System32\cryptnet.dll'
82634f0.3aa4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
82734f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbddd10000 'C:\Windows\system32\rsaenh.dll'
82834f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbdf760000 'C:\Windows\System32\crypt32.dll'
82934f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume6\Windows\System32\profapi.dll'
83034f0.3aa4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
83134f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbddd10000 'C:\Windows\system32\rsaenh.dll'
83234f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbdf760000 'C:\Windows\System32\crypt32.dll'
83334f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume6\Windows\System32\gpapi.dll'
83434f0.3aa4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
83534f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbddd10000 'C:\Windows\system32\rsaenh.dll'
83634f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbdf760000 'C:\Windows\System32\crypt32.dll'
83734f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume6\Windows\System32\sechost.dll'
83834f0.3aa4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
83934f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbddd10000 'C:\Windows\system32\rsaenh.dll'
84034f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbdf760000 'C:\Windows\System32\crypt32.dll'
84134f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume6\Windows\System32\imagehlp.dll'
84234f0.3aa4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
84334f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbddd10000 'C:\Windows\system32\rsaenh.dll'
84434f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbdf760000 'C:\Windows\System32\crypt32.dll'
84534f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume6\Windows\System32\cryptbase.dll'
84634f0.3aa4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
84734f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbddd10000 'C:\Windows\system32\rsaenh.dll'
84834f0.3aa4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\crypt32.dll
84934f0.3aa4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\crypt32.dll (Input=crypt32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
85034f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbdf760000 'C:\Windows\System32\crypt32.dll'
85134f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume6\Windows\System32\rsaenh.dll'
85234f0.3aa4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\rsaenh.dll
85334f0.3aa4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
85434f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbddd10000 'C:\Windows\system32\rsaenh.dll'
85534f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbdf760000 'C:\Windows\System32\crypt32.dll'
85634f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume6\Windows\System32\cryptsp.dll'
85734f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbddd10000 'C:\Windows\system32\rsaenh.dll'
85834f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbdf760000 'C:\Windows\System32\crypt32.dll'
85934f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume6\Windows\System32\bcryptprimitives.dll'
86034f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbddd10000 'C:\Windows\system32\rsaenh.dll'
86134f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbdf760000 'C:\Windows\System32\crypt32.dll'
86234f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume6\Windows\System32\bcrypt.dll'
86334f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbddd10000 'C:\Windows\system32\rsaenh.dll'
86434f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbdf760000 'C:\Windows\System32\crypt32.dll'
86534f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume6\Windows\System32\ucrtbase.dll'
86634f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbddd10000 'C:\Windows\system32\rsaenh.dll'
86734f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbdf760000 'C:\Windows\System32\crypt32.dll'
86834f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume6\Windows\System32\msvcrt.dll'
86934f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbddd10000 'C:\Windows\system32\rsaenh.dll'
87034f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbdf760000 'C:\Windows\System32\crypt32.dll'
87134f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume6\Windows\System32\msasn1.dll'
87234f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbddd10000 'C:\Windows\system32\rsaenh.dll'
87334f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbdf760000 'C:\Windows\System32\crypt32.dll'
87434f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume6\Windows\System32\rpcrt4.dll'
87534f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbddd10000 'C:\Windows\system32\rsaenh.dll'
87634f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 24202) fWinVerifyTrust=1 for '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\VBoxSupLib.dll'
87734f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbddd10000 'C:\Windows\system32\rsaenh.dll'
87834f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 24202) fWinVerifyTrust=1 for '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe'
87934f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbddd10000 'C:\Windows\system32\rsaenh.dll'
88034f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbdf760000 'C:\Windows\System32\crypt32.dll'
88134f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume6\Windows\System32\KernelBase.dll'
88234f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbddd10000 'C:\Windows\system32\rsaenh.dll'
88334f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbdf760000 'C:\Windows\System32\crypt32.dll'
88434f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume6\Windows\System32\kernel32.dll'
88534f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbdf760000 'C:\Windows\system32\crypt32.dll'
88634f0.3aa4: supR3HardenedWinIsDesiredRootCA: Adding 0x5ad46780fa5df300 DC=com, DC=microsoft, CN=Microsoft Root Certificate Authority
88734f0.3aa4: supR3HardenedWinIsDesiredRootCA: Adding 0xea5386456178582b C=ZA, ST=Western Cape, L=Durbanville, O=Thawte, OU=Thawte Certification, CN=Thawte Timestamping CA
88834f0.3aa4: supR3HardenedWinIsDesiredRootCA: Adding 0x578a9f606b11eb00 C=US, ST=California, L=Irvine, O=Blizzard Entertainment, OU=Battle.net, CN=Blizzard Battle.net Local Cert
88934f0.3aa4: supR3HardenedWinIsDesiredRootCA: Adding 0x3be670c1bd02a900 OU=Copyright (c) 1997 Microsoft Corp., OU=Microsoft Corporation, CN=Microsoft Root Authority
89034f0.3aa4: supR3HardenedWinIsDesiredRootCA: Adding 0xe991ee72b03db500 C=US, O=Symantec Corporation, CN=Symantec Enterprise Mobile Root for Microsoft
89134f0.3aa4: supR3HardenedWinIsDesiredRootCA: Adding 0x4d3835aa4180b200 C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Root Certificate Authority 2011
89234f0.3aa4: supR3HardenedWinIsDesiredRootCA: Adding 0x646e3fe3ba08df00 C=US, O=MSFT, CN=Microsoft Authenticode(tm) Root Authority
89334f0.3aa4: supR3HardenedWinIsDesiredRootCA: Adding 0xece4e4289e08b900 C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Root Certificate Authority 2010
89434f0.3aa4: supR3HardenedWinIsDesiredRootCA: Adding 0xf3bb4d7e894b420 C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft ECC TS Root Certificate Authority 2018
89534f0.3aa4: supR3HardenedWinIsDesiredRootCA: Adding 0x43a9cc371ff5385a O=Microsoft Trust Network, OU=Microsoft Corporation, OU=Microsoft Time Stamping Service Root, OU=Copyright (c) 1997 Microsoft Corp.
89634f0.3aa4: supR3HardenedWinIsDesiredRootCA: Adding 0x2e2d2c7c68f0202e O=VeriSign Trust Network, OU=VeriSign, Inc., OU=VeriSign Time Stamping Service Root, OU=NO LIABILITY ACCEPTED, (c)97 VeriSign, Inc.
89734f0.3aa4: supR3HardenedWinIsDesiredRootCA: Adding 0xcec3d46562b9be8e C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft ECC Product Root Certificate Authority 2018
89834f0.3aa4: supR3HardenedWinIsDesiredRootCA: Adding 0xca58a05dd401ae00 C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Time Stamp Root Certificate Authority 2014
89934f0.3aa4: supR3HardenedWinIsDesiredRootCA: Adding 0x61a3a33f81aace00 C=US, ST=UT, L=Salt Lake City, O=The USERTRUST Network, OU=http://www.usertrust.com, CN=UTN-USERFirst-Object
90034f0.3aa4: supR3HardenedWinIsDesiredRootCA: Adding 0x6b7bdc34cd37bb00 C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root G2
90134f0.3aa4: supR3HardenedWinIsDesiredRootCA: Adding 0x57ba5395b561bf00 C=BM, O=QuoVadis Limited, OU=Root Certification Authority, CN=QuoVadis Root Certification Authority
90234f0.3aa4: supR3HardenedWinIsDesiredRootCA: Adding 0x83085097e9afdf00 O=Digital Signature Trust Co., CN=DST Root CA X3
90334f0.3aa4: supR3HardenedWinIsDesiredRootCA: Adding 0x780679907625cc00 OU=GlobalSign Root CA - R3, O=GlobalSign, CN=GlobalSign
90434f0.3aa4: supR3HardenedWinIsDesiredRootCA: Adding 0x3d98ab22bb04a300 C=IE, O=Baltimore, OU=CyberTrust, CN=Baltimore CyberTrust Root
90534f0.3aa4: supR3HardenedWinIsDesiredRootCA: Adding 0xc6536f24d57ae723 C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust ECC Certification Authority
90634f0.3aa4: supR3HardenedWinIsDesiredRootCA: Adding 0xa3ce8d99e60eda00 C=BE, O=GlobalSign nv-sa, OU=Root CA, CN=GlobalSign Root CA
90734f0.3aa4: supR3HardenedWinIsDesiredRootCA: Adding 0x560ad29254e89100 C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO RSA Certification Authority
90834f0.3aa4: supR3HardenedWinIsDesiredRootCA: Adding 0xa671e9fec832b700 C=US, O=Starfield Technologies, Inc., OU=Starfield Class 2 Certification Authority
90934f0.3aa4: supR3HardenedWinIsDesiredRootCA: Adding 0xa8de7211e13be200 C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root CA
91034f0.3aa4: supR3HardenedWinIsDesiredRootCA: Adding 0xd45980fbf0a0ac00 C=US, O=thawte, Inc., OU=Certification Services Division, OU=(c) 2006 thawte, Inc. - For authorized use only, CN=thawte Primary Root CA
91134f0.3aa4: supR3HardenedWinIsDesiredRootCA: Adding 0xc9edb72b684ba00 C=US, O=Entrust, Inc., OU=See www.entrust.net/legal-terms, OU=(c) 2009 Entrust, Inc. - for authorized use only, CN=Entrust Root Certification Authority - G2
91234f0.3aa4: supR3HardenedWinIsDesiredRootCA: Adding 0xf5cd95e581a4ab00 C=US, O=SecureTrust Corporation, CN=SecureTrust CA
91334f0.3aa4: supR3HardenedWinIsDesiredRootCA: Adding 0x6f2ebe0e24cfa600 OU=GlobalSign Root CA - R2, O=GlobalSign, CN=GlobalSign
91434f0.3aa4: supR3HardenedWinIsDesiredRootCA: Adding 0x14018a1bf29e595c C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification Authority
91534f0.3aa4: supR3HardenedWinIsDesiredRootCA: Adding 0x9e5bc2d78b6a3636 C=ZA, ST=Western Cape, L=Cape Town, O=Thawte Consulting cc, OU=Certification Services Division, CN=Thawte Premium Server CA, Email=premium-server@thawte.com
91634f0.3aa4: supR3HardenedWinIsDesiredRootCA: Adding 0xd4fbe673e5ccc600 C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert High Assurance EV Root CA
91734f0.3aa4: supR3HardenedWinIsDesiredRootCA: Adding 0xef477acf4ab2d300 C=DE, O=D-Trust GmbH, CN=D-TRUST Root Class 3 CA 2 2009
91834f0.3aa4: supR3HardenedWinIsDesiredRootCA: Adding 0x1b8578514b74ac00 C=US, O=WFA Hotspot 2.0, CN=Hotspot 2.0 Trust Root CA - 03
91934f0.3aa4: supR3HardenedWinIsDesiredRootCA: Adding 0xb28612a94b4dad00 O=Entrust.net, OU=www.entrust.net/CPS_2048 incorp. by ref. (limits liab.), OU=(c) 1999 Entrust.net Limited, CN=Entrust.net Certification Authority (2048)
92034f0.3aa4: supR3HardenedWinIsDesiredRootCA: Adding 0x357a29080824af00 C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. - For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority - G5
92134f0.3aa4: supR3HardenedWinIsDesiredRootCA: Adding 0x59faf1086271bf00 C=US, ST=Arizona, L=Scottsdale, O=GoDaddy.com, Inc., CN=Go Daddy Root Certificate Authority - G2
92234f0.3aa4: supR3HardenedWinIsDesiredRootCA: Adding 0x3401b15e3761c700 C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2008 VeriSign, Inc. - For authorized use only, CN=VeriSign Universal Root Certification Authority
92334f0.3aa4: supR3HardenedWinIsDesiredRootCA: Adding 0xc30e361765128000 C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority
92434f0.3aa4: supR3HardenedWinIsDesiredRootCA: Adding 0x491857ead79dde00 C=US, O=The Go Daddy Group, Inc., OU=Go Daddy Class 2 Certification Authority
92534f0.3aa4: supR3HardenedWinIsDesiredRootCA: Adding 0x1f78fc529cbacb00 C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 1999 VeriSign, Inc. - For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority - G3
92634f0.3aa4: supR3HardenedWinIsDesiredRootCA: Adding 0xdc1801b225aea100 C=BM, O=QuoVadis Limited, CN=QuoVadis Root CA 2 G3
92734f0.3aa4: supR3HardenedWinIsDesiredRootCA: Adding 0x8043e4ce150ead00 C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Assured ID Root CA
92834f0.3aa4: supR3HardenedWinIsDesiredRootCA: Adding 0xf2e6331af7b700 C=SE, O=AddTrust AB, OU=AddTrust External TTP Network, CN=AddTrust External CA Root
92934f0.3aa4: supR3HardenedWinRetrieveTrustedRootCAs: cAdded=43
93034f0.3aa4: SUPR3HardenedMain: Load Runtime...
93134f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbddd10000 'C:\Windows\system32\rsaenh.dll'
93234f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
93334f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp100.dll'.
93434f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'rpcrt4.dll'.
93534f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'ws2_32.dll'.
93634f0.3aa4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\VBoxRT.dll) WinVerifyTrust
93734f0.3aa4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\VBoxRT.dll
93834f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
93934f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume6\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
94034f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbddd10000 'C:\Windows\system32\rsaenh.dll'
94134f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbdf760000 'C:\Windows\System32\crypt32.dll'
94234f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #26 'rpcrt4.dll'.
94334f0.3aa4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume6\Windows\System32\ws2_32.dll) WinVerifyTrust
94434f0.3aa4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume6\Windows\System32\ws2_32.dll
94534f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
94634f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume6\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
94734f0.3aa4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\rpcrt4.dll
94834f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
94934f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
95034f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
95134f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume6\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
95234f0.3aa4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\rpcrt4.dll
95334f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbddd10000 'C:\Windows\system32\rsaenh.dll'
95434f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
95534f0.3aa4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcp100.dll) WinVerifyTrust
95634f0.3aa4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcp100.dll
95734f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
95834f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
95934f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
96034f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
96134f0.3aa4: Detected WinVerifyTrust recursion: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll'.
96234f0.3aa4: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll)
96334f0.3aa4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll
96434f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbddd10000 'C:\Windows\system32\rsaenh.dll'
96534f0.3aa4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll) WinVerifyTrust
96634f0.3aa4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000a01:<flags> [calling]
96734f0.3aa4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\VBoxRT.dll
96834f0.3aa4: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll [avoiding WinVerifyTrust]
96934f0.3aa4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcp100.dll
97034f0.3aa4: supR3HardenedDllNotificationCallback: load 000000005db20000 LB 0x000d2000 C:\Program Files\Oracle\VirtualBox\MSVCR100.dll [fFlags=0x0]
97134f0.3aa4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll [avoiding WinVerifyTrust]
97234f0.3aa4: supR3HardenedDllNotificationCallback: load 000000005cfa0000 LB 0x00098000 C:\Program Files\Oracle\VirtualBox\MSVCP100.dll [fFlags=0x0]
97334f0.3aa4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcp100.dll
97434f0.3aa4: supR3HardenedDllNotificationCallback: load 00007ffbdfc70000 LB 0x0006f000 C:\Windows\System32\WS2_32.dll [fFlags=0x0]
97534f0.3aa4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\ws2_32.dll
97634f0.3aa4: supR3HardenedDllNotificationCallback: load 00007ffb96b70000 LB 0x005e9000 C:\Program Files\Oracle\VirtualBox\VBoxRT.dll [fFlags=0x0]
97734f0.3aa4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\VBoxRT.dll
97834f0.3aa4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll'.
97934f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
98034f0.3aa4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\VBoxRT.dll
98134f0.3aa4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
98234f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb96b70000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
98334f0.3aa4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll'.
98434f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
98534f0.3aa4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll'.
98634f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
98734f0.3aa4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\VBoxRT.dll
98834f0.3aa4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
98934f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb96b70000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
99034f0.3aa4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll'.
99134f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
99234f0.3aa4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll'.
99334f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
99434f0.3aa4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\VBoxRT.dll
99534f0.3aa4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
99634f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb96b70000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
99734f0.3aa4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll'.
99834f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
99934f0.3aa4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll'.
100034f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
100134f0.3aa4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\VBoxRT.dll
100234f0.3aa4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
100334f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb96b70000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
100434f0.3aa4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll'.
100534f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
100634f0.3aa4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll'.
100734f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
100834f0.3aa4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\VBoxRT.dll
100934f0.3aa4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
101034f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb96b70000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
101134f0.3aa4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll'.
101234f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
101334f0.3aa4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll'.
101434f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
101534f0.3aa4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\VBoxRT.dll
101634f0.3aa4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
101734f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb96b70000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
101834f0.3aa4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll'.
101934f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
102034f0.3aa4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll'.
102134f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
102234f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb96b70000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
102334f0.3aa4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll'.
102434f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
102534f0.3aa4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll'.
102634f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
102734f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb96b70000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
102834f0.3aa4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll'.
102934f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
103034f0.3aa4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll'.
103134f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
103234f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb96b70000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
103334f0.3aa4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll'.
103434f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
103534f0.3aa4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll'.
103634f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
103734f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb96b70000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
103834f0.3aa4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll'.
103934f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
104034f0.3aa4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll'.
104134f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
104234f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb96b70000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
104334f0.3aa4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll'.
104434f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
104534f0.3aa4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll'.
104634f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
104734f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb96b70000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
104834f0.3aa4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll'.
104934f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
105034f0.3aa4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll'.
105134f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
105234f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb96b70000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
105334f0.3aa4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll'.
105434f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
105534f0.3aa4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll'.
105634f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
105734f0.3aa4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\VBoxRT.dll
105834f0.3aa4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
105934f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb96b70000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
106034f0.3aa4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll'.
106134f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
106234f0.3aa4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll'.
106334f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
106434f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb96b70000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
106534f0.3aa4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll'.
106634f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
106734f0.3aa4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll'.
106834f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
106934f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb96b70000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
107034f0.3aa4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll'.
107134f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
107234f0.3aa4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll'.
107334f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
107434f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb96b70000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
107534f0.3aa4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll'.
107634f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
107734f0.3aa4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll'.
107834f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
107934f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb96b70000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
108034f0.3aa4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll'.
108134f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
108234f0.3aa4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll'.
108334f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
108434f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb96b70000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
108534f0.3aa4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll'.
108634f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
108734f0.3aa4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll'.
108834f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
108934f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb96b70000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
109034f0.3aa4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll'.
109134f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
109234f0.3aa4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll'.
109334f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
109434f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb96b70000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
109534f0.3aa4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll'.
109634f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
109734f0.3aa4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll'.
109834f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
109934f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb96b70000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
110034f0.3aa4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll'.
110134f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
110234f0.3aa4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll'.
110334f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
110434f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb96b70000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
110534f0.3aa4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll'.
110634f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
110734f0.3aa4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll'.
110834f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
110934f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb96b70000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
111034f0.3aa4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll'.
111134f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
111234f0.3aa4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll'.
111334f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
111434f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb96b70000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
111534f0.3aa4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll'.
111634f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
111734f0.3aa4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll'.
