VirtualBox

Ticket #19566: VBoxHardening.log

File VBoxHardening.log, 448.3 KB (added by Kathir, 4 years ago)

VBox Hardening log file

Line 
12500.22a0: Log file opened: 6.1.4r136177 g_hStartupLog=0000000000000074 g_uNtVerCombined=0xa047ba00
22500.22a0: \SystemRoot\System32\ntdll.dll:
32500.22a0: CreationTime: 2020-05-01T05:42:42.642219500Z
42500.22a0: LastWriteTime: 2020-05-01T05:42:42.782293300Z
52500.22a0: ChangeTime: 2020-05-01T06:03:03.848551900Z
62500.22a0: FileAttributes: 0x20
72500.22a0: Size: 0x1e8458
82500.22a0: NT Headers: 0xd8
92500.22a0: Timestamp: 0xc1bb301
102500.22a0: Machine: 0x8664 - amd64
112500.22a0: Timestamp: 0xc1bb301
122500.22a0: Image Version: 10.0
132500.22a0: SizeOfImage: 0x1f0000 (2031616)
142500.22a0: Resource Dir: 0x17f000 LB 0x6f310
152500.22a0: [Version info resource found at 0xd8! (ID/Name: 0x1; SubID/SubName: 0x409)]
162500.22a0: [Raw version resource data: 0x17f0f0 LB 0x380, codepage 0x0 (reserved 0x0)]
172500.22a0: ProductName: Microsoft® Windows® Operating System
182500.22a0: ProductVersion: 10.0.18362.778
192500.22a0: FileVersion: 10.0.18362.778 (WinBuild.160101.0800)
202500.22a0: FileDescription: NT Layer DLL
212500.22a0: \SystemRoot\System32\kernel32.dll:
222500.22a0: CreationTime: 2020-05-01T05:41:16.762345900Z
232500.22a0: LastWriteTime: 2020-05-01T05:41:16.918106500Z
242500.22a0: ChangeTime: 2020-05-01T06:02:33.440195200Z
252500.22a0: FileAttributes: 0x20
262500.22a0: Size: 0xb0498
272500.22a0: NT Headers: 0xe8
282500.22a0: Timestamp: 0x21b07e83
292500.22a0: Machine: 0x8664 - amd64
302500.22a0: Timestamp: 0x21b07e83
312500.22a0: Image Version: 10.0
322500.22a0: SizeOfImage: 0xb2000 (729088)
332500.22a0: Resource Dir: 0xb0000 LB 0x520
342500.22a0: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
352500.22a0: [Raw version resource data: 0xb00b0 LB 0x3a4, codepage 0x0 (reserved 0x0)]
362500.22a0: ProductName: Microsoft® Windows® Operating System
372500.22a0: ProductVersion: 10.0.18362.778
382500.22a0: FileVersion: 10.0.18362.778 (WinBuild.160101.0800)
392500.22a0: FileDescription: Windows NT BASE API Client DLL
402500.22a0: \SystemRoot\System32\KernelBase.dll:
412500.22a0: CreationTime: 2020-05-01T05:42:51.265086400Z
422500.22a0: LastWriteTime: 2020-05-01T05:42:51.452114900Z
432500.22a0: ChangeTime: 2020-05-01T06:02:57.532539200Z
442500.22a0: FileAttributes: 0x20
452500.22a0: Size: 0x2a3c38
462500.22a0: NT Headers: 0xf0
472500.22a0: Timestamp: 0xafa78a6a
482500.22a0: Machine: 0x8664 - amd64
492500.22a0: Timestamp: 0xafa78a6a
502500.22a0: Image Version: 10.0
512500.22a0: SizeOfImage: 0x2a3000 (2764800)
522500.22a0: Resource Dir: 0x27d000 LB 0x548
532500.22a0: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
542500.22a0: [Raw version resource data: 0x27d0b0 LB 0x3bc, codepage 0x0 (reserved 0x0)]
552500.22a0: ProductName: Microsoft® Windows® Operating System
562500.22a0: ProductVersion: 10.0.18362.778
572500.22a0: FileVersion: 10.0.18362.778 (WinBuild.160101.0800)
582500.22a0: FileDescription: Windows NT BASE API Client DLL
592500.22a0: \SystemRoot\System32\apisetschema.dll:
602500.22a0: CreationTime: 2019-03-19T04:43:54.837151500Z
612500.22a0: LastWriteTime: 2019-03-19T04:43:54.837151500Z
622500.22a0: ChangeTime: 2020-05-01T05:49:09.335363700Z
632500.22a0: FileAttributes: 0x20
642500.22a0: Size: 0x1d028
652500.22a0: NT Headers: 0xc8
662500.22a0: Timestamp: 0xd6ced080
672500.22a0: Machine: 0x8664 - amd64
682500.22a0: Timestamp: 0xd6ced080
692500.22a0: Image Version: 10.0
702500.22a0: SizeOfImage: 0x1e000 (122880)
712500.22a0: Resource Dir: 0x1d000 LB 0x408
722500.22a0: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
732500.22a0: [Raw version resource data: 0x1d060 LB 0x3a8, codepage 0x0 (reserved 0x0)]
742500.22a0: ProductName: Microsoft® Windows® Operating System
752500.22a0: ProductVersion: 10.0.18362.1
762500.22a0: FileVersion: 10.0.18362.1 (WinBuild.160101.0800)
772500.22a0: FileDescription: ApiSet Schema DLL
782500.22a0: NtOpenDirectoryObject failed on \Driver: 0xc0000022
792500.22a0: supR3HardenedWinFindAdversaries: 0x0
802500.22a0: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox'
812500.22a0: Calling main()
822500.22a0: SUPR3HardenedMain: pszProgName=VirtualBoxVM fFlags=0x2
832500.22a0: supR3HardenedWinInitAppBin(0x2): '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox'
842500.22a0: SUPR3HardenedMain: Respawn #1
852500.22a0: System32: \Device\HarddiskVolume3\Windows\System32
862500.22a0: WinSxS: \Device\HarddiskVolume3\Windows\WinSxS
872500.22a0: KnownDllPath: C:\WINDOWS\System32
882500.22a0: supR3HardenedWinInit: Performing a limited self purification...
892500.22a0: supHardNtVpScanVirtualMemory: enmKind=SELF_PURIFICATION
902500.22a0: *0000000000000000-00000000003fffff 0x0001/0x0000 0x0000000
912500.22a0: *0000000000400000-0000000000594fff 0x0000/0x0004 0x0020000
922500.22a0: 0000000000595000-0000000000597fff 0x0004/0x0004 0x0020000
932500.22a0: 0000000000598000-00000000005fffff 0x0000/0x0004 0x0020000
942500.22a0: *0000000000600000-000000000060ffff 0x0004/0x0004 0x0040000
952500.22a0: 0000000000610000-000000000061ffff 0x0001/0x0000 0x0000000
962500.22a0: *0000000000620000-000000000063afff 0x0002/0x0002 0x0040000
972500.22a0: 000000000063b000-000000000063ffff 0x0001/0x0000 0x0000000
982500.22a0: *0000000000640000-00000000006f8fff 0x0000/0x0004 0x0020000
992500.22a0: 00000000006f9000-00000000006fbfff 0x0104/0x0004 0x0020000
1002500.22a0: 00000000006fc000-000000000073ffff 0x0004/0x0004 0x0020000
1012500.22a0: *0000000000740000-0000000000743fff 0x0002/0x0002 0x0040000
1022500.22a0: 0000000000744000-000000000074ffff 0x0001/0x0000 0x0000000
1032500.22a0: *0000000000750000-0000000000751fff 0x0004/0x0004 0x0020000
1042500.22a0: 0000000000752000-000000000075ffff 0x0001/0x0000 0x0000000
1052500.22a0: *0000000000760000-0000000000826fff 0x0002/0x0002 0x0040000
1062500.22a0: 0000000000827000-000000000082ffff 0x0001/0x0000 0x0000000
1072500.22a0: *0000000000830000-0000000000831fff 0x0004/0x0004 0x0020000
1082500.22a0: 0000000000832000-0000000000849fff 0x0000/0x0004 0x0020000
1092500.22a0: 000000000084a000-000000000087ffff 0x0001/0x0000 0x0000000
1102500.22a0: *0000000000880000-0000000000884fff 0x0004/0x0004 0x0020000
1112500.22a0: 0000000000885000-000000000097ffff 0x0000/0x0004 0x0020000
1122500.22a0: *0000000000980000-000000000099cfff 0x0004/0x0004 0x0020000
1132500.22a0: 000000000099d000-0000000000a7ffff 0x0000/0x0004 0x0020000
1142500.22a0: 0000000000a80000-0000000000b4ffff 0x0001/0x0000 0x0000000
1152500.22a0: *0000000000b50000-0000000000b5efff 0x0004/0x0004 0x0020000
1162500.22a0: 0000000000b5f000-0000000000b5ffff 0x0000/0x0004 0x0020000
1172500.22a0: *0000000000b60000-0000000000b68fff 0x0000/0x0004 0x0020000
1182500.22a0: 0000000000b69000-0000000000d59fff 0x0004/0x0004 0x0020000
1192500.22a0: 0000000000d5a000-0000000000d5afff 0x0000/0x0004 0x0020000
1202500.22a0: 0000000000d5b000-000000007ffdffff 0x0001/0x0000 0x0000000
1212500.22a0: *000000007ffe0000-000000007ffe0fff 0x0002/0x0002 0x0020000
1222500.22a0: *000000007ffe1000-000000007ffe1fff 0x0002/0x0002 0x0020000
1232500.22a0: 000000007ffe2000-00007ff4b0ceffff 0x0001/0x0000 0x0000000
1242500.22a0: *00007ff4b0cf0000-00007ff4b0cf4fff 0x0002/0x0002 0x0040000
1252500.22a0: 00007ff4b0cf5000-00007ff4b0deffff 0x0000/0x0002 0x0040000
1262500.22a0: *00007ff4b0df0000-00007ff5b0e0ffff 0x0000/0x0004 0x0020000
1272500.22a0: *00007ff5b0e10000-00007ff5b2e0ffff 0x0000/0x0004 0x0020000
1282500.22a0: 00007ff5b2e10000-00007ff5b2e10fff 0x0004/0x0004 0x0020000
1292500.22a0: 00007ff5b2e11000-00007ff5b2e1ffff 0x0001/0x0000 0x0000000
1302500.22a0: *00007ff5b2e20000-00007ff5b2e20fff 0x0002/0x0002 0x0040000
1312500.22a0: 00007ff5b2e21000-00007ff5b2e2ffff 0x0001/0x0000 0x0000000
1322500.22a0: *00007ff5b2e30000-00007ff5b2e52fff 0x0002/0x0002 0x0040000
1332500.22a0: 00007ff5b2e53000-00007ff6efcaffff 0x0001/0x0000 0x0000000
1342500.22a0: *00007ff6efcb0000-00007ff6efcb0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
1352500.22a0: 00007ff6efcb1000-00007ff6efd26fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
1362500.22a0: 00007ff6efd27000-00007ff6efd27fff 0x0080/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
1372500.22a0: 00007ff6efd28000-00007ff6efd6ffff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
1382500.22a0: 00007ff6efd70000-00007ff6efd72fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
1392500.22a0: 00007ff6efd73000-00007ff6efd75fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
1402500.22a0: 00007ff6efd76000-00007ff6efd78fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
1412500.22a0: 00007ff6efd79000-00007ff6efd79fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
1422500.22a0: 00007ff6efd7a000-00007ff6efd7bfff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
1432500.22a0: 00007ff6efd7c000-00007ff6efd7cfff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
1442500.22a0: 00007ff6efd7d000-00007ff6efdc5fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
1452500.22a0: 00007ff6efdc6000-00007ffcf5f9ffff 0x0001/0x0000 0x0000000
1462500.22a0: *00007ffcf5fa0000-00007ffcf5fa0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\KernelBase.dll
1472500.22a0: 00007ffcf5fa1000-00007ffcf60a5fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\KernelBase.dll
1482500.22a0: 00007ffcf60a6000-00007ffcf6207fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\KernelBase.dll
1492500.22a0: 00007ffcf6208000-00007ffcf620bfff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\KernelBase.dll
1502500.22a0: 00007ffcf620c000-00007ffcf620cfff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\KernelBase.dll
1512500.22a0: 00007ffcf620d000-00007ffcf6242fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\KernelBase.dll
1522500.22a0: 00007ffcf6243000-00007ffcf869ffff 0x0001/0x0000 0x0000000
1532500.22a0: *00007ffcf86a0000-00007ffcf86a0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\kernel32.dll
1542500.22a0: 00007ffcf86a1000-00007ffcf8715fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\kernel32.dll
1552500.22a0: 00007ffcf8716000-00007ffcf8747fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\kernel32.dll
1562500.22a0: 00007ffcf8748000-00007ffcf8748fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\kernel32.dll
1572500.22a0: 00007ffcf8749000-00007ffcf8749fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\kernel32.dll
1582500.22a0: 00007ffcf874a000-00007ffcf8751fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\kernel32.dll
1592500.22a0: 00007ffcf8752000-00007ffcf8e5ffff 0x0001/0x0000 0x0000000
1602500.22a0: *00007ffcf8e60000-00007ffcf8e60fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
1612500.22a0: 00007ffcf8e61000-00007ffcf8f77fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
1622500.22a0: 00007ffcf8f78000-00007ffcf8fbefff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
1632500.22a0: 00007ffcf8fbf000-00007ffcf8fbffff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
1642500.22a0: 00007ffcf8fc0000-00007ffcf8fc1fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
1652500.22a0: 00007ffcf8fc2000-00007ffcf8fcafff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
1662500.22a0: 00007ffcf8fcb000-00007ffcf904ffff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
1672500.22a0: 00007ffcf9050000-00007ffffffeffff 0x0001/0x0000 0x0000000
1682500.22a0: kernel32.dll: timestamp 0x21b07e83 (rc=VINF_SUCCESS)
1692500.22a0: kernelbase.dll: timestamp 0xafa78a6a (rc=VINF_SUCCESS)
1702500.22a0: VirtualBoxVM.exe: timestamp 0x5e4c1d19 (rc=VINF_SUCCESS)
1712500.22a0: '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe' has no imports
1722500.22a0: '\Device\HarddiskVolume3\Windows\System32\ntdll.dll' has no imports
1732500.22a0: supR3HardenedWinInit: SUPHARDNTVPKIND_SELF_PURIFICATION_LIMITED -> VINF_SUCCESS, cFixes=0
1742500.22a0: '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe' has no imports
1752500.22a0: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe)
1762500.22a0: supR3HardNtEnableThreadCreationEx:
1772500.22a0: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007ffcf8ed1770 pvNtTerminateThread=00007ffcf8efcac0
1782500.22a0: supR3HardenedWinDoReSpawn(1): New child 27d4.228c [kernel32].