111834f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
111934f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb96b70000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
112034f0.3aa4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll'.
112134f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
112234f0.3aa4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll'.
112334f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
112434f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb96b70000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
112534f0.3aa4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll'.
112634f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
112734f0.3aa4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll'.
112834f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
112934f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb96b70000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
113034f0.3aa4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll'.
113134f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
113234f0.3aa4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll'.
113334f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
113434f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb96b70000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
113534f0.3aa4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll'.
113634f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
113734f0.3aa4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll'.
113834f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
113934f0.3aa4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\VBoxRT.dll
114034f0.3aa4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
114134f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb96b70000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
114234f0.3aa4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll'.
114334f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
114434f0.3aa4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll'.
114534f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
114634f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb96b70000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
114734f0.3aa4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll'.
114834f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
114934f0.3aa4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll'.
115034f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
115134f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb96b70000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
115234f0.3aa4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll'.
115334f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
115434f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb96b70000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
115534f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbddd10000 'C:\Windows\system32\rsaenh.dll'
115634f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 24202) fWinVerifyTrust=1 for '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll'
115734f0.3aa4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\wintrust.dll
115834f0.3aa4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\Wintrust.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
115934f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbdf450000 'C:\Windows\system32\Wintrust.dll'
116034f0.3aa4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\rsaenh.dll
116134f0.3aa4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
116234f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbddd10000 'C:\Windows\system32\rsaenh.dll'
116334f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbdf760000 'C:\Windows\System32\crypt32.dll'
116434f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbddd10000 'C:\Windows\system32\rsaenh.dll'
116534f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbdf760000 'C:\Windows\System32\crypt32.dll'
116634f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbdf760000 'C:\Windows\system32\crypt32.dll'
116734f0.3aa4: SUPR3HardenedMain: Load TrustedMain...
116834f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbddd10000 'C:\Windows\system32\rsaenh.dll'
116934f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'opengl32.dll'.
117034f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'uicommon.dll'.
117134f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxrt.dll'.
117234f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'msvcp100.dll'.
117334f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'msvcr100.dll'.
117434f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'qt5corevbox.dll'.
117534f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'qt5guivbox.dll'.
117634f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'qt5widgetsvbox.dll'.
117734f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'qt5openglvbox.dll'.
117834f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'user32.dll'.
117934f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'ole32.dll'.
118034f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'oleaut32.dll'.
118134f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #13 'winmm.dll'.
118234f0.3aa4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll) WinVerifyTrust
118334f0.3aa4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll
118434f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
118534f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume6\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008]
118634f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbddd10000 'C:\Windows\system32\rsaenh.dll'
118734f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbdf760000 'C:\Windows\System32\crypt32.dll'
118834f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'winmmbase.dll'.
118934f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'msvcrt.dll'.
119034f0.3aa4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume6\Windows\System32\winmm.dll) WinVerifyTrust
119134f0.3aa4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume6\Windows\System32\winmm.dll
119234f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
119334f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume6\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
119434f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
119534f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume6\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
119634f0.3aa4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\msvcrt.dll
119734f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmmbase.dll'...
119834f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmmbase.dll' -> '\Device\HarddiskVolume6\Windows\System32\winmmbase.dll' [rcNtRedir=0xc0150008]
119934f0.3aa4: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\winmmbase.dll'.
120034f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
120134f0.3aa4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume6\Windows\System32\winmmbase.dll)
120234f0.3aa4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume6\Windows\System32\winmmbase.dll
120334f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
120434f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume6\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
120534f0.3aa4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\msvcrt.dll
120634f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbddd10000 'C:\Windows\system32\rsaenh.dll'
120734f0.3aa4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\crypt32.dll
120834f0.3aa4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\crypt32.dll (Input=crypt32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
120934f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbdf760000 'C:\Windows\System32\crypt32.dll'
121034f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcp_win.dll'.
121134f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'combase.dll'.
121234f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #23 'rpcrt4.dll'.
121334f0.3aa4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume6\Windows\System32\oleaut32.dll) WinVerifyTrust
121434f0.3aa4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume6\Windows\System32\oleaut32.dll
121534f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
121634f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume6\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
121734f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
121834f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume6\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
121934f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
122034f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume6\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
122134f0.3aa4: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\combase.dll'.
122234f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'rpcrt4.dll'.
122334f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #46 'bcryptprimitives.dll'.
122434f0.3aa4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume6\Windows\System32\combase.dll)
122534f0.3aa4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume6\Windows\System32\combase.dll
122634f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
122734f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume6\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
122834f0.3aa4: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\msvcp_win.dll'.
122934f0.3aa4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume6\Windows\System32\msvcp_win.dll)
123034f0.3aa4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume6\Windows\System32\msvcp_win.dll
123134f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcryptprimitives.dll'...
123234f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcryptprimitives.dll' -> '\Device\HarddiskVolume6\Windows\System32\bcryptprimitives.dll' [rcNtRedir=0xc0150008]
123334f0.3aa4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\bcryptprimitives.dll
123434f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
123534f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume6\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
123634f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbddd10000 'C:\Windows\system32\rsaenh.dll'
123734f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbdf760000 'C:\Windows\System32\crypt32.dll'
123834f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #22 'rpcrt4.dll'.
123934f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #56 'gdi32.dll'.
124034f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #57 'user32.dll'.
124134f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #58 'combase.dll'.
124234f0.3aa4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume6\Windows\System32\ole32.dll) WinVerifyTrust
124334f0.3aa4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume6\Windows\System32\ole32.dll
124434f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
124534f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume6\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
124634f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
124734f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume6\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
124834f0.3aa4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\combase.dll [lacks WinVerifyTrust]
124934f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
125034f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume6\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
125134f0.3aa4: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\user32.dll'.
125234f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'win32u.dll'.
125334f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #34 'gdi32.dll'.
125434f0.3aa4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume6\Windows\System32\user32.dll)
125534f0.3aa4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume6\Windows\System32\user32.dll
125634f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
125734f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume6\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
125834f0.3aa4: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\gdi32.dll'.
125934f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'win32u.dll'.
126034f0.3aa4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume6\Windows\System32\gdi32.dll)
126134f0.3aa4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume6\Windows\System32\gdi32.dll
126234f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
126334f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume6\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
126434f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
126534f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume6\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
126634f0.3aa4: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\win32u.dll'.
126734f0.3aa4: '\Device\HarddiskVolume6\Windows\System32\win32u.dll' has no imports
126834f0.3aa4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume6\Windows\System32\win32u.dll)
126934f0.3aa4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume6\Windows\System32\win32u.dll
127034f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
127134f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume6\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
127234f0.3aa4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
127334f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
127434f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume6\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
127534f0.3aa4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\win32u.dll [lacks WinVerifyTrust]
127634f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbddd10000 'C:\Windows\system32\rsaenh.dll'
127734f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbdf760000 'C:\Windows\System32\crypt32.dll'
127834f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'win32u.dll'.
127934f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #34 'gdi32.dll'.
128034f0.3aa4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume6\Windows\System32\user32.dll) WinVerifyTrust
128134f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5openglvbox.dll'...
128234f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5openglvbox.dll' -> '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\qt5openglvbox.dll' [rcNtRedir=0xc0150008]
128334f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
128434f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume6\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
128534f0.3aa4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
128634f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
128734f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume6\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
128834f0.3aa4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\win32u.dll [lacks WinVerifyTrust]
128934f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbddd10000 'C:\Windows\system32\rsaenh.dll'
129034f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'qt5widgetsvbox.dll'.
129134f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'qt5guivbox.dll'.
129234f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5corevbox.dll'.
129334f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'msvcr100.dll'.
129434f0.3aa4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll) WinVerifyTrust
129534f0.3aa4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll
129634f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5widgetsvbox.dll'...
129734f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll' -> '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\qt5widgetsvbox.dll' [rcNtRedir=0xc0150008]
129834f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
129934f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
130034f0.3aa4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll
130134f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
130234f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
130334f0.3aa4: Detected WinVerifyTrust recursion: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll'.
130434f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'.
130534f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'shell32.dll'.
130634f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'ole32.dll'.
130734f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'advapi32.dll'.
130834f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'ws2_32.dll'.
130934f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'mpr.dll'.
131034f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'msvcp100.dll'.
131134f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'msvcr100.dll'.
131234f0.3aa4: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll)
131334f0.3aa4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll
131434f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
131534f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
131634f0.3aa4: Detected WinVerifyTrust recursion: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll'.
131734f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'ole32.dll'.
131834f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'opengl32.dll'.
131934f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'gdi32.dll'.
132034f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
132134f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'qt5corevbox.dll'.
132234f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'msvcp100.dll'.
132334f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msvcr100.dll'.
132434f0.3aa4: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll)
132534f0.3aa4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll
132634f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5widgetsvbox.dll'...
132734f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll' -> '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\qt5widgetsvbox.dll' [rcNtRedir=0xc0150008]
132834f0.3aa4: Detected WinVerifyTrust recursion: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'.
132934f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'gdi32.dll'.
133034f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'.
133134f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5guivbox.dll'.
133234f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'qt5corevbox.dll'.
133334f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'shell32.dll'.
133434f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'msvcp100.dll'.
133534f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msvcr100.dll'.
133634f0.3aa4: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll)
133734f0.3aa4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll
133834f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
133934f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
134034f0.3aa4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll
134134f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
134234f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
134334f0.3aa4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcp100.dll
134434f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
134534f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume6\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
134634f0.3aa4: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\shell32.dll'.
134734f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #77 'user32.dll'.
134834f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #79 'gdi32.dll'.
134934f0.3aa4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume6\Windows\System32\shell32.dll)
135034f0.3aa4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume6\Windows\System32\shell32.dll
135134f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
135234f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
135334f0.3aa4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
135434f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
135534f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
135634f0.3aa4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
135734f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
135834f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume6\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
135934f0.3aa4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\user32.dll [lacks WinVerifyTrust]
136034f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
136134f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume6\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
136234f0.3aa4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
136334f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
136434f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
136534f0.3aa4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll
136634f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
136734f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
136834f0.3aa4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcp100.dll
136934f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
137034f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
137134f0.3aa4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
137234f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
137334f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume6\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
137434f0.3aa4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\user32.dll [lacks WinVerifyTrust]
137534f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
137634f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume6\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
137734f0.3aa4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
137834f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
137934f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume6\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008]
138034f0.3aa4: Detected WinVerifyTrust recursion: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume6\Windows\System32\opengl32.dll'.
138134f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
138234f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'advapi32.dll'.
138334f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
138434f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'gdi32.dll'.
138534f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'glu32.dll'.
138634f0.3aa4: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume6\Windows\System32\opengl32.dll)
138734f0.3aa4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume6\Windows\System32\opengl32.dll
138834f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
138934f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume6\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
139034f0.3aa4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\ole32.dll
139134f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
139234f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
139334f0.3aa4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll
139434f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
139534f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
139634f0.3aa4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcp100.dll
139734f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mpr.dll'...
139834f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'mpr.dll' -> '\Device\HarddiskVolume6\Windows\System32\mpr.dll' [rcNtRedir=0xc0150008]
139934f0.3aa4: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\mpr.dll'.
140034f0.3aa4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume6\Windows\System32\mpr.dll)
140134f0.3aa4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume6\Windows\System32\mpr.dll
140234f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
140334f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume6\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
140434f0.3aa4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\ws2_32.dll
140534f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
140634f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume6\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
140734f0.3aa4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\advapi32.dll
140834f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
140934f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume6\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
141034f0.3aa4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\ole32.dll
141134f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
141234f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume6\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
141334f0.3aa4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\shell32.dll [lacks WinVerifyTrust]
141434f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
141534f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume6\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
141634f0.3aa4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\user32.dll [lacks WinVerifyTrust]
141734f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'glu32.dll'...
141834f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'glu32.dll' -> '\Device\HarddiskVolume6\Windows\System32\glu32.dll' [rcNtRedir=0xc0150008]
141934f0.3aa4: Detected WinVerifyTrust recursion: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume6\Windows\System32\glu32.dll'.
142034f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
142134f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'user32.dll'.
142234f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'opengl32.dll'.
142334f0.3aa4: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume6\Windows\System32\glu32.dll)
142434f0.3aa4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume6\Windows\System32\glu32.dll
142534f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
142634f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume6\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
142734f0.3aa4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
142834f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
142934f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume6\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
143034f0.3aa4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\user32.dll [lacks WinVerifyTrust]
143134f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
143234f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume6\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
143334f0.3aa4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\advapi32.dll
143434f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
143534f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume6\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
143634f0.3aa4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\msvcrt.dll
143734f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
143834f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume6\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
143934f0.3aa4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
144034f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
144134f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume6\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
144234f0.3aa4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\user32.dll [lacks WinVerifyTrust]
144334f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
144434f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume6\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008]
144534f0.3aa4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume6\Windows\System32\opengl32.dll [lacks WinVerifyTrust]
144634f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
144734f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume6\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
144834f0.3aa4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\user32.dll [lacks WinVerifyTrust]
144934f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
145034f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume6\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
145134f0.3aa4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\msvcrt.dll
145234f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbddd10000 'C:\Windows\system32\rsaenh.dll'
145334f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'gdi32.dll'.
145434f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'.
145534f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5guivbox.dll'.
145634f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'qt5corevbox.dll'.
145734f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'shell32.dll'.
145834f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'msvcp100.dll'.
145934f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msvcr100.dll'.
146034f0.3aa4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll) WinVerifyTrust
146134f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
146234f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
146334f0.3aa4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [redoing WinVerifyTrust]
146434f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
146534f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
146634f0.3aa4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll
146734f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
146834f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
146934f0.3aa4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcp100.dll
147034f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
147134f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume6\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
147234f0.3aa4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\shell32.dll [lacks WinVerifyTrust]
147334f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
147434f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
147534f0.3aa4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
147634f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
147734f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
147834f0.3aa4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
147934f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
148034f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume6\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
148134f0.3aa4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\user32.dll [lacks WinVerifyTrust]
148234f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
148334f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume6\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
148434f0.3aa4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
148534f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbddd10000 'C:\Windows\system32\rsaenh.dll'
148634f0.3aa4: supR3HardenedScreenImage/Imports: 0 (was 24202) fWinVerifyTrust=1 for '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll'
148734f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
148834f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
148934f0.3aa4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [redoing WinVerifyTrust]
149034f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbddd10000 'C:\Windows\system32\rsaenh.dll'
149134f0.3aa4: supR3HardenedScreenImage/Imports: 0 (was 24202) fWinVerifyTrust=1 for '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll'
149234f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
149334f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
149434f0.3aa4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll
149534f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
149634f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
149734f0.3aa4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcp100.dll
149834f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
149934f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
150034f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'uicommon.dll'...
150134f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'uicommon.dll' -> '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\uicommon.dll' [rcNtRedir=0xc0150008]
150234f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbddd10000 'C:\Windows\system32\rsaenh.dll'
150334f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'vboxrt.dll'.
150434f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcr100.dll'.
150534f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5corevbox.dll'.
150634f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'qt5guivbox.dll'.
150734f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'qt5widgetsvbox.dll'.
150834f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'user32.dll'.
150934f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'advapi32.dll'.
151034f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'ole32.dll'.
151134f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'oleaut32.dll'.
151234f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'rpcrt4.dll'.
151334f0.3aa4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\UICommon.dll) WinVerifyTrust
151434f0.3aa4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\UICommon.dll
151534f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
151634f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume6\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008]
151734f0.3aa4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume6\Windows\System32\opengl32.dll [redoing WinVerifyTrust]
151834f0.3aa4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000488 pwszName=\Device\HarddiskVolume6\Windows\System32\opengl32.dll
151934f0.3aa4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 000000000181c280
152034f0.3aa4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=000000000181c280
152134f0.3aa4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=0837440FAE05EB650168FFA2D15E73182F6A3A26
152234f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
152334f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume6\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
152434f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
152534f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume6\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
152634f0.3aa4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\oleaut32.dll
152734f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
152834f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume6\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
152934f0.3aa4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\ole32.dll
153034f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
153134f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume6\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
153234f0.3aa4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\advapi32.dll
153334f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
153434f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume6\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
153534f0.3aa4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\user32.dll [lacks WinVerifyTrust]
153634f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5widgetsvbox.dll'...
153734f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll' -> '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\qt5widgetsvbox.dll' [rcNtRedir=0xc0150008]
153834f0.3aa4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [lacks WinVerifyTrust]
153934f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
154034f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
154134f0.3aa4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll
154234f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
154334f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
154434f0.3aa4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll
154534f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
154634f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
154734f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
154834f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
154934f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbddd10000 'C:\Windows\system32\rsaenh.dll'
155034f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbdf760000 'C:\Windows\System32\crypt32.dll'
155134f0.3aa4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0212~31bf3856ad364e35~amd64~~10.0.18362.628.cat'; file='\Device\HarddiskVolume6\Windows\System32\opengl32.dll'
155234f0.3aa4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
155334f0.3aa4: supR3HardenedScreenImage/Imports: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume6\Windows\System32\opengl32.dll'
155434f0.3aa4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000a01:<flags> [calling]
155534f0.3aa4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll
155634f0.3aa4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\opengl32.dll
155734f0.3aa4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\UICommon.dll
155834f0.3aa4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll
155934f0.3aa4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll
156034f0.3aa4: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [avoiding WinVerifyTrust]
156134f0.3aa4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll
156234f0.3aa4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\winmm.dll
156334f0.3aa4: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume6\Windows\System32\glu32.dll [avoiding WinVerifyTrust]
156434f0.3aa4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\mpr.dll [avoiding WinVerifyTrust]
156534f0.3aa4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\winmmbase.dll [avoiding WinVerifyTrust]
156634f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcp_win.dll'.
156734f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #22 'win32u.dll'.
156834f0.3aa4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume6\Windows\System32\DXCore.dll)
156934f0.3aa4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume6\Windows\System32\DXCore.dll
157034f0.3aa4: supR3HardenedDllNotificationCallback: load 00007ffbdea50000 LB 0x00021000 C:\Windows\System32\win32u.dll [fFlags=0x0]
157134f0.3aa4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\win32u.dll [avoiding WinVerifyTrust]
157234f0.3aa4: supR3HardenedDllNotificationCallback: load 00007ffbdfa60000 LB 0x0009e000 C:\Windows\System32\msvcp_win.dll [fFlags=0x0]
157334f0.3aa4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\msvcp_win.dll [avoiding WinVerifyTrust]
157434f0.3aa4: supR3HardenedDllNotificationCallback: load 00007ffbdf2b0000 LB 0x00194000 C:\Windows\System32\gdi32full.dll [fFlags=0x0]
157534f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcp_win.dll'.
157634f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #33 'gdi32.dll'.
157734f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #35 'user32.dll'.
157834f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #36 'win32u.dll'.
157934f0.3aa4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume6\Windows\System32\gdi32full.dll)
158034f0.3aa4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume6\Windows\System32\gdi32full.dll
158134f0.3aa4: supR3HardenedDllNotificationCallback: load 00007ffbdfc40000 LB 0x00026000 C:\Windows\System32\GDI32.dll [fFlags=0x0]
158234f0.3aa4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\gdi32.dll [avoiding WinVerifyTrust]
158334f0.3aa4: supR3HardenedDllNotificationCallback: load 00007ffbe09f0000 LB 0x00194000 C:\Windows\System32\USER32.dll [fFlags=0x0]
158434f0.3aa4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\user32.dll [avoiding WinVerifyTrust]
158534f0.3aa4: supR3HardenedDllNotificationCallback: load 00007ffbe1710000 LB 0x00336000 C:\Windows\System32\combase.dll [fFlags=0x0]
158634f0.3aa4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\combase.dll [avoiding WinVerifyTrust]
158734f0.3aa4: supR3HardenedDllNotificationCallback: load 00007ffbdfb20000 LB 0x0004a000 C:\Windows\System32\cfgmgr32.dll [fFlags=0x0]
158834f0.3aa4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume6\Windows\System32\cfgmgr32.dll)
158934f0.3aa4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume6\Windows\System32\cfgmgr32.dll
159034f0.3aa4: supR3HardenedDllNotificationCallback: load 00007ffbdd670000 LB 0x00020000 C:\Windows\SYSTEM32\dxcore.dll [fFlags=0x0]
159134f0.3aa4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\DXCore.dll [avoiding WinVerifyTrust]
159234f0.3aa4: supR3HardenedDllNotificationCallback: load 00007ffbdb280000 LB 0x0002c000 C:\Windows\SYSTEM32\GLU32.dll [fFlags=0x0]
159334f0.3aa4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume6\Windows\System32\glu32.dll [avoiding WinVerifyTrust]
159434f0.3aa4: supR3HardenedDllNotificationCallback: load 00007ffbb1130000 LB 0x00156000 C:\Windows\SYSTEM32\OPENGL32.dll [fFlags=0x0]
159534f0.3aa4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\opengl32.dll
159634f0.3aa4: supR3HardenedDllNotificationCallback: load 00007ffbe13e0000 LB 0x000a9000 C:\Windows\System32\shcore.dll [fFlags=0x0]
159734f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
159834f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #36 'rpcrt4.dll'.
159934f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #43 'combase.dll'.
160034f0.3aa4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume6\Windows\System32\SHCore.dll)
160134f0.3aa4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume6\Windows\System32\SHCore.dll
160234f0.3aa4: supR3HardenedDllNotificationCallback: load 00007ffbde990000 LB 0x00010000 C:\Windows\System32\UMPDC.dll [fFlags=0x0]
160334f0.3aa4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume6\Windows\System32\umpdc.dll)
160434f0.3aa4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume6\Windows\System32\umpdc.dll
160534f0.3aa4: supR3HardenedDllNotificationCallback: load 00007ffbde9a0000 LB 0x0004a000 C:\Windows\System32\powrprof.dll [fFlags=0x0]
160634f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'rpcrt4.dll'.
160734f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #19 'umpdc.dll'.
160834f0.3aa4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume6\Windows\System32\powrprof.dll)
160934f0.3aa4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume6\Windows\System32\powrprof.dll
161034f0.3aa4: supR3HardenedDllNotificationCallback: load 00007ffbe0050000 LB 0x00052000 C:\Windows\System32\shlwapi.dll [fFlags=0x0]
161134f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcrt.dll'.
161234f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #44 'gdi32.dll'.
161334f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #45 'user32.dll'.
161434f0.3aa4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume6\Windows\System32\shlwapi.dll)
161534f0.3aa4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume6\Windows\System32\shlwapi.dll
161634f0.3aa4: supR3HardenedDllNotificationCallback: load 00007ffbde9f0000 LB 0x00011000 C:\Windows\System32\kernel.appcore.dll [fFlags=0x0]
161734f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'msvcrt.dll'.
161834f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'rpcrt4.dll'.
161934f0.3aa4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume6\Windows\System32\kernel.appcore.dll)
162034f0.3aa4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume6\Windows\System32\kernel.appcore.dll
162134f0.3aa4: supR3HardenedDllNotificationCallback: load 00007ffbdeb30000 LB 0x0077f000 C:\Windows\System32\windows.storage.dll [fFlags=0x0]
162234f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #31 'combase.dll'.
162334f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #32 'msvcp_win.dll'.
162434f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #39 'rpcrt4.dll'.
162534f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #56 'profapi.dll'.
162634f0.3aa4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume6\Windows\System32\windows.storage.dll)
162734f0.3aa4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume6\Windows\System32\windows.storage.dll
162834f0.3aa4: supR3HardenedDllNotificationCallback: load 00007ffbe0cf0000 LB 0x006e5000 C:\Windows\System32\SHELL32.dll [fFlags=0x0]
162934f0.3aa4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\shell32.dll [avoiding WinVerifyTrust]
163034f0.3aa4: supR3HardenedDllNotificationCallback: load 00007ffbe1490000 LB 0x00156000 C:\Windows\System32\ole32.dll [fFlags=0x0]
163134f0.3aa4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\ole32.dll
163234f0.3aa4: supR3HardenedDllNotificationCallback: load 00007ffbceea0000 LB 0x0001b000 C:\Windows\SYSTEM32\MPR.dll [fFlags=0x0]
163334f0.3aa4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\mpr.dll [avoiding WinVerifyTrust]
163434f0.3aa4: supR3HardenedDllNotificationCallback: load 000000005d5b0000 LB 0x00565000 C:\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [fFlags=0x0]
163534f0.3aa4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll
163634f0.3aa4: supR3HardenedDllNotificationCallback: load 00007ffb91c80000 LB 0x005f7000 C:\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [fFlags=0x0]
163734f0.3aa4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll
163834f0.3aa4: supR3HardenedDllNotificationCallback: load 000000005d040000 LB 0x00561000 C:\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [fFlags=0x0]
163934f0.3aa4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [avoiding WinVerifyTrust]
164034f0.3aa4: supR3HardenedDllNotificationCallback: load 00007ffbe01b0000 LB 0x000c4000 C:\Windows\System32\OLEAUT32.dll [fFlags=0x0]
164134f0.3aa4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\oleaut32.dll
164234f0.3aa4: supR3HardenedDllNotificationCallback: load 00007ffb7ad20000 LB 0x02609000 C:\Program Files\Oracle\VirtualBox\UICommon.dll [fFlags=0x0]
164334f0.3aa4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\UICommon.dll
164434f0.3aa4: supR3HardenedDllNotificationCallback: load 000000005ce90000 LB 0x00054000 C:\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll [fFlags=0x0]
164534f0.3aa4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll
164634f0.3aa4: supR3HardenedDllNotificationCallback: load 00007ffbdc7f0000 LB 0x0002d000 C:\Windows\SYSTEM32\WINMMBASE.dll [fFlags=0x0]
164734f0.3aa4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\winmmbase.dll [avoiding WinVerifyTrust]
164834f0.3aa4: supR3HardenedDllNotificationCallback: load 00007ffbdc820000 LB 0x00024000 C:\Windows\SYSTEM32\WINMM.dll [fFlags=0x0]
164934f0.3aa4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\winmm.dll
165034f0.3aa4: supR3HardenedDllNotificationCallback: load 00007ffbb1310000 LB 0x001c8000 C:\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll [fFlags=0x0]
165134f0.3aa4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll
165234f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\windows.storage.dll'.
165334f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\windows.storage.dll' [rescheduled]
165434f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\kernel.appcore.dll'.
165534f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\kernel.appcore.dll' [rescheduled]
165634f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\shlwapi.dll'.
165734f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\shlwapi.dll' [rescheduled]
165834f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\powrprof.dll'.
165934f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\powrprof.dll' [rescheduled]
166034f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\umpdc.dll'.
166134f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\umpdc.dll' [rescheduled]
166234f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\SHCore.dll'.
166334f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\SHCore.dll' [rescheduled]
166434f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\cfgmgr32.dll'.
166534f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\cfgmgr32.dll' [rescheduled]
166634f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\gdi32full.dll'.
166734f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\gdi32full.dll' [rescheduled]
166834f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\DXCore.dll'.
166934f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\DXCore.dll' [rescheduled]
167034f0.3aa4: Detected loader lock ownership: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume6\Windows\System32\glu32.dll'.
167134f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 22900 (was 22900) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\glu32.dll' [rescheduled]
167234f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\mpr.dll'.
167334f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\mpr.dll' [rescheduled]
167434f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\shell32.dll'.
167534f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\shell32.dll' [rescheduled]
167634f0.3aa4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'.
167734f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll' [rescheduled]
167834f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\win32u.dll'.
167934f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\win32u.dll' [rescheduled]
168034f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\gdi32.dll'.
168134f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\gdi32.dll' [rescheduled]
168234f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\user32.dll'.
168334f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\user32.dll' [rescheduled]
168434f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\msvcp_win.dll'.
168534f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\msvcp_win.dll' [rescheduled]
168634f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\combase.dll'.
168734f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\combase.dll' [rescheduled]
168834f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\winmmbase.dll'.
168934f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\winmmbase.dll' [rescheduled]
169034f0.3aa4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\kernel32.dll
169134f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'profapi.dll'...
169234f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'profapi.dll' -> '\Device\HarddiskVolume6\Windows\System32\profapi.dll' [rcNtRedir=0xc0150008]
169334f0.3aa4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\profapi.dll
169434f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
169534f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume6\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
169634f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
169734f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume6\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
169834f0.3aa4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\msvcp_win.dll [redoing WinVerifyTrust]
169934f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\msvcp_win.dll'.
170034f0.3aa4: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume6\Windows\System32\msvcp_win.dll
170134f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
170234f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume6\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
170334f0.3aa4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\combase.dll [redoing WinVerifyTrust]
170434f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\combase.dll'.
170534f0.3aa4: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume6\Windows\System32\combase.dll
170634f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
170734f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume6\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
170834f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
170934f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume6\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
171034f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
171134f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume6\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
171234f0.3aa4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\user32.dll [redoing WinVerifyTrust]
171334f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\user32.dll'.
171434f0.3aa4: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume6\Windows\System32\user32.dll
171534f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
171634f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume6\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
171734f0.3aa4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\gdi32.dll [redoing WinVerifyTrust]
171834f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\gdi32.dll'.
171934f0.3aa4: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume6\Windows\System32\gdi32.dll
172034f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
172134f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume6\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
172234f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'umpdc.dll'...
172334f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'umpdc.dll' -> '\Device\HarddiskVolume6\Windows\System32\umpdc.dll' [rcNtRedir=0xc0150008]
172434f0.3aa4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\umpdc.dll [redoing WinVerifyTrust]
172534f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\umpdc.dll'.
172634f0.3aa4: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume6\Windows\System32\umpdc.dll
172734f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
172834f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume6\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
172934f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
173034f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume6\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
173134f0.3aa4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\combase.dll [redoing WinVerifyTrust]
173234f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\combase.dll'.
173334f0.3aa4: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume6\Windows\System32\combase.dll
173434f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
173534f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume6\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
173634f0.3aa4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\rpcrt4.dll
173734f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
173834f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume6\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
173934f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
174034f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume6\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
174134f0.3aa4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\win32u.dll [redoing WinVerifyTrust]
174234f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\win32u.dll'.
174334f0.3aa4: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume6\Windows\System32\win32u.dll
174434f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
174534f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume6\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
174634f0.3aa4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\user32.dll [redoing WinVerifyTrust]
174734f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\user32.dll'.
174834f0.3aa4: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume6\Windows\System32\user32.dll
174934f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
175034f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume6\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
175134f0.3aa4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\gdi32.dll [redoing WinVerifyTrust]
175234f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\gdi32.dll'.
175334f0.3aa4: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume6\Windows\System32\gdi32.dll
175434f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
175534f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume6\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
175634f0.3aa4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\msvcp_win.dll [redoing WinVerifyTrust]
175734f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\msvcp_win.dll'.
175834f0.3aa4: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume6\Windows\System32\msvcp_win.dll
175934f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
176034f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume6\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
176134f0.3aa4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\win32u.dll [redoing WinVerifyTrust]
176234f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\win32u.dll'.
176334f0.3aa4: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume6\Windows\System32\win32u.dll
176434f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
176534f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume6\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
176634f0.3aa4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\msvcp_win.dll [redoing WinVerifyTrust]
176734f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\msvcp_win.dll'.
176834f0.3aa4: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume6\Windows\System32\msvcp_win.dll
176934f0.3aa4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\kernel32.dll (Input=kernel32, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
177034f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbe0790000 'C:\Windows\System32\kernel32.dll'
177134f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\windows.storage.dll'.
177234f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\windows.storage.dll' [rescheduled]
177334f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\kernel.appcore.dll'.
177434f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\kernel.appcore.dll' [rescheduled]
177534f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\shlwapi.dll'.
177634f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\shlwapi.dll' [rescheduled]
177734f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\powrprof.dll'.
177834f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\powrprof.dll' [rescheduled]
177934f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\umpdc.dll'.
178034f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\umpdc.dll' [rescheduled]
178134f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\SHCore.dll'.
178234f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\SHCore.dll' [rescheduled]
178334f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\cfgmgr32.dll'.
178434f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\cfgmgr32.dll' [rescheduled]
178534f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\gdi32full.dll'.
178634f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\gdi32full.dll' [rescheduled]
178734f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\DXCore.dll'.
178834f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\DXCore.dll' [rescheduled]
178934f0.3aa4: Detected loader lock ownership: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume6\Windows\System32\glu32.dll'.
179034f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 22900 (was 22900) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\glu32.dll' [rescheduled]
179134f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\mpr.dll'.
179234f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\mpr.dll' [rescheduled]
179334f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\shell32.dll'.
179434f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\shell32.dll' [rescheduled]
179534f0.3aa4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'.
179634f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll' [rescheduled]
179734f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\win32u.dll'.
179834f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\win32u.dll' [rescheduled]
179934f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\gdi32.dll'.
180034f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\gdi32.dll' [rescheduled]
180134f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\user32.dll'.
180234f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\user32.dll' [rescheduled]
180334f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\msvcp_win.dll'.
180434f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\msvcp_win.dll' [rescheduled]
180534f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\combase.dll'.
180634f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\combase.dll' [rescheduled]
180734f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\winmmbase.dll'.
180834f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\winmmbase.dll' [rescheduled]
180934f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\windows.storage.dll'.
181034f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\windows.storage.dll' [rescheduled]
181134f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\kernel.appcore.dll'.
181234f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\kernel.appcore.dll' [rescheduled]
181334f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\shlwapi.dll'.
181434f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\shlwapi.dll' [rescheduled]
181534f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\powrprof.dll'.
181634f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\powrprof.dll' [rescheduled]
181734f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\umpdc.dll'.
181834f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\umpdc.dll' [rescheduled]
181934f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\SHCore.dll'.
182034f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\SHCore.dll' [rescheduled]
182134f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\cfgmgr32.dll'.
182234f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\cfgmgr32.dll' [rescheduled]
182334f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\gdi32full.dll'.
182434f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\gdi32full.dll' [rescheduled]
182534f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\DXCore.dll'.
182634f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\DXCore.dll' [rescheduled]
182734f0.3aa4: Detected loader lock ownership: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume6\Windows\System32\glu32.dll'.
182834f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 22900 (was 22900) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\glu32.dll' [rescheduled]
182934f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\mpr.dll'.
183034f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\mpr.dll' [rescheduled]
183134f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\shell32.dll'.
183234f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\shell32.dll' [rescheduled]
183334f0.3aa4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'.
183434f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll' [rescheduled]
183534f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\win32u.dll'.
183634f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\win32u.dll' [rescheduled]
183734f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\gdi32.dll'.
183834f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\gdi32.dll' [rescheduled]
183934f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\user32.dll'.
184034f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\user32.dll' [rescheduled]
184134f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\msvcp_win.dll'.
184234f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\msvcp_win.dll' [rescheduled]
184334f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\combase.dll'.
184434f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\combase.dll' [rescheduled]
184534f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\winmmbase.dll'.
184634f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\winmmbase.dll' [rescheduled]
184734f0.3aa4: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-string-l1-1-0) -> 0x0, fPresent=1
184834f0.3aa4: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-string-l1-1-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
184934f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbdf4b0000 'api-ms-win-core-string-l1-1-0'
185034f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\windows.storage.dll'.
185134f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\windows.storage.dll' [rescheduled]
185234f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\kernel.appcore.dll'.
185334f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\kernel.appcore.dll' [rescheduled]
185434f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\shlwapi.dll'.
185534f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\shlwapi.dll' [rescheduled]
185634f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\powrprof.dll'.
185734f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\powrprof.dll' [rescheduled]
185834f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\umpdc.dll'.
185934f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\umpdc.dll' [rescheduled]
186034f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\SHCore.dll'.
186134f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\SHCore.dll' [rescheduled]
186234f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\cfgmgr32.dll'.
186334f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\cfgmgr32.dll' [rescheduled]
186434f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\gdi32full.dll'.
186534f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\gdi32full.dll' [rescheduled]
186634f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\DXCore.dll'.
186734f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\DXCore.dll' [rescheduled]
186834f0.3aa4: Detected loader lock ownership: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume6\Windows\System32\glu32.dll'.
186934f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 22900 (was 22900) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\glu32.dll' [rescheduled]
187034f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\mpr.dll'.
187134f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\mpr.dll' [rescheduled]
187234f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\shell32.dll'.
187334f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\shell32.dll' [rescheduled]
187434f0.3aa4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'.
187534f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll' [rescheduled]
187634f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\win32u.dll'.
187734f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\win32u.dll' [rescheduled]
187834f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\gdi32.dll'.
187934f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\gdi32.dll' [rescheduled]
188034f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\user32.dll'.
188134f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\user32.dll' [rescheduled]
188234f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\msvcp_win.dll'.
188334f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\msvcp_win.dll' [rescheduled]
188434f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\combase.dll'.
188534f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\combase.dll' [rescheduled]
188634f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\winmmbase.dll'.
188734f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\winmmbase.dll' [rescheduled]
188834f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\windows.storage.dll'.
188934f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\windows.storage.dll' [rescheduled]
189034f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\kernel.appcore.dll'.
189134f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\kernel.appcore.dll' [rescheduled]
189234f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\shlwapi.dll'.
189334f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\shlwapi.dll' [rescheduled]
189434f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\powrprof.dll'.
189534f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\powrprof.dll' [rescheduled]
189634f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\umpdc.dll'.
189734f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\umpdc.dll' [rescheduled]
189834f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\SHCore.dll'.
189934f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\SHCore.dll' [rescheduled]
190034f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\cfgmgr32.dll'.
190134f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\cfgmgr32.dll' [rescheduled]
190234f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\gdi32full.dll'.
190334f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\gdi32full.dll' [rescheduled]
190434f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\DXCore.dll'.
190534f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\DXCore.dll' [rescheduled]
190634f0.3aa4: Detected loader lock ownership: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume6\Windows\System32\glu32.dll'.
190734f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 22900 (was 22900) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\glu32.dll' [rescheduled]
190834f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\mpr.dll'.
190934f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\mpr.dll' [rescheduled]
191034f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\shell32.dll'.
191134f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\shell32.dll' [rescheduled]
191234f0.3aa4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'.
191334f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll' [rescheduled]
191434f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\win32u.dll'.