1792500.22a0: supR3HardNtChildGatherData: PebBaseAddress=00000000002da000 cbPeb=0x388
1802500.22a0: supR3HardNtPuChFindNtdll: uNtDllParentAddr=00007ffcf8e60000 uNtDllChildAddr=00007ffcf8e60000
1812500.22a0: supR3HardenedWinSetupChildInit: uLdrInitThunk=00007ffcf8ed1770
1822500.22a0: supR3HardenedWinSetupChildInit: Initial context:
183 rax=0000000000000000 rbx=0000000000000000 rcx=00007ff6efcb7900 rdx=00000000002da000
184 rsi=0000000000000000 rdi=0000000000000000 r8 =0000000000000000 r9 =0000000000000000
185 r10=0000000000000000 r11=0000000000000000 r12=0000000000000000 r13=0000000000000000
186 r14=0000000000000000 r15=0000000000000000 P1=0000000000000000 P2=0000000000000000
187 rip=00007ffcf8ecce30 rsp=00000000004ffc68 rbp=0000000000000000 ctxflags=0010001b
188 cs=0033 ss=002b ds=0000 es=0000 fs=0000 gs=0000 eflags=00000200 mxcrx=00001f80
189 P3=0000000000000000 P4=0000000000000000 P5=0000000000000000 P6=0000000000000000
190 dr0=0000000000000000 dr1=0000000000000000 dr2=0000000000000000 dr3=0000000000000000
191 dr6=0000000000000000 dr7=0000000000000000 vcr=0000000000000000 dcr=0000000000000000
192 lbt=0000000000000000 lbf=0000000000000000 lxt=0000000000000000 lxf=0000000000000000
1932500.22a0: supR3HardenedWinSetupChildInit: Start child.
1942500.22a0: supR3HardNtChildWaitFor: Found expected request 0 (PurifyChildAndCloseHandles) after 0 ms.
1952500.22a0: supR3HardNtChildPurify: Startup delay kludge #1/0: 267 ms, 15 sleeps
1962500.22a0: supHardNtVpScanVirtualMemory: enmKind=CHILD_PURIFICATION
1972500.22a0: *0000000000000000-00000000000dffff 0x0001/0x0000 0x0000000
1982500.22a0: *00000000000e0000-00000000000fffff 0x0004/0x0004 0x0020000
1992500.22a0: *0000000000100000-000000000011afff 0x0002/0x0002 0x0040000
2002500.22a0: 000000000011b000-000000000011ffff 0x0001/0x0000 0x0000000
2012500.22a0: *0000000000120000-0000000000123fff 0x0002/0x0002 0x0040000
2022500.22a0: 0000000000124000-000000000012ffff 0x0001/0x0000 0x0000000
2032500.22a0: *0000000000130000-0000000000131fff 0x0004/0x0004 0x0020000
2042500.22a0: 0000000000132000-00000000001fffff 0x0001/0x0000 0x0000000
2052500.22a0: *0000000000200000-00000000002d9fff 0x0000/0x0004 0x0020000
2062500.22a0: 00000000002da000-00000000002dcfff 0x0004/0x0004 0x0020000
2072500.22a0: 00000000002dd000-00000000003fffff 0x0000/0x0004 0x0020000
2082500.22a0: *0000000000400000-00000000004fafff 0x0000/0x0004 0x0020000
2092500.22a0: 00000000004fb000-00000000004fdfff 0x0104/0x0004 0x0020000
2102500.22a0: 00000000004fe000-00000000004fffff 0x0004/0x0004 0x0020000
2112500.22a0: 0000000000500000-000000007ffdffff 0x0001/0x0000 0x0000000
2122500.22a0: *000000007ffe0000-000000007ffe0fff 0x0002/0x0002 0x0020000
2132500.22a0: *000000007ffe1000-000000007ffe1fff 0x0002/0x0002 0x0020000
2142500.22a0: 000000007ffe2000-00007ff5907effff 0x0001/0x0000 0x0000000
2152500.22a0: *00007ff5907f0000-00007ff5907f0fff 0x0002/0x0002 0x0040000
2162500.22a0: 00007ff5907f1000-00007ff5907fffff 0x0001/0x0000 0x0000000
2172500.22a0: *00007ff590800000-00007ff590822fff 0x0002/0x0002 0x0040000
2182500.22a0: 00007ff590823000-00007ff6efcaffff 0x0001/0x0000 0x0000000
2192500.22a0: *00007ff6efcb0000-00007ff6efcb0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
2202500.22a0: 00007ff6efcb1000-00007ff6efd26fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
2212500.22a0: 00007ff6efd27000-00007ff6efd27fff 0x0080/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
2222500.22a0: 00007ff6efd28000-00007ff6efd6ffff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
2232500.22a0: 00007ff6efd70000-00007ff6efd70fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
2242500.22a0: 00007ff6efd71000-00007ff6efd71fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
2252500.22a0: 00007ff6efd72000-00007ff6efd76fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
2262500.22a0: 00007ff6efd77000-00007ff6efd77fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
2272500.22a0: 00007ff6efd78000-00007ff6efd78fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
2282500.22a0: 00007ff6efd79000-00007ff6efd7cfff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
2292500.22a0: 00007ff6efd7d000-00007ff6efdc5fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
2302500.22a0: 00007ff6efdc6000-00007ffcf8e5ffff 0x0001/0x0000 0x0000000
2312500.22a0: *00007ffcf8e60000-00007ffcf8e60fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
2322500.22a0: 00007ffcf8e61000-00007ffcf8f77fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
2332500.22a0: 00007ffcf8f78000-00007ffcf8fbefff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
2342500.22a0: 00007ffcf8fbf000-00007ffcf8fcafff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
2352500.22a0: 00007ffcf8fcb000-00007ffcf8fd9fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
2362500.22a0: 00007ffcf8fda000-00007ffcf8fdafff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
2372500.22a0: 00007ffcf8fdb000-00007ffcf8fddfff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
2382500.22a0: 00007ffcf8fde000-00007ffcf904ffff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
2392500.22a0: 00007ffcf9050000-00007ffffffeffff 0x0001/0x0000 0x0000000
2402500.22a0: supR3HardNtChildPurify: Done after 282 ms and 0 fixes (loop #0).
24127d4.228c: Log file opened: 6.1.4r136177 g_hStartupLog=0000000000000004 g_uNtVerCombined=0xa047ba00
24227d4.228c: supR3HardenedVmProcessInit: uNtDllAddr=00007ffcf8e60000 g_uNtVerCombined=0xa047ba00 (stack ~00000000004ff6f8)
24327d4.228c: ntdll.dll: timestamp 0xc1bb301 (rc=VINF_SUCCESS)
24427d4.228c: New simple heap: #1 0000000000600000 LB 0x400000 (for 2031616 allocation)
2452500.22a0: supR3HardNtEnableThreadCreationEx:
24627d4.228c: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox'
24727d4.228c: System32: \Device\HarddiskVolume3\Windows\System32
24827d4.228c: WinSxS: \Device\HarddiskVolume3\Windows\WinSxS
24927d4.228c: KnownDllPath: C:\WINDOWS\System32
25027d4.228c: supR3HardenedVmProcessInit: Opening vboxdrv stub...
25127d4.228c: supR3HardenedVmProcessInit: Restoring LdrInitializeThunk...
25227d4.228c: supR3HardenedVmProcessInit: Returning to LdrInitializeThunk...
25327d4.228c: Registered Dll notification callback with NTDLL.
25427d4.228c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\kernel32.dll)
25527d4.228c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\kernel32.dll
25627d4.228c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\KERNEL32.DLL (Input=KERNEL32.DLL, rcNtResolve=0xc0150008) *pfFlags=0xffffffff pwszSearchPath=0000000000004001:<flags> [calling]
25727d4.228c: supR3HardenedDllNotificationCallback: load 00007ffcf5fa0000 LB 0x002a3000 C:\WINDOWS\System32\KERNELBASE.dll [fFlags=0x0]
25827d4.228c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\KernelBase.dll)
25927d4.228c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\KernelBase.dll
26027d4.228c: supR3HardenedDllNotificationCallback: load 00007ffcf86a0000 LB 0x000b2000 C:\WINDOWS\System32\KERNEL32.DLL [fFlags=0x0]
26127d4.228c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
26227d4.228c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf86a0000 'C:\WINDOWS\System32\KERNEL32.DLL'
26327d4.228c: supR3HardenedDllNotificationCallback: load 00007ff6efcb0000 LB 0x00116000 C:\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe [fFlags=0x0]
26427d4.228c: '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe' has no imports
26527d4.228c: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe)
26627d4.228c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
26727d4.228c: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007ffcf8ed1770 pvNtTerminateThread=00007ffcf8efcac0
2682500.22a0: supR3HardNtChildWaitFor: Found expected request 1 (CloseEvents) after 124 ms.
26927d4.228c: \SystemRoot\System32\ntdll.dll:
27027d4.228c: CreationTime: 2020-05-01T05:42:42.642219500Z
27127d4.228c: LastWriteTime: 2020-05-01T05:42:42.782293300Z
27227d4.228c: ChangeTime: 2020-05-01T06:03:03.848551900Z
27327d4.228c: FileAttributes: 0x20
27427d4.228c: Size: 0x1e8458
27527d4.228c: NT Headers: 0xd8
27627d4.228c: Timestamp: 0xc1bb301
27727d4.228c: Machine: 0x8664 - amd64
27827d4.228c: Timestamp: 0xc1bb301
27927d4.228c: Image Version: 10.0
28027d4.228c: SizeOfImage: 0x1f0000 (2031616)
28127d4.228c: Resource Dir: 0x17f000 LB 0x6f310
28227d4.228c: [Version info resource found at 0xd8! (ID/Name: 0x1; SubID/SubName: 0x409)]
28327d4.228c: [Raw version resource data: 0x17f0f0 LB 0x380, codepage 0x0 (reserved 0x0)]
28427d4.228c: ProductName: Microsoft® Windows® Operating System
28527d4.228c: ProductVersion: 10.0.18362.778
28627d4.228c: FileVersion: 10.0.18362.778 (WinBuild.160101.0800)
28727d4.228c: FileDescription: NT Layer DLL
28827d4.228c: \SystemRoot\System32\kernel32.dll:
28927d4.228c: CreationTime: 2020-05-01T05:41:16.762345900Z
29027d4.228c: LastWriteTime: 2020-05-01T05:41:16.918106500Z
29127d4.228c: ChangeTime: 2020-05-01T06:02:33.440195200Z
29227d4.228c: FileAttributes: 0x20
29327d4.228c: Size: 0xb0498
29427d4.228c: NT Headers: 0xe8
29527d4.228c: Timestamp: 0x21b07e83
29627d4.228c: Machine: 0x8664 - amd64
29727d4.228c: Timestamp: 0x21b07e83
29827d4.228c: Image Version: 10.0
29927d4.228c: SizeOfImage: 0xb2000 (729088)
30027d4.228c: Resource Dir: 0xb0000 LB 0x520
30127d4.228c: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
30227d4.228c: [Raw version resource data: 0xb00b0 LB 0x3a4, codepage 0x0 (reserved 0x0)]
30327d4.228c: ProductName: Microsoft® Windows® Operating System
30427d4.228c: ProductVersion: 10.0.18362.778
30527d4.228c: FileVersion: 10.0.18362.778 (WinBuild.160101.0800)
30627d4.228c: FileDescription: Windows NT BASE API Client DLL
30727d4.228c: \SystemRoot\System32\KernelBase.dll:
30827d4.228c: CreationTime: 2020-05-01T05:42:51.265086400Z
30927d4.228c: LastWriteTime: 2020-05-01T05:42:51.452114900Z
31027d4.228c: ChangeTime: 2020-05-01T06:02:57.532539200Z
31127d4.228c: FileAttributes: 0x20
31227d4.228c: Size: 0x2a3c38
31327d4.228c: NT Headers: 0xf0
31427d4.228c: Timestamp: 0xafa78a6a
31527d4.228c: Machine: 0x8664 - amd64
31627d4.228c: Timestamp: 0xafa78a6a
31727d4.228c: Image Version: 10.0
31827d4.228c: SizeOfImage: 0x2a3000 (2764800)
31927d4.228c: Resource Dir: 0x27d000 LB 0x548
32027d4.228c: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
32127d4.228c: [Raw version resource data: 0x27d0b0 LB 0x3bc, codepage 0x0 (reserved 0x0)]
32227d4.228c: ProductName: Microsoft® Windows® Operating System
32327d4.228c: ProductVersion: 10.0.18362.778
32427d4.228c: FileVersion: 10.0.18362.778 (WinBuild.160101.0800)
32527d4.228c: FileDescription: Windows NT BASE API Client DLL
32627d4.228c: \SystemRoot\System32\apisetschema.dll:
32727d4.228c: CreationTime: 2019-03-19T04:43:54.837151500Z
32827d4.228c: LastWriteTime: 2019-03-19T04:43:54.837151500Z
32927d4.228c: ChangeTime: 2020-05-01T05:49:09.335363700Z
33027d4.228c: FileAttributes: 0x20
33127d4.228c: Size: 0x1d028
33227d4.228c: NT Headers: 0xc8
33327d4.228c: Timestamp: 0xd6ced080
33427d4.228c: Machine: 0x8664 - amd64
33527d4.228c: Timestamp: 0xd6ced080
33627d4.228c: Image Version: 10.0
33727d4.228c: SizeOfImage: 0x1e000 (122880)
33827d4.228c: Resource Dir: 0x1d000 LB 0x408
33927d4.228c: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
34027d4.228c: [Raw version resource data: 0x1d060 LB 0x3a8, codepage 0x0 (reserved 0x0)]
34127d4.228c: ProductName: Microsoft® Windows® Operating System
34227d4.228c: ProductVersion: 10.0.18362.1
34327d4.228c: FileVersion: 10.0.18362.1 (WinBuild.160101.0800)
34427d4.228c: FileDescription: ApiSet Schema DLL
34527d4.228c: NtOpenDirectoryObject failed on \Driver: 0xc0000022
34627d4.228c: supR3HardenedWinFindAdversaries: 0x0
34727d4.228c: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox'
34827d4.228c: Calling main()
34927d4.228c: SUPR3HardenedMain: pszProgName=VirtualBoxVM fFlags=0x2
35027d4.228c: supR3HardenedWinInitAppBin(0x2): '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox'
35127d4.228c: '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe' has no imports
35227d4.228c: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe)
35327d4.228c: SUPR3HardenedMain: Respawn #2
35427d4.228c: supR3HardNtEnableThreadCreationEx:
35527d4.228c: supR3HardenedDllNotificationCallback: load 00007ffcf7e40000 LB 0x00120000 C:\WINDOWS\System32\RPCRT4.dll [fFlags=0x0]
35627d4.228c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll)
35727d4.228c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll
35827d4.228c: supR3HardenedDllNotificationCallback: load 00007ffcf8600000 LB 0x00097000 C:\WINDOWS\System32\sechost.dll [fFlags=0x0]
35927d4.228c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'rpcrt4.dll'.