191534f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\win32u.dll' [rescheduled]
191634f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\gdi32.dll'.
191734f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\gdi32.dll' [rescheduled]
191834f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\user32.dll'.
191934f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\user32.dll' [rescheduled]
192034f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\msvcp_win.dll'.
192134f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\msvcp_win.dll' [rescheduled]
192234f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\combase.dll'.
192334f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\combase.dll' [rescheduled]
192434f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\winmmbase.dll'.
192534f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\winmmbase.dll' [rescheduled]
192634f0.3aa4: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-datetime-l1-1-1) -> 0x0, fPresent=1
192734f0.3aa4: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-datetime-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
192834f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbdf4b0000 'api-ms-win-core-datetime-l1-1-1'
192934f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\windows.storage.dll'.
193034f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\windows.storage.dll' [rescheduled]
193134f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\kernel.appcore.dll'.
193234f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\kernel.appcore.dll' [rescheduled]
193334f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\shlwapi.dll'.
193434f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\shlwapi.dll' [rescheduled]
193534f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\powrprof.dll'.
193634f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\powrprof.dll' [rescheduled]
193734f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\umpdc.dll'.
193834f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\umpdc.dll' [rescheduled]
193934f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\SHCore.dll'.
194034f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\SHCore.dll' [rescheduled]
194134f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\cfgmgr32.dll'.
194234f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\cfgmgr32.dll' [rescheduled]
194334f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\gdi32full.dll'.
194434f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\gdi32full.dll' [rescheduled]
194534f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\DXCore.dll'.
194634f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\DXCore.dll' [rescheduled]
194734f0.3aa4: Detected loader lock ownership: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume6\Windows\System32\glu32.dll'.
194834f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 22900 (was 22900) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\glu32.dll' [rescheduled]
194934f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\mpr.dll'.
195034f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\mpr.dll' [rescheduled]
195134f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\shell32.dll'.
195234f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\shell32.dll' [rescheduled]
195334f0.3aa4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'.
195434f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll' [rescheduled]
195534f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\win32u.dll'.
195634f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\win32u.dll' [rescheduled]
195734f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\gdi32.dll'.
195834f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\gdi32.dll' [rescheduled]
195934f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\user32.dll'.
196034f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\user32.dll' [rescheduled]
196134f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\msvcp_win.dll'.
196234f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\msvcp_win.dll' [rescheduled]
196334f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\combase.dll'.
196434f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\combase.dll' [rescheduled]
196534f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\winmmbase.dll'.
196634f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\winmmbase.dll' [rescheduled]
196734f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\windows.storage.dll'.
196834f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\windows.storage.dll' [rescheduled]
196934f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\kernel.appcore.dll'.
197034f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\kernel.appcore.dll' [rescheduled]
197134f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\shlwapi.dll'.
197234f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\shlwapi.dll' [rescheduled]
197334f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\powrprof.dll'.
197434f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\powrprof.dll' [rescheduled]
197534f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\umpdc.dll'.
197634f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\umpdc.dll' [rescheduled]
197734f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\SHCore.dll'.
197834f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\SHCore.dll' [rescheduled]
197934f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\cfgmgr32.dll'.
198034f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\cfgmgr32.dll' [rescheduled]
198134f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\gdi32full.dll'.
198234f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\gdi32full.dll' [rescheduled]
198334f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\DXCore.dll'.
198434f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\DXCore.dll' [rescheduled]
198534f0.3aa4: Detected loader lock ownership: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume6\Windows\System32\glu32.dll'.
198634f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 22900 (was 22900) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\glu32.dll' [rescheduled]
198734f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\mpr.dll'.
198834f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\mpr.dll' [rescheduled]
198934f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\shell32.dll'.
199034f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\shell32.dll' [rescheduled]
199134f0.3aa4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'.
199234f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll' [rescheduled]
199334f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\win32u.dll'.
199434f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\win32u.dll' [rescheduled]
199534f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\gdi32.dll'.
199634f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\gdi32.dll' [rescheduled]
199734f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\user32.dll'.
199834f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\user32.dll' [rescheduled]
199934f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\msvcp_win.dll'.
200034f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\msvcp_win.dll' [rescheduled]
200134f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\combase.dll'.
200234f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\combase.dll' [rescheduled]
200334f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\winmmbase.dll'.
200434f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\winmmbase.dll' [rescheduled]
200534f0.3aa4: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-localization-obsolete-l1-2-0) -> 0x0, fPresent=1
200634f0.3aa4: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-obsolete-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
200734f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbdf4b0000 'api-ms-win-core-localization-obsolete-l1-2-0'
200834f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\windows.storage.dll'.
200934f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\windows.storage.dll' [rescheduled]
201034f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\kernel.appcore.dll'.
201134f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\kernel.appcore.dll' [rescheduled]
201234f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\shlwapi.dll'.
201334f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\shlwapi.dll' [rescheduled]
201434f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\powrprof.dll'.
201534f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\powrprof.dll' [rescheduled]
201634f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\umpdc.dll'.
201734f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\umpdc.dll' [rescheduled]
201834f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\SHCore.dll'.
201934f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\SHCore.dll' [rescheduled]
202034f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\cfgmgr32.dll'.
202134f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\cfgmgr32.dll' [rescheduled]
202234f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\gdi32full.dll'.
202334f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\gdi32full.dll' [rescheduled]
202434f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\DXCore.dll'.
202534f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\DXCore.dll' [rescheduled]
202634f0.3aa4: Detected loader lock ownership: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume6\Windows\System32\glu32.dll'.
202734f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 22900 (was 22900) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\glu32.dll' [rescheduled]
202834f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\mpr.dll'.
202934f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\mpr.dll' [rescheduled]
203034f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\shell32.dll'.
203134f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\shell32.dll' [rescheduled]
203234f0.3aa4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'.
203334f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll' [rescheduled]
203434f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\win32u.dll'.
203534f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\win32u.dll' [rescheduled]
203634f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\gdi32.dll'.
203734f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\gdi32.dll' [rescheduled]
203834f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\user32.dll'.
203934f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\user32.dll' [rescheduled]
204034f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\msvcp_win.dll'.
204134f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\msvcp_win.dll' [rescheduled]
204234f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\combase.dll'.
204334f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\combase.dll' [rescheduled]
204434f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\winmmbase.dll'.
204534f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\winmmbase.dll' [rescheduled]
204634f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\windows.storage.dll'.
204734f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\windows.storage.dll' [rescheduled]
204834f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\kernel.appcore.dll'.
204934f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\kernel.appcore.dll' [rescheduled]
205034f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\shlwapi.dll'.
205134f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\shlwapi.dll' [rescheduled]
205234f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\powrprof.dll'.
205334f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\powrprof.dll' [rescheduled]
205434f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\umpdc.dll'.
205534f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\umpdc.dll' [rescheduled]
205634f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\SHCore.dll'.
205734f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\SHCore.dll' [rescheduled]
205834f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\cfgmgr32.dll'.
205934f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\cfgmgr32.dll' [rescheduled]
206034f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\gdi32full.dll'.
206134f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\gdi32full.dll' [rescheduled]
206234f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\DXCore.dll'.
206334f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\DXCore.dll' [rescheduled]
206434f0.3aa4: Detected loader lock ownership: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume6\Windows\System32\glu32.dll'.
206534f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 22900 (was 22900) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\glu32.dll' [rescheduled]
206634f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\mpr.dll'.
206734f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\mpr.dll' [rescheduled]
206834f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\shell32.dll'.
206934f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\shell32.dll' [rescheduled]
207034f0.3aa4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'.
207134f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll' [rescheduled]
207234f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\win32u.dll'.
207334f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\win32u.dll' [rescheduled]
207434f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\gdi32.dll'.
207534f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\gdi32.dll' [rescheduled]
207634f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\user32.dll'.
207734f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\user32.dll' [rescheduled]
207834f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\msvcp_win.dll'.
207934f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\msvcp_win.dll' [rescheduled]
208034f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\combase.dll'.
208134f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\combase.dll' [rescheduled]
208234f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\winmmbase.dll'.
208334f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\winmmbase.dll' [rescheduled]
208434f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\imm32.dll'.
208534f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'user32.dll'.
208634f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #25 'win32u.dll'.
208734f0.3aa4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume6\Windows\System32\imm32.dll)
208834f0.3aa4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume6\Windows\System32\imm32.dll
208934f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
209034f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume6\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
209134f0.3aa4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\win32u.dll [redoing WinVerifyTrust]
209234f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\win32u.dll'.
209334f0.3aa4: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume6\Windows\System32\win32u.dll
209434f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
209534f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume6\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
209634f0.3aa4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\user32.dll [redoing WinVerifyTrust]
209734f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\user32.dll'.
209834f0.3aa4: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume6\Windows\System32\user32.dll
209934f0.3aa4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\IMM32.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
210034f0.3aa4: supR3HardenedDllNotificationCallback: load 00007ffbe1a50000 LB 0x0002e000 C:\Windows\System32\IMM32.DLL [fFlags=0x0]
210134f0.3aa4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\imm32.dll [avoiding WinVerifyTrust]
210234f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbe1a50000 'C:\Windows\system32\IMM32.DLL'
210334f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\imm32.dll'.
210434f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\imm32.dll' [rescheduled]
210534f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\windows.storage.dll'.
210634f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\windows.storage.dll' [rescheduled]
210734f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\kernel.appcore.dll'.
210834f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\kernel.appcore.dll' [rescheduled]
210934f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\shlwapi.dll'.
211034f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\shlwapi.dll' [rescheduled]
211134f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\powrprof.dll'.
211234f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\powrprof.dll' [rescheduled]
211334f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\umpdc.dll'.
211434f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\umpdc.dll' [rescheduled]
211534f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\SHCore.dll'.
211634f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\SHCore.dll' [rescheduled]
211734f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\cfgmgr32.dll'.
211834f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\cfgmgr32.dll' [rescheduled]
211934f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\gdi32full.dll'.
212034f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\gdi32full.dll' [rescheduled]
212134f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\DXCore.dll'.
212234f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\DXCore.dll' [rescheduled]
212334f0.3aa4: Detected loader lock ownership: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume6\Windows\System32\glu32.dll'.
212434f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 22900 (was 22900) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\glu32.dll' [rescheduled]
212534f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\mpr.dll'.
212634f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\mpr.dll' [rescheduled]
212734f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\shell32.dll'.
212834f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\shell32.dll' [rescheduled]
212934f0.3aa4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'.
213034f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll' [rescheduled]
213134f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\win32u.dll'.
213234f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\win32u.dll' [rescheduled]
213334f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\gdi32.dll'.
213434f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\gdi32.dll' [rescheduled]
213534f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\user32.dll'.
213634f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\user32.dll' [rescheduled]
213734f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\msvcp_win.dll'.
213834f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\msvcp_win.dll' [rescheduled]
213934f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\combase.dll'.
214034f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\combase.dll' [rescheduled]
214134f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\winmmbase.dll'.
214234f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\winmmbase.dll' [rescheduled]
214334f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\imm32.dll'.
214434f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\imm32.dll' [rescheduled]
214534f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\windows.storage.dll'.
214634f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\windows.storage.dll' [rescheduled]
214734f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\kernel.appcore.dll'.
214834f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\kernel.appcore.dll' [rescheduled]
214934f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\shlwapi.dll'.
215034f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\shlwapi.dll' [rescheduled]
215134f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\powrprof.dll'.
215234f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\powrprof.dll' [rescheduled]
215334f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\umpdc.dll'.
215434f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\umpdc.dll' [rescheduled]
215534f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\SHCore.dll'.
215634f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\SHCore.dll' [rescheduled]
215734f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\cfgmgr32.dll'.
215834f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\cfgmgr32.dll' [rescheduled]
215934f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\gdi32full.dll'.
216034f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\gdi32full.dll' [rescheduled]
216134f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\DXCore.dll'.
216234f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\DXCore.dll' [rescheduled]
216334f0.3aa4: Detected loader lock ownership: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume6\Windows\System32\glu32.dll'.
216434f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 22900 (was 22900) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\glu32.dll' [rescheduled]
216534f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\mpr.dll'.
216634f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\mpr.dll' [rescheduled]
216734f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\shell32.dll'.
216834f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\shell32.dll' [rescheduled]
216934f0.3aa4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'.
217034f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll' [rescheduled]
217134f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\win32u.dll'.
217234f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\win32u.dll' [rescheduled]
217334f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\gdi32.dll'.
217434f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\gdi32.dll' [rescheduled]
217534f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\user32.dll'.
217634f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\user32.dll' [rescheduled]
217734f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\msvcp_win.dll'.
217834f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\msvcp_win.dll' [rescheduled]
217934f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\combase.dll'.
218034f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\combase.dll' [rescheduled]
218134f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\winmmbase.dll'.
218234f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\winmmbase.dll' [rescheduled]
218334f0.3aa4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\advapi32.dll
218434f0.3aa4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\ADVAPI32.DLL (Input=ADVAPI32.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
218534f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbe0b90000 'C:\Windows\System32\ADVAPI32.DLL'
218634f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\imm32.dll'.
218734f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\imm32.dll' [rescheduled]
218834f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\windows.storage.dll'.
218934f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\windows.storage.dll' [rescheduled]
219034f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\kernel.appcore.dll'.
219134f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\kernel.appcore.dll' [rescheduled]
219234f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\shlwapi.dll'.
219334f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\shlwapi.dll' [rescheduled]
219434f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\powrprof.dll'.
219534f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\powrprof.dll' [rescheduled]
219634f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\umpdc.dll'.
219734f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\umpdc.dll' [rescheduled]
219834f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\SHCore.dll'.
219934f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\SHCore.dll' [rescheduled]
220034f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\cfgmgr32.dll'.
220134f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\cfgmgr32.dll' [rescheduled]
220234f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\gdi32full.dll'.
220334f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\gdi32full.dll' [rescheduled]
220434f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\DXCore.dll'.
220534f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\DXCore.dll' [rescheduled]
220634f0.3aa4: Detected loader lock ownership: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume6\Windows\System32\glu32.dll'.
220734f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 22900 (was 22900) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\glu32.dll' [rescheduled]
220834f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\mpr.dll'.
220934f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\mpr.dll' [rescheduled]
221034f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\shell32.dll'.
221134f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\shell32.dll' [rescheduled]
221234f0.3aa4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'.
221334f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll' [rescheduled]
221434f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\win32u.dll'.
221534f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\win32u.dll' [rescheduled]
221634f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\gdi32.dll'.
221734f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\gdi32.dll' [rescheduled]
221834f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\user32.dll'.
221934f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\user32.dll' [rescheduled]
222034f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\msvcp_win.dll'.
222134f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\msvcp_win.dll' [rescheduled]
222234f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\combase.dll'.
222334f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\combase.dll' [rescheduled]
222434f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\winmmbase.dll'.
222534f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\winmmbase.dll' [rescheduled]
222634f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbb1310000 'C:\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll'
222734f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbddd10000 'C:\Windows\system32\rsaenh.dll'
222834f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbdf760000 'C:\Windows\System32\crypt32.dll'
222934f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume6\Windows\System32\imm32.dll'
223034f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbddd10000 'C:\Windows\system32\rsaenh.dll'
223134f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbdf760000 'C:\Windows\System32\crypt32.dll'
223234f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume6\Windows\System32\windows.storage.dll'
223334f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbddd10000 'C:\Windows\system32\rsaenh.dll'
223434f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbdf760000 'C:\Windows\System32\crypt32.dll'
223534f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume6\Windows\System32\kernel.appcore.dll'
223634f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbddd10000 'C:\Windows\system32\rsaenh.dll'
223734f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbdf760000 'C:\Windows\System32\crypt32.dll'
223834f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume6\Windows\System32\shlwapi.dll'
223934f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbddd10000 'C:\Windows\system32\rsaenh.dll'
224034f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbdf760000 'C:\Windows\System32\crypt32.dll'
224134f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume6\Windows\System32\powrprof.dll'
224234f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbddd10000 'C:\Windows\system32\rsaenh.dll'
224334f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbdf760000 'C:\Windows\System32\crypt32.dll'
224434f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume6\Windows\System32\umpdc.dll'
224534f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbddd10000 'C:\Windows\system32\rsaenh.dll'
224634f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbdf760000 'C:\Windows\System32\crypt32.dll'
224734f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume6\Windows\System32\SHCore.dll'
224834f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbddd10000 'C:\Windows\system32\rsaenh.dll'
224934f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbdf760000 'C:\Windows\System32\crypt32.dll'
225034f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume6\Windows\System32\cfgmgr32.dll'
225134f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbddd10000 'C:\Windows\system32\rsaenh.dll'
225234f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbdf760000 'C:\Windows\System32\crypt32.dll'
225334f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume6\Windows\System32\gdi32full.dll'
225434f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbddd10000 'C:\Windows\system32\rsaenh.dll'
225534f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbdf760000 'C:\Windows\System32\crypt32.dll'
225634f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume6\Windows\System32\DXCore.dll'
225734f0.3aa4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000490 pwszName=\Device\HarddiskVolume6\Windows\System32\glu32.dll
225834f0.3aa4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 000000000181c280
225934f0.3aa4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=000000000181c280
226034f0.3aa4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=F356C86D0A2DBA0570D09B39D4AF818DFCB17010
226134f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbddd10000 'C:\Windows\system32\rsaenh.dll'
226234f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbdf760000 'C:\Windows\System32\crypt32.dll'
226334f0.3aa4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0212~31bf3856ad364e35~amd64~~10.0.18362.628.cat'; file='\Device\HarddiskVolume6\Windows\System32\glu32.dll'
226434f0.3aa4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
226534f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume6\Windows\System32\glu32.dll'
226634f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbddd10000 'C:\Windows\system32\rsaenh.dll'
226734f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbdf760000 'C:\Windows\System32\crypt32.dll'
226834f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume6\Windows\System32\mpr.dll'
226934f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbddd10000 'C:\Windows\system32\rsaenh.dll'
227034f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbdf760000 'C:\Windows\System32\crypt32.dll'
227134f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume6\Windows\System32\shell32.dll'
227234f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbddd10000 'C:\Windows\system32\rsaenh.dll'
227334f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 24202) fWinVerifyTrust=1 for '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'
227434f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbddd10000 'C:\Windows\system32\rsaenh.dll'
227534f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbdf760000 'C:\Windows\System32\crypt32.dll'
227634f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume6\Windows\System32\win32u.dll'
227734f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbddd10000 'C:\Windows\system32\rsaenh.dll'
227834f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbdf760000 'C:\Windows\System32\crypt32.dll'
227934f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume6\Windows\System32\gdi32.dll'
228034f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbddd10000 'C:\Windows\system32\rsaenh.dll'
228134f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbdf760000 'C:\Windows\System32\crypt32.dll'
228234f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume6\Windows\System32\user32.dll'
228334f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbddd10000 'C:\Windows\system32\rsaenh.dll'
228434f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbdf760000 'C:\Windows\System32\crypt32.dll'
228534f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume6\Windows\System32\msvcp_win.dll'
228634f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbddd10000 'C:\Windows\system32\rsaenh.dll'
228734f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbdf760000 'C:\Windows\System32\crypt32.dll'
228834f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume6\Windows\System32\combase.dll'
228934f0.3aa4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\rsaenh.dll
229034f0.3aa4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
229134f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbddd10000 'C:\Windows\system32\rsaenh.dll'
229234f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbdf760000 'C:\Windows\System32\crypt32.dll'
229334f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume6\Windows\System32\winmmbase.dll'
229434f0.3aa4: SUPR3HardenedMain: Calling TrustedMain (00007ffbb13116c0)...