36027d4.228c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\sechost.dll)
36127d4.228c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\sechost.dll
36227d4.228c: '\Device\HarddiskVolume3\Windows\System32\ntdll.dll' has no imports
36327d4.228c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\ntdll.dll)
36427d4.228c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\ntdll.dll
36527d4.228c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
36627d4.228c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
36727d4.228c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
36827d4.228c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\ntdll.dll (Input=ntdll.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
36927d4.228c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf8e60000 'C:\WINDOWS\System32\ntdll.dll'
37027d4.228c: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007ffcf8ed1770 pvNtTerminateThread=00007ffcf8efcac0
37127d4.228c: supR3HardenedWinDoReSpawn(2): New child 1c64.15c4 [kernel32].
37227d4.228c: supR3HardenedWinReSpawn: NtSetInformationThread/ThreadHideFromDebugger failed: 0xc0000022 (harmless)
37327d4.228c: supR3HardNtChildGatherData: PebBaseAddress=0000000000ded000 cbPeb=0x388
37427d4.228c: supR3HardNtPuChFindNtdll: uNtDllParentAddr=00007ffcf8e60000 uNtDllChildAddr=00007ffcf8e60000
37527d4.228c: supR3HardenedWinSetupChildInit: uLdrInitThunk=00007ffcf8ed1770
37627d4.228c: supR3HardenedWinSetupChildInit: Initial context:
377 rax=0000000000000000 rbx=0000000000000000 rcx=00007ff6efcb7900 rdx=0000000000ded000
378 rsi=0000000000000000 rdi=0000000000000000 r8 =0000000000000000 r9 =0000000000000000
379 r10=0000000000000000 r11=0000000000000000 r12=0000000000000000 r13=0000000000000000
380 r14=0000000000000000 r15=0000000000000000 P1=0000000000000000 P2=0000000000000000
381 rip=00007ffcf8ecce30 rsp=0000000000f1fb08 rbp=0000000000000000 ctxflags=0010001b
382 cs=0033 ss=002b ds=0000 es=0000 fs=0000 gs=0000 eflags=00000200 mxcrx=00001f80
383 P3=0000000000000000 P4=0000000000000000 P5=0000000000000000 P6=0000000000000000
384 dr0=0000000000000000 dr1=0000000000000000 dr2=0000000000000000 dr3=0000000000000000
385 dr6=0000000000000000 dr7=0000000000000000 vcr=0000000000000000 dcr=0000000000000000
386 lbt=0000000000000000 lbf=0000000000000000 lxt=0000000000000000 lxf=0000000000000000
38727d4.228c: kernel32.dll: timestamp 0x21b07e83 (rc=VINF_SUCCESS)
38827d4.228c: supR3HardenedWinSetupChildInit: Start child.
38927d4.228c: supR3HardNtChildWaitFor: Found expected request 0 (PurifyChildAndCloseHandles) after 0 ms.
39027d4.228c: supR3HardNtChildPurify: Startup delay kludge #1/0: 267 ms, 16 sleeps
39127d4.228c: supHardNtVpScanVirtualMemory: enmKind=CHILD_PURIFICATION
39227d4.228c: *0000000000000000-0000000000bcffff 0x0001/0x0000 0x0000000
39327d4.228c: *0000000000bd0000-0000000000beffff 0x0004/0x0004 0x0020000
39427d4.228c: *0000000000bf0000-0000000000bf3fff 0x0002/0x0002 0x0040000
39527d4.228c: 0000000000bf4000-0000000000bfffff 0x0001/0x0000 0x0000000
39627d4.228c: *0000000000c00000-0000000000decfff 0x0000/0x0004 0x0020000
39727d4.228c: 0000000000ded000-0000000000deffff 0x0004/0x0004 0x0020000
39827d4.228c: 0000000000df0000-0000000000dfffff 0x0000/0x0004 0x0020000
39927d4.228c: *0000000000e00000-0000000000e1afff 0x0002/0x0002 0x0040000
40027d4.228c: 0000000000e1b000-0000000000e1ffff 0x0001/0x0000 0x0000000
40127d4.228c: *0000000000e20000-0000000000f1afff 0x0000/0x0004 0x0020000
40227d4.228c: 0000000000f1b000-0000000000f1dfff 0x0104/0x0004 0x0020000
40327d4.228c: 0000000000f1e000-0000000000f1ffff 0x0004/0x0004 0x0020000
40427d4.228c: *0000000000f20000-0000000000f21fff 0x0004/0x0004 0x0020000
40527d4.228c: 0000000000f22000-000000007ffdffff 0x0001/0x0000 0x0000000
40627d4.228c: *000000007ffe0000-000000007ffe0fff 0x0002/0x0002 0x0020000
40727d4.228c: *000000007ffe1000-000000007ffe1fff 0x0002/0x0002 0x0020000
40827d4.228c: 000000007ffe2000-00007ff59f2fffff 0x0001/0x0000 0x0000000
40927d4.228c: *00007ff59f300000-00007ff59f300fff 0x0002/0x0002 0x0040000
41027d4.228c: 00007ff59f301000-00007ff59f30ffff 0x0001/0x0000 0x0000000
41127d4.228c: *00007ff59f310000-00007ff59f332fff 0x0002/0x0002 0x0040000
41227d4.228c: 00007ff59f333000-00007ff6efcaffff 0x0001/0x0000 0x0000000
41327d4.228c: *00007ff6efcb0000-00007ff6efcb0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
41427d4.228c: 00007ff6efcb1000-00007ff6efd26fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
41527d4.228c: 00007ff6efd27000-00007ff6efd27fff 0x0080/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
41627d4.228c: 00007ff6efd28000-00007ff6efd6ffff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
41727d4.228c: 00007ff6efd70000-00007ff6efd70fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
41827d4.228c: 00007ff6efd71000-00007ff6efd71fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
41927d4.228c: 00007ff6efd72000-00007ff6efd76fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
42027d4.228c: 00007ff6efd77000-00007ff6efd77fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
42127d4.228c: 00007ff6efd78000-00007ff6efd78fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
42227d4.228c: 00007ff6efd79000-00007ff6efd7cfff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
42327d4.228c: 00007ff6efd7d000-00007ff6efdc5fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
42427d4.228c: 00007ff6efdc6000-00007ffcf8e5ffff 0x0001/0x0000 0x0000000
42527d4.228c: *00007ffcf8e60000-00007ffcf8e60fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
42627d4.228c: 00007ffcf8e61000-00007ffcf8f77fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
42727d4.228c: 00007ffcf8f78000-00007ffcf8fbefff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
42827d4.228c: 00007ffcf8fbf000-00007ffcf8fcafff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
42927d4.228c: 00007ffcf8fcb000-00007ffcf8fd9fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
43027d4.228c: 00007ffcf8fda000-00007ffcf8fdafff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
43127d4.228c: 00007ffcf8fdb000-00007ffcf8fddfff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
43227d4.228c: 00007ffcf8fde000-00007ffcf904ffff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
43327d4.228c: 00007ffcf9050000-00007ffffffeffff 0x0001/0x0000 0x0000000
43427d4.228c: VirtualBoxVM.exe: timestamp 0x5e4c1d19 (rc=VINF_SUCCESS)
43527d4.228c: '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe' has no imports
43627d4.228c: '\Device\HarddiskVolume3\Windows\System32\ntdll.dll' has no imports
43727d4.228c: supR3HardNtChildPurify: Done after 314 ms and 0 fixes (loop #0).
4381c64.15c4: Log file opened: 6.1.4r136177 g_hStartupLog=0000000000000004 g_uNtVerCombined=0xa047ba00
4391c64.15c4: supR3HardenedVmProcessInit: uNtDllAddr=00007ffcf8e60000 g_uNtVerCombined=0xa047ba00 (stack ~0000000000f1f598)
4401c64.15c4: ntdll.dll: timestamp 0xc1bb301 (rc=VINF_SUCCESS)
4411c64.15c4: New simple heap: #1 0000000001030000 LB 0x400000 (for 2031616 allocation)
44227d4.228c: supR3HardenedEarlyCompact: Removed heap 1 (0x00000000600000 LB 0x400000)
44327d4.228c: supR3HardNtEnableThreadCreationEx:
4441c64.15c4: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox'
4451c64.15c4: System32: \Device\HarddiskVolume3\Windows\System32
4461c64.15c4: WinSxS: \Device\HarddiskVolume3\Windows\WinSxS
4471c64.15c4: KnownDllPath: C:\WINDOWS\System32
4481c64.15c4: supR3HardenedVmProcessInit: Opening vboxdrv...
4491c64.15c4: supR3HardenedVmProcessInit: Restoring LdrInitializeThunk...
4501c64.15c4: supR3HardenedVmProcessInit: Returning to LdrInitializeThunk...
4511c64.15c4: Registered Dll notification callback with NTDLL.
4521c64.15c4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\kernel32.dll)
4531c64.15c4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\kernel32.dll
4541c64.15c4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\KERNEL32.DLL (Input=KERNEL32.DLL, rcNtResolve=0xc0150008) *pfFlags=0xffffffff pwszSearchPath=0000000000004001:<flags> [calling]
4551c64.15c4: supR3HardenedDllNotificationCallback: load 00007ffcf5fa0000 LB 0x002a3000 C:\WINDOWS\System32\KERNELBASE.dll [fFlags=0x0]
4561c64.15c4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\KernelBase.dll)
4571c64.15c4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\KernelBase.dll
4581c64.15c4: supR3HardenedDllNotificationCallback: load 00007ffcf86a0000 LB 0x000b2000 C:\WINDOWS\System32\KERNEL32.DLL [fFlags=0x0]
4591c64.15c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
4601c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf86a0000 'C:\WINDOWS\System32\KERNEL32.DLL'
4611c64.15c4: supR3HardenedDllNotificationCallback: load 00007ff6efcb0000 LB 0x00116000 C:\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe [fFlags=0x0]
4621c64.15c4: '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe' has no imports
4631c64.15c4: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe)
4641c64.15c4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
4651c64.15c4: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007ffcf8ed1770 pvNtTerminateThread=00007ffcf8efcac0
46627d4.228c: supR3HardNtChildWaitFor: Found expected request 1 (CloseEvents) after 243 ms.