229534f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbddd10000 'C:\Windows\system32\rsaenh.dll'
229634f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'gdi32.dll'.
229734f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'ole32.dll'.
229834f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'user32.dll'.
229934f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'imm32.dll'.
230034f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'winmm.dll'.
230134f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'oleaut32.dll'.
230234f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'shell32.dll'.
230334f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'advapi32.dll'.
230434f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'qt5guivbox.dll'.
230534f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'qt5corevbox.dll'.
230634f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'msvcr100.dll'.
230734f0.3aa4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\platforms\qwindows.dll) WinVerifyTrust
230834f0.3aa4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\platforms\qwindows.dll
230934f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
231034f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
231134f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
231234f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
231334f0.3aa4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll
231434f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
231534f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
231634f0.3aa4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll
231734f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
231834f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume6\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
231934f0.3aa4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\advapi32.dll
232034f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
232134f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume6\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
232234f0.3aa4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\shell32.dll
232334f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
232434f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume6\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
232534f0.3aa4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\oleaut32.dll
232634f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
232734f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume6\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008]
232834f0.3aa4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\winmm.dll
232934f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'imm32.dll'...
233034f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'imm32.dll' -> '\Device\HarddiskVolume6\Windows\System32\imm32.dll' [rcNtRedir=0xc0150008]
233134f0.3aa4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\imm32.dll
233234f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
233334f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume6\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
233434f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
233534f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume6\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
233634f0.3aa4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\ole32.dll
233734f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
233834f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume6\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
233934f0.3aa4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\platforms\qwindows.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
234034f0.3aa4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\platforms\qwindows.dll
234134f0.3aa4: supR3HardenedDllNotificationCallback: load 00007ffbd0060000 LB 0x0012e000 C:\Program Files\Oracle\VirtualBox\platforms\qwindows.dll [fFlags=0x0]
234234f0.3aa4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\platforms\qwindows.dll
234334f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbd0060000 'C:\Program Files\Oracle\VirtualBox\platforms\qwindows.dll'
234434f0.3aa4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000648 pwszName=\Device\HarddiskVolume6\Windows\System32\uxtheme.dll
234534f0.3aa4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 000000000181c280
234634f0.3aa4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=000000000181c280
234734f0.3aa4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=286AD1CEC16EFDCA5718925D19E68A486A5851A0
234834f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbddd10000 'C:\Windows\system32\rsaenh.dll'
234934f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbdf760000 'C:\Windows\System32\crypt32.dll'
235034f0.3aa4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.18362.535.cat'; file='\Device\HarddiskVolume6\Windows\System32\uxtheme.dll'
235134f0.3aa4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
235234f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
235334f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #33 'gdi32.dll'.
235434f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #34 'user32.dll'.
235534f0.3aa4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume6\Windows\System32\uxtheme.dll) WinVerifyTrust
235634f0.3aa4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume6\Windows\System32\uxtheme.dll
235734f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
235834f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume6\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
235934f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
236034f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume6\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
236134f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
236234f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume6\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
236334f0.3aa4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\uxtheme.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
236434f0.3aa4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\uxtheme.dll
236534f0.3aa4: supR3HardenedDllNotificationCallback: load 00007ffbdcd10000 LB 0x00099000 C:\Windows\system32\uxtheme.dll [fFlags=0x0]
236634f0.3aa4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\uxtheme.dll
236734f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbdcd10000 'C:\Windows\system32\uxtheme.dll'
236834f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbe09f0000 'C:\Windows\system32\user32.dll'
236934f0.3aa4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\shell32.dll
237034f0.3aa4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
237134f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbe0cf0000 'C:\Windows\system32\shell32.dll'
237234f0.3aa4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\SHCore.dll
237334f0.3aa4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\SHCore.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
237434f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbe13e0000 'C:\Windows\system32\SHCore.dll'
237534f0.3aa4: supR3HardenedMonitor_LdrLoadDll: error opening 'C:\Windows\system32\wintab32.dll': 0 (NtPath=\??\C:\Windows\system32\wintab32.dll; Input=C:\Windows\system32\wintab32.dll; rcNtGetDll=0x0
237634f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0xc0000034 'C:\Windows\system32\wintab32.dll'
237734f0.3aa4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\winmm.dll
237834f0.3aa4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\winmm.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
237934f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbdc820000 'C:\Windows\system32\winmm.dll'
238034f0.3aa4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\winmm.dll
238134f0.3aa4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\winmm.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
238234f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbdc820000 'C:\Windows\system32\winmm.dll'
238334f0.3aa4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\shell32.dll
238434f0.3aa4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
238534f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbe0cf0000 'C:\Windows\system32\shell32.dll'
238634f0.3aa4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\uxtheme.dll
238734f0.3aa4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\uxtheme.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
238834f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbdcd10000 'C:\Windows\system32\uxtheme.dll'
238934f0.3aa4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\advapi32.dll
239034f0.3aa4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\advapi32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
239134f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbe0b90000 'C:\Windows\system32\advapi32.dll'
239234f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbddd10000 'C:\Windows\system32\rsaenh.dll'
239334f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbdf760000 'C:\Windows\System32\crypt32.dll'
239434f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #13 'rpcrt4.dll'.
239534f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #30 'profapi.dll'.
239634f0.3aa4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume6\Windows\System32\userenv.dll) WinVerifyTrust
239734f0.3aa4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume6\Windows\System32\userenv.dll
239834f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'profapi.dll'...
239934f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'profapi.dll' -> '\Device\HarddiskVolume6\Windows\System32\profapi.dll' [rcNtRedir=0xc0150008]
240034f0.3aa4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\profapi.dll
240134f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
240234f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume6\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
240334f0.3aa4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\userenv.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
240434f0.3aa4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\userenv.dll
240534f0.3aa4: supR3HardenedDllNotificationCallback: load 00007ffbde8b0000 LB 0x00025000 C:\Windows\system32\userenv.dll [fFlags=0x0]
240634f0.3aa4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\userenv.dll
240734f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbde8b0000 'C:\Windows\system32\userenv.dll'
240834f0.3aa4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\kernel32.dll
240934f0.3aa4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\kernel32.dll (Input=kernel32, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
241034f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbe0790000 'C:\Windows\System32\kernel32.dll'
241134f0.3aa4: supR3HardenedDllNotificationCallback: load 00007ffbe0c40000 LB 0x000a2000 C:\Windows\System32\clbcatq.dll [fFlags=0x0]
241234f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
241334f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #30 'rpcrt4.dll'.
241434f0.3aa4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume6\Windows\System32\clbcatq.dll)
241534f0.3aa4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume6\Windows\System32\clbcatq.dll
241634f0.1f1c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
241734f0.1f1c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume6\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
241834f0.1f1c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
241934f0.1f1c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume6\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
242034f0.1f1c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbddd10000 'C:\Windows\system32\rsaenh.dll'
242134f0.1f1c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbdf760000 'C:\Windows\System32\crypt32.dll'
242234f0.1f1c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume6\Windows\System32\clbcatq.dll'
242334f0.1f1c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbddd10000 'C:\Windows\system32\rsaenh.dll'
242434f0.1f1c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
242534f0.1f1c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp100.dll'.
242634f0.1f1c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxrt.dll'.
242734f0.1f1c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'advapi32.dll'.
242834f0.1f1c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'ole32.dll'.
242934f0.1f1c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'oleaut32.dll'.
243034f0.1f1c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\VBoxC.dll) WinVerifyTrust
243134f0.1f1c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\VBoxC.dll
243234f0.1f1c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
243334f0.1f1c: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume6\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
243434f0.1f1c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\oleaut32.dll
243534f0.1f1c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
243634f0.1f1c: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume6\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
243734f0.1f1c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\ole32.dll
243834f0.1f1c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
243934f0.1f1c: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume6\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
244034f0.1f1c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\advapi32.dll
244134f0.1f1c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
244234f0.1f1c: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
244334f0.1f1c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
244434f0.1f1c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
244534f0.1f1c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcp100.dll
244634f0.1f1c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
244734f0.1f1c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
244834f0.1f1c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxC.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
244934f0.1f1c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\VBoxC.dll
245034f0.1f1c: supR3HardenedDllNotificationCallback: load 00007ffba2d40000 LB 0x003b0000 C:\Program Files\Oracle\VirtualBox\VBoxC.dll [fFlags=0x0]
245134f0.1f1c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\VBoxC.dll
245234f0.1f1c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffba2d40000 'C:\Program Files\Oracle\VirtualBox\VBoxC.dll'
245334f0.1f1c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbddd10000 'C:\Windows\system32\rsaenh.dll'
245434f0.1f1c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
245534f0.1f1c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
245634f0.1f1c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'advapi32.dll'.
245734f0.1f1c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'shlwapi.dll'.
245834f0.1f1c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'ole32.dll'.
245934f0.1f1c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'oleaut32.dll'.
246034f0.1f1c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'rpcrt4.dll'.
246134f0.1f1c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\VBoxProxyStub.dll) WinVerifyTrust
246234f0.1f1c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\VBoxProxyStub.dll
246334f0.1f1c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
246434f0.1f1c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume6\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
246534f0.1f1c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
246634f0.1f1c: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume6\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
246734f0.1f1c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\oleaut32.dll
246834f0.1f1c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
246934f0.1f1c: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume6\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
247034f0.1f1c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\ole32.dll
247134f0.1f1c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shlwapi.dll'...
247234f0.1f1c: supR3HardenedWinVerifyCacheProcessImportTodos: 'shlwapi.dll' -> '\Device\HarddiskVolume6\Windows\System32\shlwapi.dll' [rcNtRedir=0xc0150008]
247334f0.1f1c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\shlwapi.dll
247434f0.1f1c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
247534f0.1f1c: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume6\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
247634f0.1f1c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\advapi32.dll
247734f0.1f1c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
247834f0.1f1c: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
247934f0.1f1c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
248034f0.1f1c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
248134f0.1f1c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxProxyStub.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
248234f0.1f1c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\VBoxProxyStub.dll
248334f0.1f1c: supR3HardenedDllNotificationCallback: load 00007ffbc47b0000 LB 0x000ed000 C:\Program Files\Oracle\VirtualBox\VBoxProxyStub.dll [fFlags=0x0]
248434f0.1f1c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\VBoxProxyStub.dll
248534f0.1f1c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbc47b0000 'C:\Program Files\Oracle\VirtualBox\VBoxProxyStub.dll'
248634f0.1f1c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\oleaut32.dll
248734f0.1f1c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\oleaut32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
248834f0.1f1c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbe01b0000 'C:\Windows\System32\oleaut32.dll'
248934f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbdfc40000 'C:\Windows\system32\gdi32.dll'
249034f0.3790: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbddd10000 'C:\Windows\system32\rsaenh.dll'
249134f0.3790: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbddd10000 'C:\Windows\system32\rsaenh.dll'
249234f0.3790: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbddd10000 'C:\Windows\system32\rsaenh.dll'
249334f0.3790: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
249434f0.3790: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
249534f0.3790: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxPuelMainVM.dll) WinVerifyTrust
249634f0.3790: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxPuelMainVM.dll
249734f0.3790: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
249834f0.3790: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
249934f0.3790: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
250034f0.3790: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
250134f0.3790: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxPuelMainVM.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
250234f0.3790: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxPuelMainVM.dll
250334f0.3790: supR3HardenedDllNotificationCallback: load 00007ffbdb320000 LB 0x0000e000 C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxPuelMainVM.DLL [fFlags=0x0]
250434f0.3790: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxPuelMainVM.dll
250534f0.3790: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbdb320000 'C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxPuelMainVM.DLL'
250634f0.3aa4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\shell32.dll
250734f0.3aa4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
250834f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbe0cf0000 'C:\Windows\system32\shell32.dll'
250934f0.3aa4: supR3HardenedDllNotificationCallback: load 00007ffbdfce0000 LB 0x00135000 C:\Windows\System32\MSCTF.dll [fFlags=0x0]
251034f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
251134f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'oleaut32.dll'.
251234f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #38 'user32.dll'.
251334f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #39 'gdi32.dll'.
251434f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #40 'imm32.dll'.
251534f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #41 'advapi32.dll'.
251634f0.3aa4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume6\Windows\System32\msctf.dll)
251734f0.3aa4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume6\Windows\System32\msctf.dll
251834f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
251934f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume6\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
252034f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'imm32.dll'...
252134f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'imm32.dll' -> '\Device\HarddiskVolume6\Windows\System32\imm32.dll' [rcNtRedir=0xc0150008]
252234f0.3aa4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\imm32.dll
252334f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
252434f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume6\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
252534f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
252634f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume6\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
252734f0.3aa4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\user32.dll
252834f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
252934f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume6\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
253034f0.3aa4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\oleaut32.dll
253134f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
253234f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume6\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
253334f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbddd10000 'C:\Windows\system32\rsaenh.dll'
253434f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbdf760000 'C:\Windows\System32\crypt32.dll'
253534f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume6\Windows\System32\msctf.dll'
253634f0.3aa4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000970 pwszName=\Device\HarddiskVolume6\Windows\System32\DataExchange.dll
253734f0.3aa4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 000000000181c280
253834f0.3aa4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=000000000181c280
253934f0.3aa4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=3632E0380EF7C400BBC7C4B0B9ED8D9F9860503B
254034f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbddd10000 'C:\Windows\system32\rsaenh.dll'
254134f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbdf760000 'C:\Windows\System32\crypt32.dll'
254234f0.3aa4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.18362.535.cat'; file='\Device\HarddiskVolume6\Windows\System32\DataExchange.dll'
254334f0.3aa4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
254434f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
254534f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'shcore.dll'.
254634f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #29 'combase.dll'.
254734f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #34 'd3d11.dll'.
254834f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #35 'dcomp.dll'.
254934f0.3aa4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume6\Windows\System32\DataExchange.dll) WinVerifyTrust
255034f0.3aa4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume6\Windows\System32\DataExchange.dll
255134f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'dcomp.dll'...
255234f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'dcomp.dll' -> '\Device\HarddiskVolume6\Windows\System32\dcomp.dll' [rcNtRedir=0xc0150008]
255334f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbddd10000 'C:\Windows\system32\rsaenh.dll'
255434f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbdf760000 'C:\Windows\System32\crypt32.dll'
255534f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'win32u.dll'.
255634f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp_win.dll'.
255734f0.3aa4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume6\Windows\System32\dcomp.dll) WinVerifyTrust
255834f0.3aa4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume6\Windows\System32\dcomp.dll
255934f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'd3d11.dll'...
256034f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'd3d11.dll' -> '\Device\HarddiskVolume6\Windows\System32\d3d11.dll' [rcNtRedir=0xc0150008]
256134f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
256234f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume6\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
256334f0.3aa4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\msvcp_win.dll
256434f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
256534f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume6\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
256634f0.3aa4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\win32u.dll
256734f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbddd10000 'C:\Windows\system32\rsaenh.dll'
256834f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbdf760000 'C:\Windows\System32\crypt32.dll'
256934f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
257034f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #24 'dxgi.dll'.
257134f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #27 'win32u.dll'.
257234f0.3aa4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume6\Windows\System32\d3d11.dll) WinVerifyTrust
257334f0.3aa4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume6\Windows\System32\d3d11.dll
257434f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
257534f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume6\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
257634f0.3aa4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\combase.dll
257734f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shcore.dll'...
257834f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'shcore.dll' -> '\Device\HarddiskVolume6\Windows\System32\shcore.dll' [rcNtRedir=0xc0150008]
257934f0.3aa4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\SHCore.dll
258034f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
258134f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume6\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
258234f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
258334f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume6\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
258434f0.3aa4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\win32u.dll
258534f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'dxgi.dll'...
258634f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'dxgi.dll' -> '\Device\HarddiskVolume6\Windows\System32\dxgi.dll' [rcNtRedir=0xc0150008]
258734f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbddd10000 'C:\Windows\system32\rsaenh.dll'
258834f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbdf760000 'C:\Windows\System32\crypt32.dll'
258934f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
259034f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'win32u.dll'.
259134f0.3aa4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume6\Windows\System32\dxgi.dll) WinVerifyTrust
259234f0.3aa4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume6\Windows\System32\dxgi.dll
259334f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
259434f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume6\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
259534f0.3aa4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\msvcrt.dll
259634f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
259734f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume6\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
259834f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
259934f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume6\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
260034f0.3aa4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\dataexchange.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
260134f0.3aa4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\DataExchange.dll
260234f0.3aa4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\d3d11.dll
260334f0.3aa4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\dcomp.dll
260434f0.3aa4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\dxgi.dll
260534f0.3aa4: supR3HardenedDllNotificationCallback: load 00007ffbdd760000 LB 0x000eb000 C:\Windows\system32\dxgi.dll [fFlags=0x0]
260634f0.3aa4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\dxgi.dll
260734f0.3aa4: supR3HardenedDllNotificationCallback: load 00007ffbdc040000 LB 0x0025b000 C:\Windows\system32\d3d11.dll [fFlags=0x0]
260834f0.3aa4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\d3d11.dll
260934f0.3aa4: supR3HardenedDllNotificationCallback: load 00007ffbdc2a0000 LB 0x001db000 C:\Windows\system32\dcomp.dll [fFlags=0x0]
261034f0.3aa4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\dcomp.dll
261134f0.3aa4: supR3HardenedDllNotificationCallback: load 00007ffbc6890000 LB 0x0003a000 C:\Windows\system32\dataexchange.dll [fFlags=0x0]
261234f0.3aa4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\DataExchange.dll
261334f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbdfc40000 'C:\Windows\System32\gdi32.dll'
261434f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbc6890000 'C:\Windows\system32\dataexchange.dll'
261534f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'rmclient.dll'.
261634f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #31 'rpcrt4.dll'.
261734f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #47 'combase.dll'.
261834f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #50 'msvcp_win.dll'.
261934f0.3aa4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume6\Windows\System32\twinapi.appcore.dll)
262034f0.3aa4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume6\Windows\System32\twinapi.appcore.dll
262134f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
262234f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'rpcrt4.dll'.
262334f0.3aa4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume6\Windows\System32\rmclient.dll)
262434f0.3aa4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume6\Windows\System32\rmclient.dll
262534f0.3aa4: supR3HardenedDllNotificationCallback: load 00007ffbdd160000 LB 0x00029000 C:\Windows\system32\RMCLIENT.dll [fFlags=0x0]
262634f0.3aa4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\rmclient.dll [avoiding WinVerifyTrust]
262734f0.3aa4: supR3HardenedDllNotificationCallback: load 00007ffbdcde0000 LB 0x0025a000 C:\Windows\system32\twinapi.appcore.dll [fFlags=0x0]
262834f0.3aa4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\twinapi.appcore.dll [avoiding WinVerifyTrust]
262934f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
263034f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume6\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
263134f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
263234f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume6\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
263334f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
263434f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume6\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
263534f0.3aa4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\msvcp_win.dll
263634f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
263734f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume6\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
263834f0.3aa4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\combase.dll
263934f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
264034f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume6\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
264134f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rmclient.dll'...