4671c64.15c4: \SystemRoot\System32\ntdll.dll:
4681c64.15c4: CreationTime: 2020-05-01T05:42:42.642219500Z
4691c64.15c4: LastWriteTime: 2020-05-01T05:42:42.782293300Z
4701c64.15c4: ChangeTime: 2020-05-01T06:03:03.848551900Z
4711c64.15c4: FileAttributes: 0x20
4721c64.15c4: Size: 0x1e8458
4731c64.15c4: NT Headers: 0xd8
4741c64.15c4: Timestamp: 0xc1bb301
4751c64.15c4: Machine: 0x8664 - amd64
4761c64.15c4: Timestamp: 0xc1bb301
4771c64.15c4: Image Version: 10.0
4781c64.15c4: SizeOfImage: 0x1f0000 (2031616)
4791c64.15c4: Resource Dir: 0x17f000 LB 0x6f310
4801c64.15c4: [Version info resource found at 0xd8! (ID/Name: 0x1; SubID/SubName: 0x409)]
4811c64.15c4: [Raw version resource data: 0x17f0f0 LB 0x380, codepage 0x0 (reserved 0x0)]
4821c64.15c4: ProductName: Microsoft® Windows® Operating System
4831c64.15c4: ProductVersion: 10.0.18362.778
4841c64.15c4: FileVersion: 10.0.18362.778 (WinBuild.160101.0800)
4851c64.15c4: FileDescription: NT Layer DLL
4861c64.15c4: \SystemRoot\System32\kernel32.dll:
4871c64.15c4: CreationTime: 2020-05-01T05:41:16.762345900Z
4881c64.15c4: LastWriteTime: 2020-05-01T05:41:16.918106500Z
4891c64.15c4: ChangeTime: 2020-05-01T06:02:33.440195200Z
4901c64.15c4: FileAttributes: 0x20
4911c64.15c4: Size: 0xb0498
4921c64.15c4: NT Headers: 0xe8
4931c64.15c4: Timestamp: 0x21b07e83
4941c64.15c4: Machine: 0x8664 - amd64
4951c64.15c4: Timestamp: 0x21b07e83
4961c64.15c4: Image Version: 10.0
4971c64.15c4: SizeOfImage: 0xb2000 (729088)
4981c64.15c4: Resource Dir: 0xb0000 LB 0x520
4991c64.15c4: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
5001c64.15c4: [Raw version resource data: 0xb00b0 LB 0x3a4, codepage 0x0 (reserved 0x0)]
5011c64.15c4: ProductName: Microsoft® Windows® Operating System
5021c64.15c4: ProductVersion: 10.0.18362.778
5031c64.15c4: FileVersion: 10.0.18362.778 (WinBuild.160101.0800)
5041c64.15c4: FileDescription: Windows NT BASE API Client DLL
5051c64.15c4: \SystemRoot\System32\KernelBase.dll:
5061c64.15c4: CreationTime: 2020-05-01T05:42:51.265086400Z
5071c64.15c4: LastWriteTime: 2020-05-01T05:42:51.452114900Z
5081c64.15c4: ChangeTime: 2020-05-01T06:02:57.532539200Z
5091c64.15c4: FileAttributes: 0x20
5101c64.15c4: Size: 0x2a3c38
5111c64.15c4: NT Headers: 0xf0
5121c64.15c4: Timestamp: 0xafa78a6a
5131c64.15c4: Machine: 0x8664 - amd64
5141c64.15c4: Timestamp: 0xafa78a6a
5151c64.15c4: Image Version: 10.0
5161c64.15c4: SizeOfImage: 0x2a3000 (2764800)
5171c64.15c4: Resource Dir: 0x27d000 LB 0x548
5181c64.15c4: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
5191c64.15c4: [Raw version resource data: 0x27d0b0 LB 0x3bc, codepage 0x0 (reserved 0x0)]
5201c64.15c4: ProductName: Microsoft® Windows® Operating System
5211c64.15c4: ProductVersion: 10.0.18362.778
5221c64.15c4: FileVersion: 10.0.18362.778 (WinBuild.160101.0800)
5231c64.15c4: FileDescription: Windows NT BASE API Client DLL
5241c64.15c4: \SystemRoot\System32\apisetschema.dll:
5251c64.15c4: CreationTime: 2019-03-19T04:43:54.837151500Z
5261c64.15c4: LastWriteTime: 2019-03-19T04:43:54.837151500Z
5271c64.15c4: ChangeTime: 2020-05-01T05:49:09.335363700Z
5281c64.15c4: FileAttributes: 0x20
5291c64.15c4: Size: 0x1d028
5301c64.15c4: NT Headers: 0xc8
5311c64.15c4: Timestamp: 0xd6ced080
5321c64.15c4: Machine: 0x8664 - amd64
5331c64.15c4: Timestamp: 0xd6ced080
5341c64.15c4: Image Version: 10.0
5351c64.15c4: SizeOfImage: 0x1e000 (122880)
5361c64.15c4: Resource Dir: 0x1d000 LB 0x408
5371c64.15c4: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
5381c64.15c4: [Raw version resource data: 0x1d060 LB 0x3a8, codepage 0x0 (reserved 0x0)]
5391c64.15c4: ProductName: Microsoft® Windows® Operating System
5401c64.15c4: ProductVersion: 10.0.18362.1
5411c64.15c4: FileVersion: 10.0.18362.1 (WinBuild.160101.0800)
5421c64.15c4: FileDescription: ApiSet Schema DLL
5431c64.15c4: NtOpenDirectoryObject failed on \Driver: 0xc0000022
5441c64.15c4: supR3HardenedWinFindAdversaries: 0x0
5451c64.15c4: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox'
5461c64.15c4: Calling main()
5471c64.15c4: SUPR3HardenedMain: pszProgName=VirtualBoxVM fFlags=0x2
5481c64.15c4: supR3HardenedWinInitAppBin(0x2): '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox'
5491c64.15c4: '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe' has no imports
5501c64.15c4: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe)
5511c64.15c4: SUPR3HardenedMain: Final process, opening VBoxDrv...
5521c64.15c4: supR3HardenedEarlyCompact: Removed heap 1 (0x00000001030000 LB 0x400000)
5531c64.15c4: supR3HardNtEnableThreadCreationEx:
5541c64.15c4: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxSupLib.dll)
5551c64.15c4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxSupLib.dll
5561c64.15c4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
5571c64.15c4: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxSupLib.dll [lacks WinVerifyTrust]
5581c64.15c4: supR3HardenedDllNotificationCallback: load 00007ffcee420000 LB 0x00005000 C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL [fFlags=0x0]
5591c64.15c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxSupLib.dll [lacks WinVerifyTrust]
5601c64.15c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxSupLib.dll [lacks WinVerifyTrust]
5611c64.15c4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
5621c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcee420000 'C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL'
5631c64.15c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxSupLib.dll [lacks WinVerifyTrust]
5641c64.15c4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
5651c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcee420000 'C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL'
5661c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcee420000 'C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL'
5671c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
5681c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msasn1.dll'.
5691c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'crypt32.dll'.
5701c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #27 'rpcrt4.dll'.
5711c64.15c4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\wintrust.dll)
5721c64.15c4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\wintrust.dll
5731c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
5741c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
5751c64.15c4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll)
5761c64.15c4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll
5771c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'crypt32.dll'...
5781c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'crypt32.dll' -> '\Device\HarddiskVolume3\Windows\System32\crypt32.dll' [rcNtRedir=0xc0150008]
5791c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #32 'msasn1.dll'.
5801c64.15c4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\crypt32.dll)
5811c64.15c4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\crypt32.dll
5821c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msasn1.dll'...
5831c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msasn1.dll' -> '\Device\HarddiskVolume3\Windows\System32\msasn1.dll' [rcNtRedir=0xc0150008]
5841c64.15c4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\msasn1.dll)
5851c64.15c4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\msasn1.dll
5861c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
5871c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
5881c64.15c4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\msvcrt.dll)
5891c64.15c4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\msvcrt.dll
5901c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msasn1.dll'...
5911c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msasn1.dll' -> '\Device\HarddiskVolume3\Windows\System32\msasn1.dll' [rcNtRedir=0xc0150008]
5921c64.15c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msasn1.dll [lacks WinVerifyTrust]
5931c64.15c4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\Wintrust.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
5941c64.15c4: supR3HardenedDllNotificationCallback: load 00007ffcf79e0000 LB 0x0009e000 C:\WINDOWS\System32\msvcrt.dll [fFlags=0x0]
5951c64.15c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
5961c64.15c4: supR3HardenedDllNotificationCallback: load 00007ffcf5d50000 LB 0x00012000 C:\WINDOWS\System32\MSASN1.dll [fFlags=0x0]
5971c64.15c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msasn1.dll [lacks WinVerifyTrust]
5981c64.15c4: supR3HardenedDllNotificationCallback: load 00007ffcf5e70000 LB 0x000fa000 C:\WINDOWS\System32\ucrtbase.dll [fFlags=0x0]
5991c64.15c4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\ucrtbase.dll)
6001c64.15c4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll
6011c64.15c4: supR3HardenedDllNotificationCallback: load 00007ffcf6c40000 LB 0x00149000 C:\WINDOWS\System32\CRYPT32.dll [fFlags=0x0]
6021c64.15c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll [lacks WinVerifyTrust]
6031c64.15c4: supR3HardenedDllNotificationCallback: load 00007ffcf7e40000 LB 0x00120000 C:\WINDOWS\System32\RPCRT4.dll [fFlags=0x0]
6041c64.15c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
6051c64.15c4: supR3HardenedDllNotificationCallback: load 00007ffcf6250000 LB 0x0005c000 C:\WINDOWS\System32\Wintrust.dll [fFlags=0x0]
6061c64.15c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
6071c64.15c4: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-synch-l1-2-0) -> 0x0, fPresent=1
6081c64.15c4: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-synch-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
6091c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf5fa0000 'api-ms-win-core-synch-l1-2-0'
6101c64.15c4: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-fibers-l1-1-1) -> 0x0, fPresent=1
6111c64.15c4: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-fibers-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
6121c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf5fa0000 'api-ms-win-core-fibers-l1-1-1'
6131c64.15c4: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-fibers-l1-1-1) -> 0x0, fPresent=1
6141c64.15c4: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-fibers-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
6151c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf5fa0000 'api-ms-win-core-fibers-l1-1-1'
6161c64.15c4: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-synch-l1-2-0) -> 0x0, fPresent=1
6171c64.15c4: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-synch-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
6181c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf5fa0000 'api-ms-win-core-synch-l1-2-0'
6191c64.15c4: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-localization-l1-2-1) -> 0x0, fPresent=1
6201c64.15c4: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-l1-2-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
6211c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf5fa0000 'api-ms-win-core-localization-l1-2-1'
6221c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6250000 'C:\WINDOWS\system32\Wintrust.dll'
6231c64.15c4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\bcrypt.dll)
6241c64.15c4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\bcrypt.dll
6251c64.15c4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\bcrypt.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
6261c64.15c4: supR3HardenedDllNotificationCallback: load 00007ffcf6ee0000 LB 0x00026000 C:\WINDOWS\System32\bcrypt.dll [fFlags=0x0]
6271c64.15c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\bcrypt.dll [lacks WinVerifyTrust]
6281c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6ee0000 'C:\WINDOWS\system32\bcrypt.dll'
6291c64.15c4: bcrypt.dll loaded at 00007ffcf6ee0000, BCryptOpenAlgorithmProvider at 00007ffcf6ee4c70, preloading providers:
6301c64.15c4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll)
6311c64.15c4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll
6321c64.15c4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\bcryptprimitives.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
6331c64.15c4: supR3HardenedDllNotificationCallback: load 00007ffcf5df0000 LB 0x00080000 C:\WINDOWS\System32\bcryptprimitives.dll [fFlags=0x0]
6341c64.15c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll [lacks WinVerifyTrust]
6351c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf5df0000 'C:\WINDOWS\system32\bcryptprimitives.dll'
6361c64.15c4: BCryptOpenAlgorithmProvider(,'MD2',0,0) -> 0x0 (hAlgo=00000000015ed7f0)
6371c64.15c4: BCryptOpenAlgorithmProvider(,'MD4',0,0) -> 0x0 (hAlgo=00000000015eed60)
6381c64.15c4: BCryptOpenAlgorithmProvider(,'MD5',0,0) -> 0x0 (hAlgo=00000000015ef060)
6391c64.15c4: BCryptOpenAlgorithmProvider(,'SHA1',0,0) -> 0x0 (hAlgo=00000000015ef360)
6401c64.15c4: BCryptOpenAlgorithmProvider(,'SHA256',0,0) -> 0x0 (hAlgo=00000000015ef660)
6411c64.15c4: BCryptOpenAlgorithmProvider(,'SHA512',0,0) -> 0x0 (hAlgo=00000000015ef960)
6421c64.15c4: BCryptOpenAlgorithmProvider(,'RSA',0,0) -> 0x0 (hAlgo=00000000015efc60)
6431c64.15c4: BCryptOpenAlgorithmProvider(,'DSA',0,0) -> 0x0 (hAlgo=00000000015eff60)
6441c64.15c4: supR3HardenedDllNotificationCallback: load 00007ffcf6300000 LB 0x00017000 C:\WINDOWS\System32\CRYPTSP.dll [fFlags=0x0]
6451c64.15c4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\cryptsp.dll)
6461c64.15c4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\cryptsp.dll
6471c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #18 'bcrypt.dll'.
6481c64.15c4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\rsaenh.dll)
6491c64.15c4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
6501c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcrypt.dll'...
6511c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcrypt.dll' -> '\Device\HarddiskVolume3\Windows\System32\bcrypt.dll' [rcNtRedir=0xc0150008]
6521c64.15c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\bcrypt.dll [lacks WinVerifyTrust]
6531c64.15c4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
6541c64.15c4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
6551c64.15c4: supR3HardenedDllNotificationCallback: load 00007ffcf50a0000 LB 0x00033000 C:\WINDOWS\system32\rsaenh.dll [fFlags=0x0]
6561c64.15c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
6571c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
6581c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'bcryptprimitives.dll'.
6591c64.15c4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\cryptbase.dll)
6601c64.15c4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\cryptbase.dll
6611c64.15c4: supR3HardenedDllNotificationCallback: load 00007ffcf5760000 LB 0x0000c000 C:\WINDOWS\SYSTEM32\CRYPTBASE.dll [fFlags=0x0]
6621c64.15c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\cryptbase.dll [lacks WinVerifyTrust]
6631c64.15c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
6641c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcryptprimitives.dll'...
6651c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcryptprimitives.dll' -> '\Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll' [rcNtRedir=0xc0150008]
6661c64.15c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll [lacks WinVerifyTrust]
6671c64.15c4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\kernel32.dll (Input=kernel32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
6681c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf86a0000 'C:\WINDOWS\System32\kernel32.dll'
6691c64.15c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
6701c64.15c4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\WINTRUST.DLL (Input=WINTRUST.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
6711c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6250000 'C:\WINDOWS\System32\WINTRUST.DLL'
6721c64.15c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll [lacks WinVerifyTrust]
6731c64.15c4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\CRYPT32.dll (rcNtResolve=0xc0150008) *pfFlags=0x2 pwszSearchPath=0000000000000001:<flags> [calling]
6741c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6c40000 'C:\WINDOWS\System32\CRYPT32.dll'
6751c64.15c4: supR3HardenedDllNotificationCallback: load 00007ffcf85e0000 LB 0x0001d000 C:\WINDOWS\System32\imagehlp.dll [fFlags=0x0]
6761c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #20 'rpcrt4.dll'.
6771c64.15c4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\imagehlp.dll)
6781c64.15c4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\imagehlp.dll
6791c64.15c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
6801c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
6811c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
6821c64.15c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
6831c64.15c4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
6841c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
6851c64.15c4: supR3HardenedDllNotificationCallback: load 00007ffcf8600000 LB 0x00097000 C:\WINDOWS\System32\sechost.dll [fFlags=0x0]
6861c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'rpcrt4.dll'.
6871c64.15c4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\sechost.dll)
6881c64.15c4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\sechost.dll
6891c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
6901c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'rpcrt4.dll'.
6911c64.15c4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\gpapi.dll)
6921c64.15c4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\gpapi.dll
6931c64.15c4: supR3HardenedDllNotificationCallback: load 00007ffcf4900000 LB 0x00022000 C:\WINDOWS\SYSTEM32\gpapi.dll [fFlags=0x0]
6941c64.15c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gpapi.dll [lacks WinVerifyTrust]
6951c64.15c4: supR3HardenedDllNotificationCallback: load 00007ffcf5d70000 LB 0x00023000 C:\WINDOWS\System32\profapi.dll [fFlags=0x0]
6961c64.15c4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\profapi.dll)
6971c64.15c4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\profapi.dll
6981c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
6991c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'crypt32.dll'.
7001c64.15c4: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\cryptnet.dll)
7011c64.15c4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\cryptnet.dll
7021c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'crypt32.dll'...
7031c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'crypt32.dll' -> '\Device\HarddiskVolume3\Windows\System32\crypt32.dll' [rcNtRedir=0xc0150008]
7041c64.15c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll [lacks WinVerifyTrust]
7051c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
7061c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
7071c64.15c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
7081c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
7091c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
7101c64.15c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
7111c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
7121c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
7131c64.15c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
7141c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
7151c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
7161c64.15c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
7171c64.15c4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\cryptnet.dll (Input=cryptnet.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
7181c64.15c4: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
7191c64.15c4: supR3HardenedDllNotificationCallback: load 00007ffcdc2b0000 LB 0x0002f000 C:\WINDOWS\System32\cryptnet.dll [fFlags=0x0]
7201c64.15c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
7211c64.15c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
7221c64.15c4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x2 pwszSearchPath=0000000000000001:<flags> [calling]
7231c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcdc2b0000 'C:\WINDOWS\System32\cryptnet.dll'
7241c64.15c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
7251c64.15c4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x2 pwszSearchPath=0000000000000001:<flags> [calling]
7261c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcdc2b0000 'C:\WINDOWS\System32\cryptnet.dll'
7271c64.15c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
7281c64.15c4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x2 pwszSearchPath=0000000000000001:<flags> [calling]
7291c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcdc2b0000 'C:\WINDOWS\System32\cryptnet.dll'
7301c64.15c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
7311c64.15c4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x2 pwszSearchPath=0000000000000001:<flags> [calling]
7321c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcdc2b0000 'C:\WINDOWS\System32\cryptnet.dll'
7331c64.15c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
7341c64.15c4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x2 pwszSearchPath=0000000000000001:<flags> [calling]
7351c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcdc2b0000 'C:\WINDOWS\System32\cryptnet.dll'
7361c64.15c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
7371c64.15c4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x2 pwszSearchPath=0000000000000001:<flags> [calling]
7381c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcdc2b0000 'C:\WINDOWS\System32\cryptnet.dll'
7391c64.15c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
7401c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcdc2b0000 'C:\WINDOWS\System32\cryptnet.dll'
7411c64.15c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
7421c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcdc2b0000 'C:\WINDOWS\System32\cryptnet.dll'
7431c64.15c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
7441c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcdc2b0000 'C:\WINDOWS\System32\cryptnet.dll'
7451c64.15c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
7461c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcdc2b0000 'C:\WINDOWS\System32\cryptnet.dll'
7471c64.15c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
7481c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcdc2b0000 'C:\WINDOWS\System32\cryptnet.dll'
7491c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcdc2b0000 'C:\WINDOWS\System32\cryptnet.dll'
7501c64.15c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
7511c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcdc2b0000 'C:\Windows\System32\cryptnet.dll'
7521c64.15c4: supR3HardenedDllNotificationCallback: load 00007ffcf80d0000 LB 0x000a3000 C:\WINDOWS\System32\advapi32.dll [fFlags=0x0]
7531c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
7541c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'sechost.dll'.
7551c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #27 'rpcrt4.dll'.
7561c64.15c4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\advapi32.dll)
7571c64.15c4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\advapi32.dll
7581c64.15c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
7591c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
7601c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
7611c64.15c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
7621c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'sechost.dll'...
7631c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'sechost.dll' -> '\Device\HarddiskVolume3\Windows\System32\sechost.dll' [rcNtRedir=0xc0150008]
7641c64.15c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\sechost.dll [lacks WinVerifyTrust]
7651c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
7661c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
7671c64.15c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
7681c64.15c4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
7691c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
7701c64.15c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll [lacks WinVerifyTrust]
7711c64.15c4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\crypt32.dll (Input=crypt32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
7721c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6c40000 'C:\WINDOWS\System32\crypt32.dll'
7731c64.15c4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000000 pwszName=\SystemRoot\System32\ntdll.dll
7741c64.15c4: supR3HardNtViCallWinVerifyTrustCatFile: New context 00000000016481c0
7751c64.15c4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000016481c0
7761c64.15c4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=F482F3EE4619F819AA795BCEA059C3E3AC97DEF9
7771c64.15c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
7781c64.15c4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\rpcrt4.dll (Input=rpcrt4.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
7791c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf7e40000 'C:\WINDOWS\System32\rpcrt4.dll'
7801c64.15c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
7811c64.15c4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
7821c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
7831c64.15c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll [lacks WinVerifyTrust]
7841c64.15c4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\crypt32.dll (Input=crypt32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
7851c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6c40000 'C:\WINDOWS\System32\crypt32.dll'
7861c64.15c4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.18362.778.cat'; file='\SystemRoot\System32\ntdll.dll'
7871c64.15c4: g_pfnWinVerifyTrust=00007ffcf62561f0
7881c64.15c4: supR3HardenedScreenImage/preload: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll [redoing WinVerifyTrust]
7891c64.15c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
7901c64.15c4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
7911c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
7921c64.15c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll [lacks WinVerifyTrust]
7931c64.15c4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\crypt32.dll (Input=crypt32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
7941c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6c40000 'C:\WINDOWS\System32\crypt32.dll'
7951c64.15c4: supR3HardenedScreenImage/preload: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\crypt32.dll'
7961c64.15c4: supR3HardenedScreenImage/preload: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wintrust.dll [redoing WinVerifyTrust]
7971c64.15c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
7981c64.15c4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
7991c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
8001c64.15c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll
8011c64.15c4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\crypt32.dll (Input=crypt32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
8021c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6c40000 'C:\WINDOWS\System32\crypt32.dll'
8031c64.15c4: supR3HardenedScreenImage/preload: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\wintrust.dll'
8041c64.15c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
8051c64.15c4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
8061c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
8071c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6c40000 'C:\WINDOWS\System32\crypt32.dll'
8081c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\advapi32.dll'
8091c64.15c4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000384 pwszName=\Device\HarddiskVolume3\Windows\System32\cryptnet.dll
8101c64.15c4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000016481c0
8111c64.15c4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000016481c0
8121c64.15c4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=09032EBC3D9D9BDDC0EE4A6463C043296B79FF20
8131c64.15c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
8141c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
8151c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6c40000 'C:\WINDOWS\System32\crypt32.dll'
8161c64.15c4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.18362.778.cat'; file='\Device\HarddiskVolume3\Windows\System32\cryptnet.dll'
8171c64.15c4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
8181c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\cryptnet.dll'
8191c64.15c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
8201c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
8211c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6c40000 'C:\WINDOWS\System32\crypt32.dll'
8221c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\profapi.dll'
8231c64.15c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
8241c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
8251c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6c40000 'C:\WINDOWS\System32\crypt32.dll'
8261c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\gpapi.dll'
8271c64.15c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
8281c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
8291c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6c40000 'C:\WINDOWS\System32\crypt32.dll'
8301c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\sechost.dll'
8311c64.15c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
8321c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
8331c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6c40000 'C:\WINDOWS\System32\crypt32.dll'
8341c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\imagehlp.dll'
8351c64.15c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
8361c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
8371c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6c40000 'C:\WINDOWS\System32\crypt32.dll'
8381c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\cryptbase.dll'
8391c64.15c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
8401c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
8411c64.15c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll
8421c64.15c4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\crypt32.dll (Input=crypt32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
8431c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6c40000 'C:\WINDOWS\System32\crypt32.dll'
8441c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\rsaenh.dll'
8451c64.15c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
8461c64.15c4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
8471c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
8481c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6c40000 'C:\WINDOWS\System32\crypt32.dll'
8491c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\cryptsp.dll'
8501c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
8511c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6c40000 'C:\WINDOWS\System32\crypt32.dll'
8521c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll'
8531c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
8541c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6c40000 'C:\WINDOWS\System32\crypt32.dll'
8551c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\bcrypt.dll'
8561c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
8571c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6c40000 'C:\WINDOWS\System32\crypt32.dll'
8581c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\ucrtbase.dll'
8591c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
8601c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6c40000 'C:\WINDOWS\System32\crypt32.dll'
8611c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll'
8621c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
8631c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6c40000 'C:\WINDOWS\System32\crypt32.dll'
8641c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\msasn1.dll'
8651c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
8661c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6c40000 'C:\WINDOWS\System32\crypt32.dll'
8671c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll'
8681c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
8691c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 24202) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxSupLib.dll'
8701c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
8711c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 24202) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe'
8721c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
8731c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6c40000 'C:\WINDOWS\System32\crypt32.dll'
8741c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\KernelBase.dll'
8751c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
8761c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6c40000 'C:\WINDOWS\System32\crypt32.dll'
8771c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\kernel32.dll'
8781c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6c40000 'C:\WINDOWS\system32\crypt32.dll'
8791c64.15c4: supR3HardenedWinIsDesiredRootCA: Adding 0x5ad46780fa5df300 DC=com, DC=microsoft, CN=Microsoft Root Certificate Authority
8801c64.15c4: supR3HardenedWinIsDesiredRootCA: Adding 0xea5386456178582b C=ZA, ST=Western Cape, L=Durbanville, O=Thawte, OU=Thawte Certification, CN=Thawte Timestamping CA
8811c64.15c4: supR3HardenedWinIsDesiredRootCA: Adding 0x560ad29254e89100 C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO RSA Certification Authority
8821c64.15c4: supR3HardenedWinIsDesiredRootCA: Adding 0x3be670c1bd02a900 OU=Copyright (c) 1997 Microsoft Corp., OU=Microsoft Corporation, CN=Microsoft Root Authority
8831c64.15c4: supR3HardenedWinIsDesiredRootCA: Adding 0xe991ee72b03db500 C=US, O=Symantec Corporation, CN=Symantec Enterprise Mobile Root for Microsoft
8841c64.15c4: supR3HardenedWinIsDesiredRootCA: Adding 0x4d3835aa4180b200 C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Root Certificate Authority 2011
8851c64.15c4: supR3HardenedWinIsDesiredRootCA: Adding 0x646e3fe3ba08df00 C=US, O=MSFT, CN=Microsoft Authenticode(tm) Root Authority
8861c64.15c4: supR3HardenedWinIsDesiredRootCA: Adding 0xece4e4289e08b900 C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Root Certificate Authority 2010
8871c64.15c4: supR3HardenedWinIsDesiredRootCA: Adding 0xf3bb4d7e894b420 C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft ECC TS Root Certificate Authority 2018
8881c64.15c4: supR3HardenedWinIsDesiredRootCA: Adding 0x43a9cc371ff5385a O=Microsoft Trust Network, OU=Microsoft Corporation, OU=Microsoft Time Stamping Service Root, OU=Copyright (c) 1997 Microsoft Corp.
8891c64.15c4: supR3HardenedWinIsDesiredRootCA: Adding 0x2e2d2c7c68f0202e O=VeriSign Trust Network, OU=VeriSign, Inc., OU=VeriSign Time Stamping Service Root, OU=NO LIABILITY ACCEPTED, (c)97 VeriSign, Inc.