264234f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rmclient.dll' -> '\Device\HarddiskVolume6\Windows\System32\rmclient.dll' [rcNtRedir=0xc0150008]
264334f0.3aa4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\rmclient.dll [lacks WinVerifyTrust]
264434f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbddd10000 'C:\Windows\system32\rsaenh.dll'
264534f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbdf760000 'C:\Windows\System32\crypt32.dll'
264634f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume6\Windows\System32\rmclient.dll'
264734f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbddd10000 'C:\Windows\system32\rsaenh.dll'
264834f0.3aa4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\crypt32.dll
264934f0.3aa4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\crypt32.dll (Input=crypt32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
265034f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbdf760000 'C:\Windows\System32\crypt32.dll'
265134f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume6\Windows\System32\twinapi.appcore.dll'
265234f0.3aa4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\SHCore.dll
265334f0.3aa4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\Shcore.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
265434f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbe13e0000 'C:\Windows\system32\Shcore.dll'
265534f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
265634f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #15 'rpcrt4.dll'.
265734f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #19 'coreuicomponents.dll'.
265834f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #20 'coremessaging.dll'.
265934f0.3aa4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume6\Windows\System32\TextInputFramework.dll)
266034f0.3aa4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume6\Windows\System32\TextInputFramework.dll
266134f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
266234f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #35 'coremessaging.dll'.
266334f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #47 'shcore.dll'.
266434f0.3aa4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume6\Windows\System32\CoreUIComponents.dll)
266534f0.3aa4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume6\Windows\System32\CoreUIComponents.dll
266634f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
266734f0.3aa4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume6\Windows\System32\CoreMessaging.dll)
266834f0.3aa4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume6\Windows\System32\CoreMessaging.dll
266934f0.3aa4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume6\Windows\System32\ntmarta.dll)
267034f0.3aa4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume6\Windows\System32\ntmarta.dll
267134f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'combase.dll'.
267234f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #24 'rpcrt4.dll'.
267334f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #32 'bcryptprimitives.dll'.
267434f0.3aa4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume6\Windows\System32\WinTypes.dll)
267534f0.3aa4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume6\Windows\System32\WinTypes.dll
267634f0.3aa4: supR3HardenedDllNotificationCallback: load 00007ffbdd9f0000 LB 0x00031000 C:\Windows\SYSTEM32\ntmarta.dll [fFlags=0x0]
267734f0.3aa4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\ntmarta.dll [avoiding WinVerifyTrust]
267834f0.3aa4: supR3HardenedDllNotificationCallback: load 00007ffbdc850000 LB 0x000d4000 C:\Windows\System32\CoreMessaging.dll [fFlags=0x0]
267934f0.3aa4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\CoreMessaging.dll [avoiding WinVerifyTrust]
268034f0.3aa4: supR3HardenedDllNotificationCallback: load 00007ffbda560000 LB 0x00153000 C:\Windows\SYSTEM32\wintypes.dll [fFlags=0x0]
268134f0.3aa4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\WinTypes.dll [avoiding WinVerifyTrust]
268234f0.3aa4: supR3HardenedDllNotificationCallback: load 00007ffbd4e80000 LB 0x0032a000 C:\Windows\System32\CoreUIComponents.dll [fFlags=0x0]
268334f0.3aa4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\CoreUIComponents.dll [avoiding WinVerifyTrust]
268434f0.3aa4: supR3HardenedDllNotificationCallback: load 00007ffbcd0c0000 LB 0x0009e000 C:\Windows\System32\TextInputFramework.dll [fFlags=0x0]
268534f0.3aa4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\TextInputFramework.dll [avoiding WinVerifyTrust]
268634f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcryptprimitives.dll'...
268734f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcryptprimitives.dll' -> '\Device\HarddiskVolume6\Windows\System32\bcryptprimitives.dll' [rcNtRedir=0xc0150008]
268834f0.3aa4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\bcryptprimitives.dll
268934f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
269034f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume6\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
269134f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
269234f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume6\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
269334f0.3aa4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\combase.dll
269434f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
269534f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume6\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
269634f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shcore.dll'...
269734f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'shcore.dll' -> '\Device\HarddiskVolume6\Windows\System32\shcore.dll' [rcNtRedir=0xc0150008]
269834f0.3aa4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\SHCore.dll
269934f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'coremessaging.dll'...
270034f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'coremessaging.dll' -> '\Device\HarddiskVolume6\Windows\System32\coremessaging.dll' [rcNtRedir=0xc0150008]
270134f0.3aa4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\CoreMessaging.dll [lacks WinVerifyTrust]
270234f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
270334f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume6\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
270434f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'coremessaging.dll'...
270534f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'coremessaging.dll' -> '\Device\HarddiskVolume6\Windows\System32\coremessaging.dll' [rcNtRedir=0xc0150008]
270634f0.3aa4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\CoreMessaging.dll [lacks WinVerifyTrust]
270734f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'coreuicomponents.dll'...
270834f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'coreuicomponents.dll' -> '\Device\HarddiskVolume6\Windows\System32\coreuicomponents.dll' [rcNtRedir=0xc0150008]
270934f0.3aa4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\CoreUIComponents.dll [lacks WinVerifyTrust]
271034f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
271134f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume6\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
271234f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
271334f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume6\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
271434f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbddd10000 'C:\Windows\system32\rsaenh.dll'
271534f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbdf760000 'C:\Windows\System32\crypt32.dll'
271634f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume6\Windows\System32\WinTypes.dll'
271734f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbddd10000 'C:\Windows\system32\rsaenh.dll'
271834f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbdf760000 'C:\Windows\System32\crypt32.dll'
271934f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume6\Windows\System32\ntmarta.dll'
272034f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbddd10000 'C:\Windows\system32\rsaenh.dll'
272134f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbdf760000 'C:\Windows\System32\crypt32.dll'
272234f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume6\Windows\System32\CoreMessaging.dll'
272334f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbddd10000 'C:\Windows\system32\rsaenh.dll'
272434f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbdf760000 'C:\Windows\System32\crypt32.dll'
272534f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume6\Windows\System32\CoreUIComponents.dll'
272634f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbddd10000 'C:\Windows\system32\rsaenh.dll'
272734f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbdf760000 'C:\Windows\System32\crypt32.dll'
272834f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume6\Windows\System32\TextInputFramework.dll'
272934f0.3aa4: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(ext-ms-win-rtcore-ntuser-window-ext-l1-1-0.dll) -> 0x0, fPresent=1
273034f0.3aa4: supR3HardenedMonitor_LdrLoadDll: pName=ext-ms-win-rtcore-ntuser-window-ext-l1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
273134f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbe09f0000 'ext-ms-win-rtcore-ntuser-window-ext-l1-1-0.dll'
273234f0.3aa4: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(ext-ms-win-rtcore-ntuser-integration-l1-1-0.dll) -> 0x0, fPresent=1
273334f0.3aa4: supR3HardenedMonitor_LdrLoadDll: pName=ext-ms-win-rtcore-ntuser-integration-l1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
273434f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbe09f0000 'ext-ms-win-rtcore-ntuser-integration-l1-1-0.dll'
273534f0.3aa4: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-com-l1-1-0.dll) -> 0x0, fPresent=1
273634f0.3aa4: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-com-l1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
273734f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbe1710000 'api-ms-win-core-com-l1-1-0.dll'
273834f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
273934f0.3aa4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume6\Windows\System32\iertutil.dll)
274034f0.3aa4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume6\Windows\System32\iertutil.dll
274134f0.3aa4: supR3HardenedDllNotificationCallback: load 00007ffbd5950000 LB 0x002a6000 C:\Windows\System32\iertutil.dll [fFlags=0x0]
274234f0.3aa4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\iertutil.dll [avoiding WinVerifyTrust]
274334f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
274434f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume6\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
274534f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbddd10000 'C:\Windows\system32\rsaenh.dll'
274634f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbdf760000 'C:\Windows\System32\crypt32.dll'
274734f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume6\Windows\System32\iertutil.dll'
274834f0.3aa4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\msctf.dll
274934f0.3aa4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\MSCTF.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
275034f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbdfce0000 'C:\Windows\System32\MSCTF.dll'
275134f0.3aa4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\shell32.dll
275234f0.3aa4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
275334f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbe0cf0000 'C:\Windows\system32\shell32.dll'
275434f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbe0cf0000 'C:\Windows\system32\shell32.dll'
275534f0.3aa4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\ole32.dll
275634f0.3aa4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\ole32.dll (Input=ole32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
275734f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbe1490000 'C:\Windows\System32\ole32.dll'
275834f0.3aa4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\oleaut32.dll
275934f0.3aa4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\OLEAUT32.dll (Input=OLEAUT32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
276034f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbe01b0000 'C:\Windows\System32\OLEAUT32.dll'
276134f0.3aa4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000a8c pwszName=\Device\HarddiskVolume6\Windows\System32\wbem\wbemprox.dll
276234f0.3aa4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 000000000181c280
276334f0.3aa4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=000000000181c280
276434f0.3aa4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=DB1AA7E2E4704C908EC9382E1F9E64808B9E5E1D
276534f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbddd10000 'C:\Windows\system32\rsaenh.dll'
276634f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbdf760000 'C:\Windows\System32\crypt32.dll'
276734f0.3aa4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package03~31bf3856ad364e35~amd64~~10.0.18362.628.cat'; file='\Device\HarddiskVolume6\Windows\System32\wbem\wbemprox.dll'
276834f0.3aa4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
276934f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
277034f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'ws2_32.dll'.
277134f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #18 'wbemcomn.dll'.
277234f0.3aa4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume6\Windows\System32\wbem\wbemprox.dll) WinVerifyTrust
277334f0.3aa4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume6\Windows\System32\wbem\wbemprox.dll
277434f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'wbemcomn.dll'...
277534f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'wbemcomn.dll' -> '\Device\HarddiskVolume6\Windows\System32\wbemcomn.dll' [rcNtRedir=0xc0150008]
277634f0.3aa4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000a64 pwszName=\Device\HarddiskVolume6\Windows\System32\wbemcomn.dll
277734f0.3aa4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 000000000181c280
277834f0.3aa4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=000000000181c280
277934f0.3aa4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=22EAF38FA276D7A374D3945ACD556FA0953D3440
278034f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbddd10000 'C:\Windows\system32\rsaenh.dll'
278134f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbdf760000 'C:\Windows\System32\crypt32.dll'
278234f0.3aa4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package03~31bf3856ad364e35~amd64~~10.0.18362.628.cat'; file='\Device\HarddiskVolume6\Windows\System32\wbemcomn.dll'
278334f0.3aa4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
278434f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
278534f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #14 'bcrypt.dll'.
278634f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #18 'ws2_32.dll'.
278734f0.3aa4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume6\Windows\System32\wbemcomn.dll) WinVerifyTrust
278834f0.3aa4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume6\Windows\System32\wbemcomn.dll
278934f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
279034f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume6\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
279134f0.3aa4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\ws2_32.dll
279234f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
279334f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume6\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
279434f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
279534f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume6\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
279634f0.3aa4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\ws2_32.dll
279734f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcrypt.dll'...
279834f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcrypt.dll' -> '\Device\HarddiskVolume6\Windows\System32\bcrypt.dll' [rcNtRedir=0xc0150008]
279934f0.3aa4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\bcrypt.dll
280034f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
280134f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume6\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
280234f0.3aa4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\wbem\wbemprox.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
280334f0.3aa4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\wbem\wbemprox.dll
280434f0.3aa4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\wbemcomn.dll
280534f0.3aa4: supR3HardenedDllNotificationCallback: load 00007ffbd7dd0000 LB 0x00084000 C:\Windows\SYSTEM32\wbemcomn.dll [fFlags=0x0]
280634f0.3aa4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\wbemcomn.dll
280734f0.3aa4: supR3HardenedDllNotificationCallback: load 00007ffbd7e60000 LB 0x00011000 C:\Windows\system32\wbem\wbemprox.dll [fFlags=0x0]
280834f0.3aa4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\wbem\wbemprox.dll
280934f0.3aa4: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(API-MS-Win-Core-LocalRegistry-L1-1-0.dll) -> 0x0, fPresent=1
281034f0.3aa4: supR3HardenedMonitor_LdrLoadDll: pName=API-MS-Win-Core-LocalRegistry-L1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
281134f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbdf4b0000 'API-MS-Win-Core-LocalRegistry-L1-1-0.dll'
281234f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbd7e60000 'C:\Windows\system32\wbem\wbemprox.dll'
281334f0.3aa4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000a9c pwszName=\Device\HarddiskVolume6\Windows\System32\wbem\wbemsvc.dll
281434f0.3aa4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 000000000181c280
281534f0.3aa4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=000000000181c280
281634f0.3aa4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=00C864D7F76A7AD25E7D0DA164B0B66188F5B7FF
281734f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbddd10000 'C:\Windows\system32\rsaenh.dll'
281834f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbdf760000 'C:\Windows\System32\crypt32.dll'
281934f0.3aa4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package03~31bf3856ad364e35~amd64~~10.0.18362.628.cat'; file='\Device\HarddiskVolume6\Windows\System32\wbem\wbemsvc.dll'
282034f0.3aa4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
282134f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
282234f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'rpcrt4.dll'.
282334f0.3aa4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume6\Windows\System32\wbem\wbemsvc.dll) WinVerifyTrust
282434f0.3aa4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume6\Windows\System32\wbem\wbemsvc.dll
282534f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
282634f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume6\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
282734f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
282834f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume6\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
282934f0.3aa4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\wbem\wbemsvc.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
283034f0.3aa4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\wbem\wbemsvc.dll
283134f0.3aa4: supR3HardenedDllNotificationCallback: load 00007ffbd6eb0000 LB 0x00014000 C:\Windows\system32\wbem\wbemsvc.dll [fFlags=0x0]
283234f0.3aa4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\wbem\wbemsvc.dll
283334f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbd6eb0000 'C:\Windows\system32\wbem\wbemsvc.dll'
283434f0.3aa4: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-localization-l1-2-0.dll) -> 0x0, fPresent=1
283534f0.3aa4: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-l1-2-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
283634f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbdf4b0000 'api-ms-win-core-localization-l1-2-0.dll'
283734f0.3aa4: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-localization-obsolete-l1-1-0.dll) -> 0x0, fPresent=1
283834f0.3aa4: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-obsolete-l1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
283934f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbdf4b0000 'api-ms-win-core-localization-obsolete-l1-1-0.dll'
284034f0.3aa4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000b18 pwszName=\Device\HarddiskVolume6\Windows\System32\wbem\fastprox.dll
284134f0.3aa4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 000000000181c280
284234f0.3aa4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=000000000181c280
284334f0.3aa4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=0708A64F48237CD4D5092546CE9C373F20B30CA1
284434f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbddd10000 'C:\Windows\system32\rsaenh.dll'
284534f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbdf760000 'C:\Windows\System32\crypt32.dll'
284634f0.3aa4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package03~31bf3856ad364e35~amd64~~10.0.18362.628.cat'; file='\Device\HarddiskVolume6\Windows\System32\wbem\fastprox.dll'
284734f0.3aa4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
284834f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
284934f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #20 'wbemcomn.dll'.
285034f0.3aa4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume6\Windows\System32\wbem\fastprox.dll) WinVerifyTrust
285134f0.3aa4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume6\Windows\System32\wbem\fastprox.dll
285234f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'wbemcomn.dll'...
285334f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'wbemcomn.dll' -> '\Device\HarddiskVolume6\Windows\System32\wbemcomn.dll' [rcNtRedir=0xc0150008]
285434f0.3aa4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\wbemcomn.dll
285534f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
285634f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume6\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
285734f0.3aa4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\wbem\fastprox.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
285834f0.3aa4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\wbem\fastprox.dll
285934f0.3aa4: supR3HardenedDllNotificationCallback: load 00007ffbd6ed0000 LB 0x00101000 C:\Windows\system32\wbem\fastprox.dll [fFlags=0x0]
286034f0.3aa4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\wbem\fastprox.dll
286134f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbd6ed0000 'C:\Windows\system32\wbem\fastprox.dll'
286234f0.3aa4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000b34 pwszName=\Device\HarddiskVolume6\Windows\System32\amsi.dll
286334f0.3aa4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 000000000181c280
286434f0.3aa4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=000000000181c280
286534f0.3aa4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=B5D4D58A583ACAD5AA76D7DD0F2DB8ADE903942B
286634f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbddd10000 'C:\Windows\system32\rsaenh.dll'
286734f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbdf760000 'C:\Windows\System32\crypt32.dll'
286834f0.3aa4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package04~31bf3856ad364e35~amd64~~10.0.18362.535.cat'; file='\Device\HarddiskVolume6\Windows\System32\amsi.dll'
286934f0.3aa4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
287034f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
287134f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #14 'rpcrt4.dll'.
287234f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #16 'userenv.dll'.
287334f0.3aa4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume6\Windows\System32\amsi.dll) WinVerifyTrust
287434f0.3aa4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume6\Windows\System32\amsi.dll
287534f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'userenv.dll'...
287634f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'userenv.dll' -> '\Device\HarddiskVolume6\Windows\System32\userenv.dll' [rcNtRedir=0xc0150008]
287734f0.3aa4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\userenv.dll
287834f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
287934f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume6\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
288034f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
288134f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume6\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
288234f0.3aa4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\amsi.dll (Input=amsi.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
288334f0.3aa4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\amsi.dll
288434f0.3aa4: supR3HardenedDllNotificationCallback: load 00007ffbd6e90000 LB 0x00015000 C:\Windows\System32\amsi.dll [fFlags=0x0]
288534f0.3aa4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\amsi.dll
288634f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbd6e90000 'C:\Windows\System32\amsi.dll'
288734f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbddd10000 'C:\Windows\system32\rsaenh.dll'
288834f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbdf760000 'C:\Windows\System32\crypt32.dll'
288934f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'oleaut32.dll'.
289034f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'advapi32.dll'.
289134f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'ole32.dll'.
289234f0.3aa4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume6\ProgramData\Microsoft\Windows Defender\Platform\4.18.1911.3-0\MpOAV.dll) WinVerifyTrust
289334f0.3aa4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume6\ProgramData\Microsoft\Windows Defender\Platform\4.18.1911.3-0\MpOAV.dll
289434f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
289534f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume6\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
289634f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
289734f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume6\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
289834f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
289934f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume6\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
290034f0.3aa4: supR3HardenedMonitor_LdrLoadDll: pName=C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1911.3-0\MpOav.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
290134f0.3aa4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\ProgramData\Microsoft\Windows Defender\Platform\4.18.1911.3-0\MpOAV.dll
290234f0.3aa4: supR3HardenedDllNotificationCallback: load 00007ffbd6950000 LB 0x00046000 C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1911.3-0\MpOav.dll [fFlags=0x0]
290334f0.3aa4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\ProgramData\Microsoft\Windows Defender\Platform\4.18.1911.3-0\MpOAV.dll
290434f0.3aa4: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-synch-l1-2-0) -> 0x0, fPresent=1
290534f0.3aa4: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-synch-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
290634f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbdf4b0000 'api-ms-win-core-synch-l1-2-0'
290734f0.3aa4: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-fibers-l1-1-1) -> 0x0, fPresent=1
290834f0.3aa4: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-fibers-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
290934f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbdf4b0000 'api-ms-win-core-fibers-l1-1-1'
291034f0.3aa4: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-synch-l1-2-0) -> 0x0, fPresent=1
291134f0.3aa4: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-synch-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
291234f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbdf4b0000 'api-ms-win-core-synch-l1-2-0'
291334f0.3aa4: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-fibers-l1-1-1) -> 0x0, fPresent=1
291434f0.3aa4: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-fibers-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
291534f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbdf4b0000 'api-ms-win-core-fibers-l1-1-1'
291634f0.3aa4: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-localization-l1-2-1) -> 0x0, fPresent=1
291734f0.3aa4: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-l1-2-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
291834f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbdf4b0000 'api-ms-win-core-localization-l1-2-1'
291934f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\version.dll'.