8901c64.15c4: supR3HardenedWinIsDesiredRootCA: Adding 0xcec3d46562b9be8e C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft ECC Product Root Certificate Authority 2018
8911c64.15c4: supR3HardenedWinIsDesiredRootCA: Adding 0xca58a05dd401ae00 C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Time Stamp Root Certificate Authority 2014
8921c64.15c4: supR3HardenedWinIsDesiredRootCA: Adding 0xd8dbfb2c27bfb200 C=US, O=thawte, Inc., OU=Certification Services Division, OU=(c) 2008 thawte, Inc. - For authorized use only, CN=thawte Primary Root CA - G3
8931c64.15c4: supR3HardenedWinIsDesiredRootCA: Adding 0x61a3a33f81aace00 C=US, ST=UT, L=Salt Lake City, O=The USERTRUST Network, OU=http://www.usertrust.com, CN=UTN-USERFirst-Object
8941c64.15c4: supR3HardenedWinIsDesiredRootCA: Adding 0x6b7bdc34cd37bb00 C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root G2
8951c64.15c4: supR3HardenedWinIsDesiredRootCA: Adding 0x57ba5395b561bf00 C=BM, O=QuoVadis Limited, OU=Root Certification Authority, CN=QuoVadis Root Certification Authority
8961c64.15c4: supR3HardenedWinIsDesiredRootCA: Adding 0xf4fd306318ccda00 C=US, O=GeoTrust Inc., CN=GeoTrust Global CA
8971c64.15c4: supR3HardenedWinIsDesiredRootCA: Adding 0x83085097e9afdf00 O=Digital Signature Trust Co., CN=DST Root CA X3
8981c64.15c4: supR3HardenedWinIsDesiredRootCA: Adding 0x780679907625cc00 OU=GlobalSign Root CA - R3, O=GlobalSign, CN=GlobalSign
8991c64.15c4: supR3HardenedWinIsDesiredRootCA: Adding 0x3d98ab22bb04a300 C=IE, O=Baltimore, OU=CyberTrust, CN=Baltimore CyberTrust Root
9001c64.15c4: supR3HardenedWinIsDesiredRootCA: Adding 0xa0ee62086758b15d C=US, O=Equifax, OU=Equifax Secure Certificate Authority
9011c64.15c4: supR3HardenedWinIsDesiredRootCA: Adding 0xd944bca189a00 C=BM, O=QuoVadis Limited, CN=QuoVadis Root CA 2
9021c64.15c4: supR3HardenedWinIsDesiredRootCA: Adding 0x8ff6fc03c1edbd00 C=US, ST=Arizona, L=Scottsdale, O=Starfield Technologies, Inc., CN=Starfield Root Certificate Authority - G2
9031c64.15c4: supR3HardenedWinIsDesiredRootCA: Adding 0xc6fa4243b695b600 C=US, O=Entrust, Inc., OU=www.entrust.net/CPS is incorporated by reference, OU=(c) 2006 Entrust, Inc., CN=Entrust Root Certification Authority
9041c64.15c4: supR3HardenedWinIsDesiredRootCA: Adding 0xa3ce8d99e60eda00 C=BE, O=GlobalSign nv-sa, OU=Root CA, CN=GlobalSign Root CA
9051c64.15c4: supR3HardenedWinIsDesiredRootCA: Adding 0xa671e9fec832b700 C=US, O=Starfield Technologies, Inc., OU=Starfield Class 2 Certification Authority
9061c64.15c4: supR3HardenedWinIsDesiredRootCA: Adding 0xa8de7211e13be200 C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root CA
9071c64.15c4: supR3HardenedWinIsDesiredRootCA: Adding 0xd45980fbf0a0ac00 C=US, O=thawte, Inc., OU=Certification Services Division, OU=(c) 2006 thawte, Inc. - For authorized use only, CN=thawte Primary Root CA
9081c64.15c4: supR3HardenedWinIsDesiredRootCA: Adding 0xc9edb72b684ba00 C=US, O=Entrust, Inc., OU=See www.entrust.net/legal-terms, OU=(c) 2009 Entrust, Inc. - for authorized use only, CN=Entrust Root Certification Authority - G2
9091c64.15c4: supR3HardenedWinIsDesiredRootCA: Adding 0xf5cd95e581a4ab00 C=US, O=SecureTrust Corporation, CN=SecureTrust CA
9101c64.15c4: supR3HardenedWinIsDesiredRootCA: Adding 0x6f2ebe0e24cfa600 OU=GlobalSign Root CA - R2, O=GlobalSign, CN=GlobalSign
9111c64.15c4: supR3HardenedWinIsDesiredRootCA: Adding 0x14018a1bf29e595c C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification Authority
9121c64.15c4: supR3HardenedWinIsDesiredRootCA: Adding 0x9e5bc2d78b6a3636 C=ZA, ST=Western Cape, L=Cape Town, O=Thawte Consulting cc, OU=Certification Services Division, CN=Thawte Premium Server CA, Email=premium-server@thawte.com
9131c64.15c4: supR3HardenedWinIsDesiredRootCA: Adding 0x7c4fd32ec1b1ce00 C=PL, O=Unizeto Sp. z o.o., CN=Certum CA
9141c64.15c4: supR3HardenedWinIsDesiredRootCA: Adding 0xd4fbe673e5ccc600 C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert High Assurance EV Root CA
9151c64.15c4: supR3HardenedWinIsDesiredRootCA: Adding 0xb352b1523915d000 C=JP, O=SECOM Trust Systems CO.,LTD., OU=Security Communication RootCA2
9161c64.15c4: supR3HardenedWinIsDesiredRootCA: Adding 0x1b8578514b74ac00 C=US, O=WFA Hotspot 2.0, CN=Hotspot 2.0 Trust Root CA - 03
9171c64.15c4: supR3HardenedWinIsDesiredRootCA: Adding 0xb28612a94b4dad00 O=Entrust.net, OU=www.entrust.net/CPS_2048 incorp. by ref. (limits liab.), OU=(c) 1999 Entrust.net Limited, CN=Entrust.net Certification Authority (2048)
9181c64.15c4: supR3HardenedWinIsDesiredRootCA: Adding 0x357a29080824af00 C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. - For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority - G5
9191c64.15c4: supR3HardenedWinIsDesiredRootCA: Adding 0x59faf1086271bf00 C=US, ST=Arizona, L=Scottsdale, O=GoDaddy.com, Inc., CN=Go Daddy Root Certificate Authority - G2
9201c64.15c4: supR3HardenedWinIsDesiredRootCA: Adding 0x3401b15e3761c700 C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2008 VeriSign, Inc. - For authorized use only, CN=VeriSign Universal Root Certification Authority
9211c64.15c4: supR3HardenedWinIsDesiredRootCA: Adding 0x7cd4ff7b15b8be00 C=US, O=GeoTrust Inc., CN=GeoTrust Primary Certification Authority
9221c64.15c4: supR3HardenedWinIsDesiredRootCA: Adding 0xc30e361765128000 C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority
9231c64.15c4: supR3HardenedWinIsDesiredRootCA: Adding 0x491857ead79dde00 C=US, O=The Go Daddy Group, Inc., OU=Go Daddy Class 2 Certification Authority
9241c64.15c4: supR3HardenedWinIsDesiredRootCA: Adding 0x1f78fc529cbacb00 C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 1999 VeriSign, Inc. - For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority - G3
9251c64.15c4: supR3HardenedWinIsDesiredRootCA: Adding 0xc2ba72a37dfbe300 C=PL, O=Unizeto Technologies S.A., OU=Certum Certification Authority, CN=Certum Trusted Network CA
9261c64.15c4: supR3HardenedWinIsDesiredRootCA: Adding 0xcec3d46562b9be8e C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft ECC Product Root Certificate Authority 2018
9271c64.15c4: supR3HardenedWinIsDesiredRootCA: Adding 0x8043e4ce150ead00 C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Assured ID Root CA
9281c64.15c4: supR3HardenedWinIsDesiredRootCA: Adding 0x331d58625ee2dc00 C=US, O=GeoTrust Inc., OU=(c) 2008 GeoTrust Inc. - For authorized use only, CN=GeoTrust Primary Certification Authority - G3
9291c64.15c4: supR3HardenedWinIsDesiredRootCA: Adding 0xf2e6331af7b700 C=SE, O=AddTrust AB, OU=AddTrust External TTP Network, CN=AddTrust External CA Root
9301c64.15c4: supR3HardenedWinRetrieveTrustedRootCAs: cAdded=51
9311c64.15c4: SUPR3HardenedMain: Load Runtime...
9321c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
9331c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
9341c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp100.dll'.
9351c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'rpcrt4.dll'.
9361c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'ws2_32.dll'.
9371c64.15c4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll) WinVerifyTrust
9381c64.15c4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll
9391c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
9401c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
9411c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
9421c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6c40000 'C:\WINDOWS\System32\crypt32.dll'
9431c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #26 'rpcrt4.dll'.
9441c64.15c4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\ws2_32.dll) WinVerifyTrust
9451c64.15c4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\ws2_32.dll
9461c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
9471c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
9481c64.15c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll
9491c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
9501c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
9511c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
9521c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
9531c64.15c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll
9541c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
9551c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
9561c64.15c4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll) WinVerifyTrust
9571c64.15c4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll
9581c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
9591c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
9601c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
9611c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
9621c64.15c4: Detected WinVerifyTrust recursion: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
9631c64.15c4: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll)
9641c64.15c4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll
9651c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
9661c64.15c4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll) WinVerifyTrust
9671c64.15c4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000a01:<flags> [calling]
9681c64.15c4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll
9691c64.15c4: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [avoiding WinVerifyTrust]
9701c64.15c4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll
9711c64.15c4: supR3HardenedDllNotificationCallback: load 000000005bf60000 LB 0x000d2000 C:\Program Files\Oracle\VirtualBox\MSVCR100.dll [fFlags=0x0]
9721c64.15c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [avoiding WinVerifyTrust]
9731c64.15c4: supR3HardenedDllNotificationCallback: load 000000005b950000 LB 0x00098000 C:\Program Files\Oracle\VirtualBox\MSVCP100.dll [fFlags=0x0]
9741c64.15c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll
9751c64.15c4: supR3HardenedDllNotificationCallback: load 00007ffcf8320000 LB 0x0006f000 C:\WINDOWS\System32\WS2_32.dll [fFlags=0x0]
9761c64.15c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ws2_32.dll
9771c64.15c4: supR3HardenedDllNotificationCallback: load 00007ffcd1b30000 LB 0x005ed000 C:\Program Files\Oracle\VirtualBox\VBoxRT.dll [fFlags=0x0]
9781c64.15c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll
9791c64.15c4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
9801c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
9811c64.15c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll
9821c64.15c4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
9831c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcd1b30000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9841c64.15c4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
9851c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
9861c64.15c4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
9871c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
9881c64.15c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll
9891c64.15c4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
9901c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcd1b30000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9911c64.15c4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
9921c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
9931c64.15c4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
9941c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
9951c64.15c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll
9961c64.15c4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
9971c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcd1b30000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9981c64.15c4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
9991c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10001c64.15c4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10011c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10021c64.15c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll
10031c64.15c4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
10041c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcd1b30000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10051c64.15c4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10061c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10071c64.15c4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10081c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10091c64.15c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll
10101c64.15c4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
10111c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcd1b30000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10121c64.15c4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10131c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10141c64.15c4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10151c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10161c64.15c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll
10171c64.15c4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
10181c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcd1b30000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10191c64.15c4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10201c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10211c64.15c4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10221c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10231c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcd1b30000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10241c64.15c4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10251c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10261c64.15c4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10271c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10281c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcd1b30000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10291c64.15c4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10301c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10311c64.15c4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10321c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10331c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcd1b30000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10341c64.15c4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10351c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10361c64.15c4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10371c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10381c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcd1b30000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10391c64.15c4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10401c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10411c64.15c4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10421c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10431c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcd1b30000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10441c64.15c4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10451c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10461c64.15c4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10471c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10481c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcd1b30000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10491c64.15c4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10501c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10511c64.15c4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10521c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10531c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcd1b30000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10541c64.15c4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10551c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10561c64.15c4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10571c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10581c64.15c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll
10591c64.15c4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
10601c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcd1b30000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10611c64.15c4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10621c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10631c64.15c4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10641c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10651c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcd1b30000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10661c64.15c4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10671c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10681c64.15c4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10691c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10701c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcd1b30000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10711c64.15c4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10721c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10731c64.15c4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10741c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10751c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcd1b30000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10761c64.15c4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10771c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10781c64.15c4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10791c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10801c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcd1b30000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10811c64.15c4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10821c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10831c64.15c4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10841c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10851c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcd1b30000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10861c64.15c4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10871c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10881c64.15c4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10891c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10901c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcd1b30000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10911c64.15c4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10921c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10931c64.15c4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10941c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10951c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcd1b30000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10961c64.15c4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10971c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10981c64.15c4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10991c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11001c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcd1b30000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11011c64.15c4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11021c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11031c64.15c4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11041c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11051c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcd1b30000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11061c64.15c4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11071c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11081c64.15c4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11091c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11101c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcd1b30000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11111c64.15c4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11121c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11131c64.15c4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11141c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11151c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcd1b30000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11161c64.15c4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11171c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11181c64.15c4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11191c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11201c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcd1b30000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11211c64.15c4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11221c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11231c64.15c4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11241c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11251c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcd1b30000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11261c64.15c4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11271c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11281c64.15c4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11291c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11301c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcd1b30000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11311c64.15c4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11321c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11331c64.15c4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11341c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11351c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcd1b30000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11361c64.15c4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11371c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11381c64.15c4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11391c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11401c64.15c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll
11411c64.15c4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
11421c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcd1b30000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11431c64.15c4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11441c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11451c64.15c4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11461c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11471c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcd1b30000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11481c64.15c4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11491c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11501c64.15c4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11511c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11521c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcd1b30000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11531c64.15c4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11541c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11551c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcd1b30000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11561c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
11571c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 24202) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'
11581c64.15c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wintrust.dll
11591c64.15c4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\Wintrust.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
11601c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6250000 'C:\WINDOWS\system32\Wintrust.dll'
11611c64.15c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
11621c64.15c4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
11631c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
11641c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6c40000 'C:\WINDOWS\System32\crypt32.dll'
11651c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
11661c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6c40000 'C:\WINDOWS\System32\crypt32.dll'
11671c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6c40000 'C:\WINDOWS\system32\crypt32.dll'
11681c64.15c4: SUPR3HardenedMain: Load TrustedMain...
11691c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
11701c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'opengl32.dll'.
11711c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'uicommon.dll'.
11721c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxrt.dll'.
11731c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'msvcp100.dll'.
11741c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'msvcr100.dll'.
11751c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'qt5corevbox.dll'.
11761c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'qt5guivbox.dll'.
11771c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'qt5widgetsvbox.dll'.
11781c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'qt5openglvbox.dll'.
11791c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'user32.dll'.
11801c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'ole32.dll'.
11811c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'oleaut32.dll'.
11821c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #13 'winmm.dll'.
11831c64.15c4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll) WinVerifyTrust
11841c64.15c4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll
11851c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
11861c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume3\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008]
11871c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
11881c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6c40000 'C:\WINDOWS\System32\crypt32.dll'
11891c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'winmmbase.dll'.
11901c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'msvcrt.dll'.
11911c64.15c4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\winmm.dll) WinVerifyTrust
11921c64.15c4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\winmm.dll
11931c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
11941c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
11951c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
11961c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
11971c64.15c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll
11981c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmmbase.dll'...
11991c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmmbase.dll' -> '\Device\HarddiskVolume3\Windows\System32\winmmbase.dll' [rcNtRedir=0xc0150008]
12001c64.15c4: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\winmmbase.dll'.
12011c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
12021c64.15c4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\winmmbase.dll)
12031c64.15c4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\winmmbase.dll
12041c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
12051c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
12061c64.15c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll
12071c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
12081c64.15c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll
12091c64.15c4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\crypt32.dll (Input=crypt32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
12101c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6c40000 'C:\WINDOWS\System32\crypt32.dll'
12111c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcp_win.dll'.
12121c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'combase.dll'.
12131c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #23 'rpcrt4.dll'.
12141c64.15c4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\oleaut32.dll) WinVerifyTrust
12151c64.15c4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\oleaut32.dll
12161c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
12171c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
12181c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
12191c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
12201c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
12211c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
12221c64.15c4: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\combase.dll'.
12231c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'rpcrt4.dll'.
12241c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #45 'bcryptprimitives.dll'.
12251c64.15c4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\combase.dll)
12261c64.15c4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\combase.dll
12271c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
12281c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
12291c64.15c4: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll'.
12301c64.15c4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll)
12311c64.15c4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll
12321c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcryptprimitives.dll'...
12331c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcryptprimitives.dll' -> '\Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll' [rcNtRedir=0xc0150008]
12341c64.15c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll
12351c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
12361c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
12371c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
12381c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6c40000 'C:\WINDOWS\System32\crypt32.dll'
12391c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #22 'rpcrt4.dll'.
12401c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #56 'gdi32.dll'.
12411c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #57 'user32.dll'.
12421c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #58 'combase.dll'.
12431c64.15c4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\ole32.dll) WinVerifyTrust
12441c64.15c4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\ole32.dll
12451c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
12461c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
12471c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
12481c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
12491c64.15c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\combase.dll [lacks WinVerifyTrust]
12501c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
12511c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
12521c64.15c4: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\user32.dll'.
12531c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'win32u.dll'.
12541c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #34 'gdi32.dll'.
12551c64.15c4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\user32.dll)
12561c64.15c4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\user32.dll
12571c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
12581c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
12591c64.15c4: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\gdi32.dll'.
12601c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'win32u.dll'.
12611c64.15c4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\gdi32.dll)
12621c64.15c4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\gdi32.dll
12631c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
12641c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
12651c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
12661c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
12671c64.15c4: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\win32u.dll'.
12681c64.15c4: '\Device\HarddiskVolume3\Windows\System32\win32u.dll' has no imports
12691c64.15c4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\win32u.dll)
12701c64.15c4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\win32u.dll
12711c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
12721c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
12731c64.15c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
12741c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
12751c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
12761c64.15c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\win32u.dll [lacks WinVerifyTrust]
12771c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
12781c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6c40000 'C:\WINDOWS\System32\crypt32.dll'
12791c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'win32u.dll'.
12801c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #34 'gdi32.dll'.
12811c64.15c4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\user32.dll) WinVerifyTrust
12821c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5openglvbox.dll'...
12831c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5openglvbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5openglvbox.dll' [rcNtRedir=0xc0150008]
12841c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
12851c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
12861c64.15c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
12871c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
12881c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
12891c64.15c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\win32u.dll [lacks WinVerifyTrust]
12901c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
12911c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'qt5widgetsvbox.dll'.
12921c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'qt5guivbox.dll'.
12931c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5corevbox.dll'.
12941c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'msvcr100.dll'.
12951c64.15c4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll) WinVerifyTrust
12961c64.15c4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll
12971c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5widgetsvbox.dll'...
12981c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5widgetsvbox.dll' [rcNtRedir=0xc0150008]
12991c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
13001c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
13011c64.15c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll
13021c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
13031c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
13041c64.15c4: Detected WinVerifyTrust recursion: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll'.
13051c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'.
13061c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'shell32.dll'.
13071c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'ole32.dll'.
13081c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'advapi32.dll'.
13091c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'ws2_32.dll'.
13101c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'mpr.dll'.
13111c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'msvcp100.dll'.
13121c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'msvcr100.dll'.
13131c64.15c4: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll)
13141c64.15c4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll
13151c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
13161c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
13171c64.15c4: Detected WinVerifyTrust recursion: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll'.
13181c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'ole32.dll'.
13191c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'opengl32.dll'.
13201c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'gdi32.dll'.
13211c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
13221c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'qt5corevbox.dll'.
13231c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'msvcp100.dll'.
13241c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msvcr100.dll'.
13251c64.15c4: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll)
13261c64.15c4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll
13271c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5widgetsvbox.dll'...
13281c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5widgetsvbox.dll' [rcNtRedir=0xc0150008]
13291c64.15c4: Detected WinVerifyTrust recursion: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'.
13301c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'gdi32.dll'.
13311c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'.
13321c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5guivbox.dll'.
13331c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'qt5corevbox.dll'.
13341c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'shell32.dll'.
13351c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'msvcp100.dll'.
13361c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msvcr100.dll'.
13371c64.15c4: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll)
13381c64.15c4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll
13391c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
13401c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
13411c64.15c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll
13421c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
13431c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
13441c64.15c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll
13451c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
13461c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume3\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
13471c64.15c4: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\shell32.dll'.
13481c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #77 'user32.dll'.
13491c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #79 'gdi32.dll'.
13501c64.15c4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\shell32.dll)
13511c64.15c4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\shell32.dll
13521c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
13531c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
13541c64.15c4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
13551c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
13561c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
13571c64.15c4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
13581c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
13591c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
13601c64.15c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
13611c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
13621c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
13631c64.15c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
13641c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
13651c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
13661c64.15c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll
13671c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
13681c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
13691c64.15c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll
13701c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
13711c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
13721c64.15c4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
13731c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
13741c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
13751c64.15c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
13761c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
13771c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
13781c64.15c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
13791c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
13801c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume3\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008]
13811c64.15c4: Detected WinVerifyTrust recursion: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume3\Windows\System32\opengl32.dll'.
13821c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
13831c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'advapi32.dll'.
13841c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
13851c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'gdi32.dll'.
13861c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'glu32.dll'.
13871c64.15c4: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\opengl32.dll)
13881c64.15c4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\opengl32.dll
13891c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
13901c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
13911c64.15c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ole32.dll
13921c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
13931c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
13941c64.15c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll
13951c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
13961c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
13971c64.15c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll
13981c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mpr.dll'...
13991c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'mpr.dll' -> '\Device\HarddiskVolume3\Windows\System32\mpr.dll' [rcNtRedir=0xc0150008]
14001c64.15c4: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\mpr.dll'.
14011c64.15c4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\mpr.dll)
14021c64.15c4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\mpr.dll
14031c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
14041c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
14051c64.15c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ws2_32.dll
14061c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
14071c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
14081c64.15c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll
14091c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
14101c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
14111c64.15c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ole32.dll
14121c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
14131c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume3\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
14141c64.15c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll [lacks WinVerifyTrust]
14151c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
14161c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
14171c64.15c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
14181c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'glu32.dll'...
14191c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'glu32.dll' -> '\Device\HarddiskVolume3\Windows\System32\glu32.dll' [rcNtRedir=0xc0150008]
14201c64.15c4: Detected WinVerifyTrust recursion: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume3\Windows\System32\glu32.dll'.
14211c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
14221c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'user32.dll'.
14231c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'opengl32.dll'.
14241c64.15c4: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\glu32.dll)
14251c64.15c4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\glu32.dll
14261c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
14271c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
14281c64.15c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
14291c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
14301c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
14311c64.15c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
14321c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
14331c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
14341c64.15c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll
14351c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
14361c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
14371c64.15c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll
14381c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
14391c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
14401c64.15c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
14411c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
14421c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
14431c64.15c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
14441c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
14451c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume3\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008]
14461c64.15c4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\opengl32.dll [lacks WinVerifyTrust]
14471c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
14481c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
14491c64.15c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
14501c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
14511c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
14521c64.15c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll
14531c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
14541c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'gdi32.dll'.
14551c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'.
14561c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5guivbox.dll'.
14571c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'qt5corevbox.dll'.
14581c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'shell32.dll'.
14591c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'msvcp100.dll'.
14601c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msvcr100.dll'.
14611c64.15c4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll) WinVerifyTrust
14621c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
14631c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
14641c64.15c4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [redoing WinVerifyTrust]
14651c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
14661c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
14671c64.15c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll
14681c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
14691c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
14701c64.15c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll
14711c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
14721c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume3\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
14731c64.15c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll [lacks WinVerifyTrust]
14741c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
14751c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
14761c64.15c4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
14771c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
14781c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
14791c64.15c4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
14801c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
14811c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
14821c64.15c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
14831c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
14841c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
14851c64.15c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
14861c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
14871c64.15c4: supR3HardenedScreenImage/Imports: 0 (was 24202) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll'
14881c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
14891c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
14901c64.15c4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [redoing WinVerifyTrust]
14911c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
14921c64.15c4: supR3HardenedScreenImage/Imports: 0 (was 24202) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll'
14931c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
14941c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
14951c64.15c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll
14961c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
14971c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
14981c64.15c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll
14991c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
15001c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
15011c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'uicommon.dll'...
15021c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'uicommon.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\uicommon.dll' [rcNtRedir=0xc0150008]
15031c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
15041c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'vboxrt.dll'.
15051c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcr100.dll'.
15061c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5corevbox.dll'.
15071c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'qt5guivbox.dll'.
15081c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'qt5widgetsvbox.dll'.
15091c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'user32.dll'.
15101c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'advapi32.dll'.
15111c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'ole32.dll'.
15121c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'oleaut32.dll'.
15131c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'rpcrt4.dll'.
15141c64.15c4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\UICommon.dll) WinVerifyTrust
15151c64.15c4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\UICommon.dll
15161c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
15171c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume3\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008]
15181c64.15c4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\opengl32.dll [redoing WinVerifyTrust]
15191c64.15c4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=000000000000047c pwszName=\Device\HarddiskVolume3\Windows\System32\opengl32.dll
15201c64.15c4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000016481c0
15211c64.15c4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000016481c0
15221c64.15c4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=0837440FAE05EB650168FFA2D15E73182F6A3A26
15231c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
15241c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
15251c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
15261c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
15271c64.15c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll
15281c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
15291c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
15301c64.15c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ole32.dll
15311c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
15321c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
15331c64.15c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll
15341c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
15351c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
15361c64.15c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
15371c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5widgetsvbox.dll'...
15381c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5widgetsvbox.dll' [rcNtRedir=0xc0150008]
15391c64.15c4: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [lacks WinVerifyTrust]
15401c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
15411c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
15421c64.15c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll
15431c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
15441c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
15451c64.15c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll
15461c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
15471c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
15481c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
15491c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
15501c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
15511c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6c40000 'C:\WINDOWS\System32\crypt32.dll'
15521c64.15c4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0212~31bf3856ad364e35~amd64~~10.0.18362.387.cat'; file='\Device\HarddiskVolume3\Windows\System32\opengl32.dll'
15531c64.15c4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
15541c64.15c4: supR3HardenedScreenImage/Imports: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\opengl32.dll'
15551c64.15c4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000a01:<flags> [calling]
15561c64.15c4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll
15571c64.15c4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\opengl32.dll
15581c64.15c4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\UICommon.dll
15591c64.15c4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll
15601c64.15c4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll
15611c64.15c4: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [avoiding WinVerifyTrust]
15621c64.15c4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll
15631c64.15c4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmm.dll
15641c64.15c4: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\glu32.dll [avoiding WinVerifyTrust]
15651c64.15c4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\mpr.dll [avoiding WinVerifyTrust]
15661c64.15c4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmmbase.dll [avoiding WinVerifyTrust]
15671c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcp_win.dll'.