292034f0.3aa4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
292134f0.3aa4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume6\Windows\System32\version.dll)
292234f0.3aa4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume6\Windows\System32\version.dll
292334f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
292434f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume6\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
292534f0.3aa4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\version.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
292634f0.3aa4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\version.dll [avoiding WinVerifyTrust]
292734f0.3aa4: supR3HardenedDllNotificationCallback: load 00007ffbd8b80000 LB 0x0000a000 C:\Windows\system32\version.dll [fFlags=0x0]
292834f0.3aa4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\version.dll [avoiding WinVerifyTrust]
292934f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbd8b80000 'C:\Windows\system32\version.dll'
293034f0.3aa4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume6\Windows\System32\version.dll'.
293134f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume6\Windows\System32\version.dll' [rescheduled]
293234f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbd6950000 'C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1911.3-0\MpOav.dll'
293334f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbddd10000 'C:\Windows\system32\rsaenh.dll'
293434f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbdf760000 'C:\Windows\System32\crypt32.dll'
293534f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume6\Windows\System32\version.dll'
293634f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbe0b90000 'C:\Windows\System32\ADVAPI32.dll'
293734f0.bd0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbddd10000 'C:\Windows\system32\rsaenh.dll'
293834f0.bd0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbddd10000 'C:\Windows\system32\rsaenh.dll'
293934f0.bd0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
294034f0.bd0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
294134f0.bd0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'ws2_32.dll'.
294234f0.bd0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxVRDP.dll) WinVerifyTrust
294334f0.bd0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxVRDP.dll
294434f0.bd0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
294534f0.bd0: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume6\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
294634f0.bd0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\ws2_32.dll
294734f0.bd0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
294834f0.bd0: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
294934f0.bd0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
295034f0.bd0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
295134f0.bd0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxVRDP.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
295234f0.bd0: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxVRDP.dll
295334f0.bd0: supR3HardenedDllNotificationCallback: load 00007ffbd79f0000 LB 0x0007d000 C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxVRDP.DLL [fFlags=0x0]
295434f0.bd0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxVRDP.dll
295534f0.bd0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbd79f0000 'C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxVRDP.DLL'
295634f0.bc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbddd10000 'C:\Windows\system32\rsaenh.dll'
295734f0.bc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbdf760000 'C:\Windows\System32\crypt32.dll'
295834f0.bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'ws2_32.dll'.
295934f0.bc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #22 'rpcrt4.dll'.
296034f0.bc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume6\Windows\System32\mswsock.dll) WinVerifyTrust
296134f0.bc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume6\Windows\System32\mswsock.dll
296234f0.bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
296334f0.bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume6\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
296434f0.bc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
296534f0.bc: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume6\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
296634f0.bc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\ws2_32.dll
296734f0.bc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\mswsock.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
296834f0.bc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\mswsock.dll
296934f0.bc: supR3HardenedDllNotificationCallback: load 00007ffbde1a0000 LB 0x00067000 C:\Windows\system32\mswsock.dll [fFlags=0x0]
297034f0.bc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\mswsock.dll
297134f0.bc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbde1a0000 'C:\Windows\system32\mswsock.dll'
297234f0.bd0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbddd10000 'C:\Windows\system32\rsaenh.dll'
297334f0.bd0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
297434f0.bd0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
297534f0.bd0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\VBoxVMM.dll) WinVerifyTrust
297634f0.bd0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\VBoxVMM.dll
297734f0.bd0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
297834f0.bd0: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
297934f0.bd0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
298034f0.bd0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
298134f0.bd0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxVMM.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
298234f0.bd0: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\VBoxVMM.dll
298334f0.bd0: supR3HardenedDllNotificationCallback: load 00007ffb9c800000 LB 0x0037a000 C:\Program Files\Oracle\VirtualBox\VBoxVMM.DLL [fFlags=0x0]
298434f0.bd0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\VBoxVMM.dll
298534f0.bd0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb9c800000 'C:\Program Files\Oracle\VirtualBox\VBoxVMM.DLL'
298634f0.2f10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbddd10000 'C:\Windows\system32\rsaenh.dll'
298734f0.36c0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbddd10000 'C:\Windows\system32\rsaenh.dll'
298834f0.36c0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
298934f0.36c0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp100.dll'.
299034f0.36c0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxvmm.dll'.
299134f0.36c0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'vboxrt.dll'.
299234f0.36c0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'user32.dll'.
299334f0.36c0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\VBoxSharedClipboard.dll) WinVerifyTrust
299434f0.36c0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\VBoxSharedClipboard.dll
299534f0.36c0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
299634f0.36c0: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume6\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
299734f0.36c0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
299834f0.36c0: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
299934f0.36c0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxvmm.dll'...
300034f0.36c0: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxvmm.dll' -> '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\vboxvmm.dll' [rcNtRedir=0xc0150008]
300134f0.36c0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\VBoxVMM.dll
300234f0.36c0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
300334f0.36c0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
300434f0.36c0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
300534f0.36c0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
300634f0.36c0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll
300734f0.36c0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxSharedClipboard.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
300834f0.36c0: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\VBoxSharedClipboard.dll
300934f0.36c0: supR3HardenedDllNotificationCallback: load 00007ffbdb310000 LB 0x0000f000 C:\Program Files\Oracle\VirtualBox\VBoxSharedClipboard.DLL [fFlags=0x0]
301034f0.36c0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\VBoxSharedClipboard.dll
301134f0.36c0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbdb310000 'C:\Program Files\Oracle\VirtualBox\VBoxSharedClipboard.DLL'
301234f0.be4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbddd10000 'C:\Windows\system32\rsaenh.dll'
301334f0.be4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
301434f0.be4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp100.dll'.
301534f0.be4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxrt.dll'.
301634f0.be4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\VBoxDragAndDropSvc.dll) WinVerifyTrust
301734f0.be4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\VBoxDragAndDropSvc.dll
301834f0.be4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
301934f0.be4: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
302034f0.be4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
302134f0.be4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
302234f0.be4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
302334f0.be4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
302434f0.be4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxDragAndDropSvc.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
302534f0.be4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\VBoxDragAndDropSvc.dll
302634f0.be4: supR3HardenedDllNotificationCallback: load 00007ffbdb300000 LB 0x0000d000 C:\Program Files\Oracle\VirtualBox\VBoxDragAndDropSvc.DLL [fFlags=0x0]
302734f0.be4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\VBoxDragAndDropSvc.dll
302834f0.be4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbdb300000 'C:\Program Files\Oracle\VirtualBox\VBoxDragAndDropSvc.DLL'
302934f0.2f10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbe0cf0000 'C:\Windows\system32\Shell32.dll'
303034f0.2f10: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\VBoxVMM.dll
303134f0.2f10: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxVMM.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
303234f0.2f10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb9c800000 'C:\Program Files\Oracle\VirtualBox\VBoxVMM.DLL'
303334f0.2f10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbddd10000 'C:\Windows\system32\rsaenh.dll'
303434f0.2f10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
303534f0.2f10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
303634f0.2f10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
303734f0.2f10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'ole32.dll'.
303834f0.2f10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'oleaut32.dll'.
303934f0.2f10: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.dll) WinVerifyTrust
304034f0.2f10: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.dll
304134f0.2f10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
304234f0.2f10: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume6\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
304334f0.2f10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
304434f0.2f10: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume6\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
304534f0.2f10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
304634f0.2f10: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume6\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
304734f0.2f10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
304834f0.2f10: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
304934f0.2f10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
305034f0.2f10: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
305134f0.2f10: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
305234f0.2f10: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.dll
305334f0.2f10: supR3HardenedDllNotificationCallback: load 00007ffbd79a0000 LB 0x00041000 C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.DLL [fFlags=0x0]
305434f0.2f10: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.dll
305534f0.2f10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbd79a0000 'C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.DLL'
305634f0.2f10: supR3HardenedDllNotificationCallback: Unload 00007ffbd79a0000 LB 0x00041000 C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.DLL [flags=0x0]
305734f0.2f10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbddd10000 'C:\Windows\system32\rsaenh.dll'
305834f0.2f10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbddd10000 'C:\Windows\system32\rsaenh.dll'
305934f0.2f10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
306034f0.2f10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxvmm.dll'.
306134f0.2f10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxrt.dll'.
306234f0.2f10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'vboxddu.dll'.
306334f0.2f10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'vboxdd2.dll'.
306434f0.2f10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'user32.dll'.
306534f0.2f10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'setupapi.dll'.
306634f0.2f10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'ws2_32.dll'.
306734f0.2f10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'ole32.dll'.
306834f0.2f10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'iphlpapi.dll'.
306934f0.2f10: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\VBoxDD.dll) WinVerifyTrust
307034f0.2f10: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\VBoxDD.dll
307134f0.2f10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'iphlpapi.dll'...
307234f0.2f10: supR3HardenedWinVerifyCacheProcessImportTodos: 'iphlpapi.dll' -> '\Device\HarddiskVolume6\Windows\System32\iphlpapi.dll' [rcNtRedir=0xc0150008]
307334f0.2f10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbddd10000 'C:\Windows\system32\rsaenh.dll'
307434f0.2f10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbdf760000 'C:\Windows\System32\crypt32.dll'
307534f0.2f10: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume6\Windows\System32\IPHLPAPI.DLL) WinVerifyTrust
307634f0.2f10: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume6\Windows\System32\IPHLPAPI.DLL
307734f0.2f10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
307834f0.2f10: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume6\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
307934f0.2f10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
308034f0.2f10: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume6\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
308134f0.2f10: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\ws2_32.dll
308234f0.2f10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'setupapi.dll'...
308334f0.2f10: supR3HardenedWinVerifyCacheProcessImportTodos: 'setupapi.dll' -> '\Device\HarddiskVolume6\Windows\System32\setupapi.dll' [rcNtRedir=0xc0150008]
308434f0.2f10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbddd10000 'C:\Windows\system32\rsaenh.dll'
308534f0.2f10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbdf760000 'C:\Windows\System32\crypt32.dll'
308634f0.2f10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
308734f0.2f10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #29 'rpcrt4.dll'.
308834f0.2f10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #36 'cfgmgr32.dll'.
308934f0.2f10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #41 'bcrypt.dll'.
309034f0.2f10: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume6\Windows\System32\setupapi.dll) WinVerifyTrust
309134f0.2f10: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume6\Windows\System32\setupapi.dll
309234f0.2f10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
309334f0.2f10: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume6\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
309434f0.2f10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxdd2.dll'...
309534f0.2f10: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxdd2.dll' -> '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\vboxdd2.dll' [rcNtRedir=0xc0150008]
309634f0.2f10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcrypt.dll'...
309734f0.2f10: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcrypt.dll' -> '\Device\HarddiskVolume6\Windows\System32\bcrypt.dll' [rcNtRedir=0xc0150008]
309834f0.2f10: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\bcrypt.dll
309934f0.2f10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'cfgmgr32.dll'...
310034f0.2f10: supR3HardenedWinVerifyCacheProcessImportTodos: 'cfgmgr32.dll' -> '\Device\HarddiskVolume6\Windows\System32\cfgmgr32.dll' [rcNtRedir=0xc0150008]
310134f0.2f10: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\cfgmgr32.dll
310234f0.2f10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
310334f0.2f10: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume6\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
310434f0.2f10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
310534f0.2f10: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume6\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
310634f0.2f10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbddd10000 'C:\Windows\system32\rsaenh.dll'
310734f0.2f10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
310834f0.2f10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
310934f0.2f10: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\VBoxDD2.dll) WinVerifyTrust
311034f0.2f10: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\VBoxDD2.dll
311134f0.2f10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxddu.dll'...
311234f0.2f10: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxddu.dll' -> '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\vboxddu.dll' [rcNtRedir=0xc0150008]
311334f0.2f10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
311434f0.2f10: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
311534f0.2f10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
311634f0.2f10: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
311734f0.2f10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbddd10000 'C:\Windows\system32\rsaenh.dll'
311834f0.2f10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
311934f0.2f10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
312034f0.2f10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
312134f0.2f10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'setupapi.dll'.
312234f0.2f10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'advapi32.dll'.
312334f0.2f10: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\VBoxDDU.dll) WinVerifyTrust
312434f0.2f10: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\VBoxDDU.dll
312534f0.2f10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
312634f0.2f10: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
312734f0.2f10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxvmm.dll'...
312834f0.2f10: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxvmm.dll' -> '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\vboxvmm.dll' [rcNtRedir=0xc0150008]
312934f0.2f10: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\VBoxVMM.dll
313034f0.2f10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
313134f0.2f10: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
313234f0.2f10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
313334f0.2f10: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume6\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
313434f0.2f10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'setupapi.dll'...
313534f0.2f10: supR3HardenedWinVerifyCacheProcessImportTodos: 'setupapi.dll' -> '\Device\HarddiskVolume6\Windows\System32\setupapi.dll' [rcNtRedir=0xc0150008]
313634f0.2f10: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\setupapi.dll
313734f0.2f10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
313834f0.2f10: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume6\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
313934f0.2f10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
314034f0.2f10: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
314134f0.2f10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
314234f0.2f10: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
314334f0.2f10: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxDD.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
314434f0.2f10: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\VBoxDD.dll
314534f0.2f10: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\VBoxDDU.dll
314634f0.2f10: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\VBoxDD2.dll
314734f0.2f10: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\IPHLPAPI.DLL
314834f0.2f10: supR3HardenedDllNotificationCallback: load 00007ffbe0320000 LB 0x00470000 C:\Windows\System32\SETUPAPI.dll [fFlags=0x0]
314934f0.2f10: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\setupapi.dll
315034f0.2f10: supR3HardenedDllNotificationCallback: load 00007ffbbaa00000 LB 0x00066000 C:\Program Files\Oracle\VirtualBox\VBoxDDU.dll [fFlags=0x0]
315134f0.2f10: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\VBoxDDU.dll
315234f0.2f10: supR3HardenedDllNotificationCallback: load 00007ffb79a40000 LB 0x0085c000 C:\Program Files\Oracle\VirtualBox\VBoxDD2.dll [fFlags=0x0]
315334f0.2f10: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\VBoxDD2.dll
315434f0.2f10: supR3HardenedDllNotificationCallback: load 00007ffbddeb0000 LB 0x0003a000 C:\Windows\SYSTEM32\IPHLPAPI.DLL [fFlags=0x0]
315534f0.2f10: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\IPHLPAPI.DLL
315634f0.2f10: supR3HardenedDllNotificationCallback: load 00007ffb7d700000 LB 0x009e1000 C:\Program Files\Oracle\VirtualBox\VBoxDD.DLL [fFlags=0x0]
315734f0.2f10: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\VBoxDD.dll
315834f0.2f10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb7d700000 'C:\Program Files\Oracle\VirtualBox\VBoxDD.DLL'
315934f0.2f10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbddd10000 'C:\Windows\system32\rsaenh.dll'
316034f0.2f10: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.dll
316134f0.2f10: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
316234f0.2f10: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.dll
316334f0.2f10: supR3HardenedDllNotificationCallback: load 00007ffbd79a0000 LB 0x00041000 C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.DLL [fFlags=0x0]
316434f0.2f10: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.dll
316534f0.2f10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbd79a0000 'C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.DLL'
316634f0.2f10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbddd10000 'C:\Windows\system32\rsaenh.dll'
316734f0.2f10: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\VBoxC.dll
316834f0.2f10: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxC.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
316934f0.2f10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffba2d40000 'C:\Program Files\Oracle\VirtualBox\VBoxC.DLL'
317034f0.2f10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbddd10000 'C:\Windows\system32\rsaenh.dll'
317134f0.2f10: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\VBoxDD2.dll
317234f0.2f10: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxDD2.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
317334f0.2f10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffb79a40000 'C:\Program Files\Oracle\VirtualBox\VBoxDD2.DLL'
317434f0.2f10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbddd10000 'C:\Windows\system32\rsaenh.dll'
317534f0.2f10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbddd10000 'C:\Windows\system32\rsaenh.dll'
317634f0.2f10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
317734f0.2f10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
317834f0.2f10: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxEhciR3.dll) WinVerifyTrust
317934f0.2f10: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxEhciR3.dll
318034f0.2f10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
318134f0.2f10: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
318234f0.2f10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
318334f0.2f10: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
318434f0.2f10: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxEhciR3.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
318534f0.2f10: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxEhciR3.dll
318634f0.2f10: supR3HardenedDllNotificationCallback: load 00007ffbdb2c0000 LB 0x00018000 C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxEhciR3.DLL [fFlags=0x0]
318734f0.2f10: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxEhciR3.dll
318834f0.2f10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbdb2c0000 'C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxEhciR3.DLL'
318934f0.2f10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbddd10000 'C:\Windows\system32\rsaenh.dll'
319034f0.2f10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbddd10000 'C:\Windows\system32\rsaenh.dll'
319134f0.2f10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
319234f0.2f10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
319334f0.2f10: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxNvmeR3.dll) WinVerifyTrust
319434f0.2f10: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxNvmeR3.dll
319534f0.2f10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
319634f0.2f10: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
319734f0.2f10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
319834f0.2f10: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
319934f0.2f10: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxNvmeR3.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
320034f0.2f10: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxNvmeR3.dll
320134f0.2f10: supR3HardenedDllNotificationCallback: load 00007ffbdb260000 LB 0x00012000 C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxNvmeR3.DLL [fFlags=0x0]
320234f0.2f10: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxNvmeR3.dll
320334f0.2f10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbdb260000 'C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxNvmeR3.DLL'
320434f0.2f10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbddd10000 'C:\Windows\system32\rsaenh.dll'
320534f0.2f10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbddd10000 'C:\Windows\system32\rsaenh.dll'
320634f0.2f10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
320734f0.2f10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
320834f0.2f10: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbCardReaderR3.dll) WinVerifyTrust
320934f0.2f10: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbCardReaderR3.dll
321034f0.2f10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
321134f0.2f10: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
321234f0.2f10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
321334f0.2f10: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
321434f0.2f10: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbCardReaderR3.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
321534f0.2f10: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbCardReaderR3.dll
321634f0.2f10: supR3HardenedDllNotificationCallback: load 00007ffbd8c50000 LB 0x00018000 C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbCardReaderR3.DLL [fFlags=0x0]
321734f0.2f10: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbCardReaderR3.dll
321834f0.2f10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbd8c50000 'C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbCardReaderR3.DLL'
321934f0.2f10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbddd10000 'C:\Windows\system32\rsaenh.dll'
322034f0.2f10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbddd10000 'C:\Windows\system32\rsaenh.dll'
322134f0.2f10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
322234f0.2f10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
322334f0.2f10: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbWebcamR3.dll) WinVerifyTrust
322434f0.2f10: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbWebcamR3.dll
322534f0.2f10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
322634f0.2f10: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
322734f0.2f10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
322834f0.2f10: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
322934f0.2f10: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbWebcamR3.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
323034f0.2f10: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbWebcamR3.dll
323134f0.2f10: supR3HardenedDllNotificationCallback: load 00007ffbd78d0000 LB 0x00019000 C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbWebcamR3.DLL [fFlags=0x0]
323234f0.2f10: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbWebcamR3.dll
323334f0.2f10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbd78d0000 'C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbWebcamR3.DLL'
323434f0.2f10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbddd10000 'C:\Windows\system32\rsaenh.dll'
323534f0.1a58: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbddd10000 'C:\Windows\system32\rsaenh.dll'
323634f0.1a58: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
323734f0.1a58: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxvmm.dll'.
323834f0.1a58: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxrt.dll'.
323934f0.1a58: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\VBoxSharedFolders.dll) WinVerifyTrust
324034f0.1a58: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\VBoxSharedFolders.dll
324134f0.1a58: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
324234f0.1a58: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
324334f0.1a58: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxvmm.dll'...
324434f0.1a58: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxvmm.dll' -> '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\vboxvmm.dll' [rcNtRedir=0xc0150008]
324534f0.1a58: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\VBoxVMM.dll
324634f0.1a58: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
324734f0.1a58: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
324834f0.1a58: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxSharedFolders.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
324934f0.1a58: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\VBoxSharedFolders.dll
325034f0.1a58: supR3HardenedDllNotificationCallback: load 00007ffbd5fe0000 LB 0x00014000 C:\Program Files\Oracle\VirtualBox\VBoxSharedFolders.DLL [fFlags=0x0]
325134f0.1a58: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\VBoxSharedFolders.dll
325234f0.1a58: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbd5fe0000 'C:\Program Files\Oracle\VirtualBox\VBoxSharedFolders.DLL'
325334f0.16e8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbddd10000 'C:\Windows\system32\rsaenh.dll'
325434f0.16e8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
325534f0.16e8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp100.dll'.
325634f0.16e8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxvmm.dll'.
325734f0.16e8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'vboxrt.dll'.
325834f0.16e8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\VBoxGuestControlSvc.dll) WinVerifyTrust
325934f0.16e8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\VBoxGuestControlSvc.dll
326034f0.16e8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
326134f0.16e8: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
326234f0.16e8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxvmm.dll'...
326334f0.16e8: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxvmm.dll' -> '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\vboxvmm.dll' [rcNtRedir=0xc0150008]
326434f0.16e8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\VBoxVMM.dll
326534f0.16e8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
326634f0.16e8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
326734f0.16e8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
326834f0.16e8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
326934f0.16e8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxGuestControlSvc.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
327034f0.16e8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\VBoxGuestControlSvc.dll
327134f0.16e8: supR3HardenedDllNotificationCallback: load 00007ffbdb2f0000 LB 0x0000c000 C:\Program Files\Oracle\VirtualBox\VBoxGuestControlSvc.DLL [fFlags=0x0]
327234f0.16e8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\VBoxGuestControlSvc.dll
327334f0.16e8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbdb2f0000 'C:\Program Files\Oracle\VirtualBox\VBoxGuestControlSvc.DLL'
327434f0.3e5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbddd10000 'C:\Windows\system32\rsaenh.dll'
327534f0.3e5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
327634f0.3e5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp100.dll'.
327734f0.3e5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxrt.dll'.
327834f0.3e5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\VBoxGuestPropSvc.dll) WinVerifyTrust
327934f0.3e5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\VBoxGuestPropSvc.dll
328034f0.3e5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
328134f0.3e5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
328234f0.3e5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
328334f0.3e5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
328434f0.3e5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
328534f0.3e5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
328634f0.3e5c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxGuestPropSvc.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
328734f0.3e5c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\VBoxGuestPropSvc.dll
328834f0.3e5c: supR3HardenedDllNotificationCallback: load 00007ffbdb2b0000 LB 0x0000d000 C:\Program Files\Oracle\VirtualBox\VBoxGuestPropSvc.DLL [fFlags=0x0]
328934f0.3e5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\VBoxGuestPropSvc.dll
329034f0.3e5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbdb2b0000 'C:\Program Files\Oracle\VirtualBox\VBoxGuestPropSvc.DLL'
329134f0.2f10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbddd10000 'C:\Windows\system32\rsaenh.dll'
329234f0.2f10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbddd10000 'C:\Windows\system32\rsaenh.dll'
329334f0.2f10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
329434f0.2f10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
329534f0.2f10: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VDPluginCrypt.dll) WinVerifyTrust
329634f0.2f10: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VDPluginCrypt.dll
329734f0.2f10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
329834f0.2f10: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
329934f0.2f10: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
330034f0.2f10: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
330134f0.2f10: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VDPluginCrypt.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
330234f0.2f10: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VDPluginCrypt.dll
330334f0.2f10: supR3HardenedDllNotificationCallback: load 00007ffbdb360000 LB 0x0000a000 C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VDPluginCrypt.DLL [fFlags=0x0]
330434f0.2f10: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VDPluginCrypt.dll
330534f0.2f10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbdb360000 'C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VDPluginCrypt.DLL'
330634f0.2f10: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\IPHLPAPI.DLL
330734f0.2f10: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\Iphlpapi.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
330834f0.2f10: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbddeb0000 'C:\Windows\system32\Iphlpapi.dll'
330934f0.2f10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'rpcrt4.dll'.
331034f0.2f10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'nsi.dll'.
331134f0.2f10: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume6\Windows\System32\winnsi.dll)
331234f0.2f10: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume6\Windows\System32\winnsi.dll
331334f0.2f10: supR3HardenedDllNotificationCallback: load 00007ffbe0850000 LB 0x00008000 C:\Windows\System32\NSI.dll [fFlags=0x0]
331434f0.2f10: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume6\Windows\System32\nsi.dll)
331534f0.2f10: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume6\Windows\System32\nsi.dll
331634f0.2f10: supR3HardenedDllNotificationCallback: load 00007ffbd9330000 LB 0x0000b000 C:\Windows\SYSTEM32\WINNSI.DLL [fFlags=0x0]
331734f0.2f10: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\winnsi.dll [avoiding WinVerifyTrust]
331834f0.2f10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'rpcrt4.dll'.
331934f0.2f10: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume6\Windows\System32\dhcpcsvc6.dll)
332034f0.2f10: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume6\Windows\System32\dhcpcsvc6.dll
332134f0.2f10: supR3HardenedDllNotificationCallback: load 00007ffbd8a50000 LB 0x00016000 C:\Windows\SYSTEM32\dhcpcsvc6.DLL [fFlags=0x0]
332234f0.2f10: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume6\Windows\System32\dhcpcsvc6.dll [avoiding WinVerifyTrust]
332334f0.2f10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'rpcrt4.dll'.
332434f0.2f10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'ws2_32.dll'.
332534f0.2f10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'nsi.dll'.
332634f0.2f10: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume6\Windows\System32\dhcpcsvc.dll)
332734f0.2f10: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume6\Windows\System32\dhcpcsvc.dll
332834f0.2f10: supR3HardenedDllNotificationCallback: load 00007ffbd8f50000 LB 0x0001c000 C:\Windows\SYSTEM32\dhcpcsvc.DLL [fFlags=0x0]
332934f0.2f10: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume6\Windows\System32\dhcpcsvc.dll [avoiding WinVerifyTrust]
333034f0.2f10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #21 'ws2_32.dll'.
333134f0.2f10: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #23 'nsi.dll'.
333234f0.2f10: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume6\Windows\System32\dnsapi.dll)
333334f0.2f10: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume6\Windows\System32\dnsapi.dll
333434f0.2f10: supR3HardenedDllNotificationCallback: load 00007ffbddef0000 LB 0x000ca000 C:\Windows\SYSTEM32\DNSAPI.dll [fFlags=0x0]
333534f0.2f10: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\dnsapi.dll [avoiding WinVerifyTrust]
333634f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'nsi.dll'...
333734f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'nsi.dll' -> '\Device\HarddiskVolume6\Windows\System32\nsi.dll' [rcNtRedir=0xc0150008]
333834f0.3aa4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\nsi.dll [lacks WinVerifyTrust]
333934f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
334034f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume6\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
334134f0.3aa4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\ws2_32.dll
334234f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'nsi.dll'...
334334f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'nsi.dll' -> '\Device\HarddiskVolume6\Windows\System32\nsi.dll' [rcNtRedir=0xc0150008]
334434f0.3aa4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\nsi.dll [lacks WinVerifyTrust]
334534f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
334634f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume6\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
334734f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
334834f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume6\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
334934f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
335034f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume6\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
335134f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'nsi.dll'...
335234f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'nsi.dll' -> '\Device\HarddiskVolume6\Windows\System32\nsi.dll' [rcNtRedir=0xc0150008]
335334f0.3aa4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\nsi.dll [lacks WinVerifyTrust]
335434f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
335534f0.3aa4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume6\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
335634f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbddd10000 'C:\Windows\system32\rsaenh.dll'
335734f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbdf760000 'C:\Windows\System32\crypt32.dll'
335834f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume6\Windows\System32\dnsapi.dll'
335934f0.3aa4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000cd8 pwszName=\Device\HarddiskVolume6\Windows\System32\dhcpcsvc.dll
336034f0.3aa4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 000000000181c280
336134f0.3aa4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=000000000181c280
336234f0.3aa4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=ABBE12EE7925737522BCF905613B49C6CAA0BE8C
336334f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbddd10000 'C:\Windows\system32\rsaenh.dll'
336434f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbdf760000 'C:\Windows\System32\crypt32.dll'
336534f0.3aa4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.18362.535.cat'; file='\Device\HarddiskVolume6\Windows\System32\dhcpcsvc.dll'
336634f0.3aa4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
336734f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume6\Windows\System32\dhcpcsvc.dll'
336834f0.3aa4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000c90 pwszName=\Device\HarddiskVolume6\Windows\System32\dhcpcsvc6.dll
336934f0.3aa4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 000000000181c280
337034f0.3aa4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=000000000181c280
337134f0.3aa4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=62657CFC96994F71846A6491CB0A48C51E4DCEBA
337234f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbddd10000 'C:\Windows\system32\rsaenh.dll'
337334f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbdf760000 'C:\Windows\System32\crypt32.dll'
337434f0.3aa4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.18362.535.cat'; file='\Device\HarddiskVolume6\Windows\System32\dhcpcsvc6.dll'
337534f0.3aa4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
337634f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume6\Windows\System32\dhcpcsvc6.dll'
337734f0.3aa4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\rsaenh.dll
337834f0.3aa4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
337934f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbddd10000 'C:\Windows\system32\rsaenh.dll'
338034f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbdf760000 'C:\Windows\System32\crypt32.dll'
338134f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume6\Windows\System32\nsi.dll'
338234f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbddd10000 'C:\Windows\system32\rsaenh.dll'
338334f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbdf760000 'C:\Windows\System32\crypt32.dll'
338434f0.3aa4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume6\Windows\System32\winnsi.dll'
338534f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbe0cf0000 'C:\Windows\system32\shell32.dll'
338634f0.3aa4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbe0cf0000 'C:\Windows\system32\shell32.dll'
338734f0.3e08: '\Device\HarddiskVolume6\Windows\System32\tzres.dll' has no imports
338834f0.3e08: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume6\Windows\System32\tzres.dll)
338934f0.3e08: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume6\Windows\System32\tzres.dll
339034f0.3e08: supR3HardenedMonitor_NtCreateSection: NtMapViewOfSection failed on 0000000000000f10 (hFile=0000000000000eec) with 0xc0000022 -> STATUS_TRUST_FAILURE
339134f0.3e08: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume6\Windows\System32\tzres.dll [avoiding WinVerifyTrust]
339234f0.3e08: supR3HardenedMonitor_NtCreateSection: NtMapViewOfSection failed on 0000000000000eec (hFile=0000000000000f10) with 0xc0000022 -> STATUS_TRUST_FAILURE
339334f0.36c0: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000bb8 pwszName=\Device\HarddiskVolume6\Windows\System32\tzres.dll
339434f0.36c0: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 000000000181c280
339534f0.36c0: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=000000000181c280
339634f0.36c0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume6\Windows\System32\wintrust.dll
339734f0.36c0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\WINTRUST.DLL (Input=WINTRUST.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
339834f0.36c0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbdf450000 'C:\Windows\System32\WINTRUST.DLL'
339934f0.36c0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbdf760000 'C:\Windows\System32\CRYPT32.dll'
340034f0.36c0: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=D7221D349BF4BE7BB263BFBAD8DE6E60953ADB2A
340134f0.36c0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbddd10000 'C:\Windows\system32\rsaenh.dll'
340234f0.36c0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbdf760000 'C:\Windows\System32\crypt32.dll'
340334f0.36c0: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.18362.535.cat'; file='\Device\HarddiskVolume6\Windows\System32\tzres.dll'
340434f0.36c0: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
340534f0.36c0: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume6\Windows\System32\tzres.dll'
340634f0.36c0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffbe09f0000 'C:\Windows\system32\User32.dll'
340734f0.3e5c: supR3HardenedDllNotificationCallback: Unload 00007ffbdb2b0000 LB 0x0000d000 C:\Program Files\Oracle\VirtualBox\VBoxGuestPropSvc.DLL [flags=0x0]
340834f0.16e8: supR3HardenedDllNotificationCallback: Unload 00007ffbdb2f0000 LB 0x0000c000 C:\Program Files\Oracle\VirtualBox\VBoxGuestControlSvc.DLL [flags=0x0]
340934f0.1a58: supR3HardenedDllNotificationCallback: Unload 00007ffbd5fe0000 LB 0x00014000 C:\Program Files\Oracle\VirtualBox\VBoxSharedFolders.DLL [flags=0x0]
341034f0.be4: supR3HardenedDllNotificationCallback: Unload 00007ffbdb300000 LB 0x0000d000 C:\Program Files\Oracle\VirtualBox\VBoxDragAndDropSvc.DLL [flags=0x0]
341134f0.36c0: supR3HardenedDllNotificationCallback: Unload 00007ffbdb310000 LB 0x0000f000 C:\Program Files\Oracle\VirtualBox\VBoxSharedClipboard.DLL [flags=0x0]
341234f0.2f10: supR3HardenedDllNotificationCallback: Unload 00007ffbd78d0000 LB 0x00019000 C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbWebcamR3.DLL [flags=0x0]
341334f0.2f10: supR3HardenedDllNotificationCallback: Unload 00007ffbd8c50000 LB 0x00018000 C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbCardReaderR3.DLL [flags=0x0]
341434f0.2f10: supR3HardenedDllNotificationCallback: Unload 00007ffbdb260000 LB 0x00012000 C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxNvmeR3.DLL [flags=0x0]
341534f0.2f10: supR3HardenedDllNotificationCallback: Unload 00007ffbdb2c0000 LB 0x00018000 C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxEhciR3.DLL [flags=0x0]
341634f0.2f10: supR3HardenedDllNotificationCallback: Unload 00007ffbd79a0000 LB 0x00041000 C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.DLL [flags=0x0]
341734f0.2f10: supR3HardenedDllNotificationCallback: Unload 00007ffb7d700000 LB 0x009e1000 C:\Program Files\Oracle\VirtualBox\VBoxDD.DLL [flags=0x0]
341834f0.2f10: supR3HardenedDllNotificationCallback: Unload 00007ffbbaa00000 LB 0x00066000 C:\Program Files\Oracle\VirtualBox\VBoxDDU.dll [flags=0x0]
341934f0.2f10: supR3HardenedDllNotificationCallback: Unload 00007ffb79a40000 LB 0x0085c000 C:\Program Files\Oracle\VirtualBox\VBoxDD2.dll [flags=0x0]
342034f0.2f10: supR3HardenedDllNotificationCallback: Unload 00007ffbe0320000 LB 0x00470000 C:\Windows\System32\SETUPAPI.dll [flags=0x0]
342134f0.3aa4: supR3HardenedDllNotificationCallback: Unload 00007ffbdb320000 LB 0x0000e000 C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxPuelMainVM.DLL [flags=0x0]
342234f0.3aa4: supR3HardenedDllNotificationCallback: Unload 00007ffbc47b0000 LB 0x000ed000 C:\Program Files\Oracle\VirtualBox\VBoxProxyStub.dll [flags=0x0]
342334f0.3aa4: supR3HardenedDllNotificationCallback: Unload 00007ffbd6eb0000 LB 0x00014000 C:\Windows\system32\wbem\wbemsvc.dll [flags=0x0]
342434f0.3aa4: supR3HardenedDllNotificationCallback: Unload 00007ffbd7e60000 LB 0x00011000 C:\Windows\system32\wbem\wbemprox.dll [flags=0x0]
342534f0.3aa4: supR3HardenedDllNotificationCallback: Unload 00007ffbc6890000 LB 0x0003a000 C:\Windows\system32\dataexchange.dll [flags=0x0]
342634f0.3aa4: supR3HardenedDllNotificationCallback: Unload 00007ffbdc040000 LB 0x0025b000 C:\Windows\system32\d3d11.dll [flags=0x0]
342734f0.3aa4: supR3HardenedDllNotificationCallback: Unload 00007ffbdd760000 LB 0x000eb000 C:\Windows\system32\dxgi.dll [flags=0x0]
342834f0.3aa4: supR3HardenedDllNotificationCallback: Unload 00007ffbdc2a0000 LB 0x001db000 C:\Windows\system32\dcomp.dll [flags=0x0]
342934f0.3aa4: supR3HardenedDllNotificationCallback: Unload 00007ffbdcde0000 LB 0x0025a000 C:\Windows\system32\twinapi.appcore.dll [flags=0x0]
343034f0.3aa4: supR3HardenedDllNotificationCallback: Unload 00007ffbdd160000 LB 0x00029000 C:\Windows\system32\RMCLIENT.dll [flags=0x0]
343134f0.3aa4: supR3HardenedDllNotificationCallback: Unload 00007ffba2d40000 LB 0x003b0000 C:\Program Files\Oracle\VirtualBox\VBoxC.dll [flags=0x0]
343234f0.3aa4: supR3HardenedDllNotificationCallback: Unload 00007ffbd6ed0000 LB 0x00101000 C:\Windows\system32\wbem\fastprox.dll [flags=0x0]
343334f0.3aa4: supR3HardenedDllNotificationCallback: Unload 00007ffbd7dd0000 LB 0x00084000 C:\Windows\SYSTEM32\wbemcomn.dll [flags=0x0]
343434f0.3aa4: Terminating the normal way: rcExit=0
34353c64.2698: supR3HardNtChildWaitFor[2]: Quitting: ExitCode=0x0 (rcNtWait=0x0, rcNt1=0x0, rcNt2=0x103, rcNt3=0x103, 162964 ms, the end);
34361040.8e4: supR3HardNtChildWaitFor[1]: Quitting: ExitCode=0x0 (rcNtWait=0x0, rcNt1=0x0, rcNt2=0x103, rcNt3=0x103, 163377 ms, the end);

© 2024 Oracle Support Privacy / Do Not Sell My Info Terms of Use Trademark Policy