15681c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #22 'win32u.dll'.
15691c64.15c4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\DXCore.dll)
15701c64.15c4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\DXCore.dll
15711c64.15c4: supR3HardenedDllNotificationCallback: load 00007ffcf5f70000 LB 0x00021000 C:\WINDOWS\System32\win32u.dll [fFlags=0x0]
15721c64.15c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\win32u.dll [avoiding WinVerifyTrust]
15731c64.15c4: supR3HardenedDllNotificationCallback: load 00007ffcf6d90000 LB 0x0009e000 C:\WINDOWS\System32\msvcp_win.dll [fFlags=0x0]
15741c64.15c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll [avoiding WinVerifyTrust]
15751c64.15c4: supR3HardenedDllNotificationCallback: load 00007ffcf6aa0000 LB 0x00194000 C:\WINDOWS\System32\gdi32full.dll [fFlags=0x0]
15761c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcp_win.dll'.
15771c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #33 'gdi32.dll'.
15781c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #35 'user32.dll'.
15791c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #36 'win32u.dll'.
15801c64.15c4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\gdi32full.dll)
15811c64.15c4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\gdi32full.dll
15821c64.15c4: supR3HardenedDllNotificationCallback: load 00007ffcf7fe0000 LB 0x00026000 C:\WINDOWS\System32\GDI32.dll [fFlags=0x0]
15831c64.15c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [avoiding WinVerifyTrust]
15841c64.15c4: supR3HardenedDllNotificationCallback: load 00007ffcf8c80000 LB 0x00194000 C:\WINDOWS\System32\USER32.dll [fFlags=0x0]
15851c64.15c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [avoiding WinVerifyTrust]
15861c64.15c4: supR3HardenedDllNotificationCallback: load 00007ffcf7a80000 LB 0x00336000 C:\WINDOWS\System32\combase.dll [fFlags=0x0]
15871c64.15c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\combase.dll [avoiding WinVerifyTrust]
15881c64.15c4: supR3HardenedDllNotificationCallback: load 00007ffcf62b0000 LB 0x0004a000 C:\WINDOWS\System32\cfgmgr32.dll [fFlags=0x0]
15891c64.15c4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll)
15901c64.15c4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll
15911c64.15c4: supR3HardenedDllNotificationCallback: load 00007ffcf4950000 LB 0x00020000 C:\WINDOWS\SYSTEM32\dxcore.dll [fFlags=0x0]
15921c64.15c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\DXCore.dll [avoiding WinVerifyTrust]
15931c64.15c4: supR3HardenedDllNotificationCallback: load 00007ffce6950000 LB 0x0002c000 C:\WINDOWS\SYSTEM32\GLU32.dll [fFlags=0x0]
15941c64.15c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\glu32.dll [avoiding WinVerifyTrust]
15951c64.15c4: supR3HardenedDllNotificationCallback: load 00007ffce0eb0000 LB 0x00156000 C:\WINDOWS\SYSTEM32\OPENGL32.dll [fFlags=0x0]
15961c64.15c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\opengl32.dll
15971c64.15c4: supR3HardenedDllNotificationCallback: load 00007ffcf8760000 LB 0x000a9000 C:\WINDOWS\System32\shcore.dll [fFlags=0x0]
15981c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
15991c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #36 'rpcrt4.dll'.
16001c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #43 'combase.dll'.
16011c64.15c4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\SHCore.dll)
16021c64.15c4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\SHCore.dll
16031c64.15c4: supR3HardenedDllNotificationCallback: load 00007ffcf5d20000 LB 0x00010000 C:\WINDOWS\System32\UMPDC.dll [fFlags=0x0]
16041c64.15c4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\umpdc.dll)
16051c64.15c4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\umpdc.dll
16061c64.15c4: supR3HardenedDllNotificationCallback: load 00007ffcf5da0000 LB 0x0004a000 C:\WINDOWS\System32\powrprof.dll [fFlags=0x0]
16071c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'rpcrt4.dll'.
16081c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #19 'umpdc.dll'.
16091c64.15c4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\powrprof.dll)
16101c64.15c4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\powrprof.dll
16111c64.15c4: supR3HardenedDllNotificationCallback: load 00007ffcf8570000 LB 0x00052000 C:\WINDOWS\System32\shlwapi.dll [fFlags=0x0]
16121c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcrt.dll'.
16131c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #44 'gdi32.dll'.
16141c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #45 'user32.dll'.
16151c64.15c4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\shlwapi.dll)
16161c64.15c4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\shlwapi.dll
16171c64.15c4: supR3HardenedDllNotificationCallback: load 00007ffcf5d30000 LB 0x00011000 C:\WINDOWS\System32\kernel.appcore.dll [fFlags=0x0]
16181c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'msvcrt.dll'.
16191c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'rpcrt4.dll'.
16201c64.15c4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll)
16211c64.15c4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll
16221c64.15c4: supR3HardenedDllNotificationCallback: load 00007ffcf6320000 LB 0x00780000 C:\WINDOWS\System32\windows.storage.dll [fFlags=0x0]
16231c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #31 'combase.dll'.
16241c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #32 'msvcp_win.dll'.
16251c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #39 'rpcrt4.dll'.
16261c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #56 'profapi.dll'.
16271c64.15c4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\windows.storage.dll)
16281c64.15c4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\windows.storage.dll
16291c64.15c4: supR3HardenedDllNotificationCallback: load 00007ffcf6f10000 LB 0x006e5000 C:\WINDOWS\System32\SHELL32.dll [fFlags=0x0]
16301c64.15c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll [avoiding WinVerifyTrust]
16311c64.15c4: supR3HardenedDllNotificationCallback: load 00007ffcf7880000 LB 0x00157000 C:\WINDOWS\System32\ole32.dll [fFlags=0x0]
16321c64.15c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ole32.dll
16331c64.15c4: supR3HardenedDllNotificationCallback: load 00007ffcefee0000 LB 0x0001b000 C:\WINDOWS\SYSTEM32\MPR.dll [fFlags=0x0]
16341c64.15c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\mpr.dll [avoiding WinVerifyTrust]
16351c64.15c4: supR3HardenedDllNotificationCallback: load 000000005b9f0000 LB 0x00565000 C:\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [fFlags=0x0]
16361c64.15c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll
16371c64.15c4: supR3HardenedDllNotificationCallback: load 00007ffcd1440000 LB 0x005f7000 C:\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [fFlags=0x0]
16381c64.15c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll
16391c64.15c4: supR3HardenedDllNotificationCallback: load 000000005b3e0000 LB 0x00561000 C:\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [fFlags=0x0]
16401c64.15c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [avoiding WinVerifyTrust]
16411c64.15c4: supR3HardenedDllNotificationCallback: load 00007ffcf7600000 LB 0x000c4000 C:\WINDOWS\System32\OLEAUT32.dll [fFlags=0x0]
16421c64.15c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll
16431c64.15c4: supR3HardenedDllNotificationCallback: load 00007ffcca700000 LB 0x02614000 C:\Program Files\Oracle\VirtualBox\UICommon.dll [fFlags=0x0]
16441c64.15c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\UICommon.dll
16451c64.15c4: supR3HardenedDllNotificationCallback: load 000000005b120000 LB 0x00054000 C:\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll [fFlags=0x0]
16461c64.15c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll
16471c64.15c4: supR3HardenedDllNotificationCallback: load 00007ffcf33d0000 LB 0x0002d000 C:\WINDOWS\SYSTEM32\WINMMBASE.dll [fFlags=0x0]
16481c64.15c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmmbase.dll [avoiding WinVerifyTrust]
16491c64.15c4: supR3HardenedDllNotificationCallback: load 00007ffcf3a20000 LB 0x00024000 C:\WINDOWS\SYSTEM32\WINMM.dll [fFlags=0x0]
16501c64.15c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmm.dll
16511c64.15c4: supR3HardenedDllNotificationCallback: load 00007ffcdfc10000 LB 0x001c8000 C:\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll [fFlags=0x0]
16521c64.15c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll
16531c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\windows.storage.dll'.
16541c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\windows.storage.dll' [rescheduled]
16551c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll'.
16561c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll' [rescheduled]
16571c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\shlwapi.dll'.
16581c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\shlwapi.dll' [rescheduled]
16591c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\powrprof.dll'.
16601c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\powrprof.dll' [rescheduled]
16611c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\umpdc.dll'.
16621c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\umpdc.dll' [rescheduled]
16631c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\SHCore.dll'.
16641c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\SHCore.dll' [rescheduled]
16651c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll'.
16661c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll' [rescheduled]
16671c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\gdi32full.dll'.
16681c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\gdi32full.dll' [rescheduled]
16691c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\DXCore.dll'.
16701c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\DXCore.dll' [rescheduled]
16711c64.15c4: Detected loader lock ownership: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume3\Windows\System32\glu32.dll'.
16721c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 22900 (was 22900) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\glu32.dll' [rescheduled]
16731c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\mpr.dll'.
16741c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\mpr.dll' [rescheduled]
16751c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\shell32.dll'.
16761c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\shell32.dll' [rescheduled]
16771c64.15c4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'.
16781c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll' [rescheduled]
16791c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\win32u.dll'.
16801c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rescheduled]
16811c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\gdi32.dll'.
16821c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rescheduled]
16831c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\user32.dll'.
16841c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rescheduled]
16851c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll'.
16861c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rescheduled]
16871c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\combase.dll'.
16881c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rescheduled]
16891c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\winmmbase.dll'.
16901c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\winmmbase.dll' [rescheduled]
16911c64.15c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\kernel32.dll
16921c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'profapi.dll'...
16931c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'profapi.dll' -> '\Device\HarddiskVolume3\Windows\System32\profapi.dll' [rcNtRedir=0xc0150008]
16941c64.15c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\profapi.dll
16951c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
16961c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
16971c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
16981c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
16991c64.15c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll [redoing WinVerifyTrust]
17001c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll'.
17011c64.15c4: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll
17021c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
17031c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
17041c64.15c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\combase.dll [redoing WinVerifyTrust]
17051c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\combase.dll'.
17061c64.15c4: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume3\Windows\System32\combase.dll
17071c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
17081c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
17091c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
17101c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
17111c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
17121c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
17131c64.15c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [redoing WinVerifyTrust]
17141c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\user32.dll'.
17151c64.15c4: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume3\Windows\System32\user32.dll
17161c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
17171c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
17181c64.15c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [redoing WinVerifyTrust]
17191c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\gdi32.dll'.
17201c64.15c4: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume3\Windows\System32\gdi32.dll
17211c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
17221c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
17231c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'umpdc.dll'...
17241c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'umpdc.dll' -> '\Device\HarddiskVolume3\Windows\System32\umpdc.dll' [rcNtRedir=0xc0150008]
17251c64.15c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\umpdc.dll [redoing WinVerifyTrust]
17261c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\umpdc.dll'.
17271c64.15c4: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume3\Windows\System32\umpdc.dll
17281c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
17291c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
17301c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
17311c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
17321c64.15c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\combase.dll [redoing WinVerifyTrust]
17331c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\combase.dll'.
17341c64.15c4: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume3\Windows\System32\combase.dll
17351c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
17361c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
17371c64.15c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll
17381c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
17391c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
17401c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
17411c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
17421c64.15c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\win32u.dll [redoing WinVerifyTrust]
17431c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\win32u.dll'.
17441c64.15c4: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume3\Windows\System32\win32u.dll
17451c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
17461c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
17471c64.15c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [redoing WinVerifyTrust]
17481c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\user32.dll'.
17491c64.15c4: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume3\Windows\System32\user32.dll
17501c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
17511c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
17521c64.15c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [redoing WinVerifyTrust]
17531c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\gdi32.dll'.
17541c64.15c4: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume3\Windows\System32\gdi32.dll
17551c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
17561c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
17571c64.15c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll [redoing WinVerifyTrust]
17581c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll'.
17591c64.15c4: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll
17601c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
17611c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
17621c64.15c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\win32u.dll [redoing WinVerifyTrust]
17631c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\win32u.dll'.
17641c64.15c4: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume3\Windows\System32\win32u.dll
17651c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
17661c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
17671c64.15c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll [redoing WinVerifyTrust]
17681c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll'.
17691c64.15c4: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll
17701c64.15c4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\kernel32.dll (Input=kernel32, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
17711c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf86a0000 'C:\WINDOWS\System32\kernel32.dll'
17721c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\windows.storage.dll'.
17731c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\windows.storage.dll' [rescheduled]
17741c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll'.
17751c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll' [rescheduled]
17761c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\shlwapi.dll'.
17771c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\shlwapi.dll' [rescheduled]
17781c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\powrprof.dll'.
17791c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\powrprof.dll' [rescheduled]
17801c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\umpdc.dll'.
17811c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\umpdc.dll' [rescheduled]
17821c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\SHCore.dll'.
17831c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\SHCore.dll' [rescheduled]
17841c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll'.
17851c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll' [rescheduled]
17861c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\gdi32full.dll'.
17871c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\gdi32full.dll' [rescheduled]
17881c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\DXCore.dll'.
17891c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\DXCore.dll' [rescheduled]
17901c64.15c4: Detected loader lock ownership: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume3\Windows\System32\glu32.dll'.
17911c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 22900 (was 22900) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\glu32.dll' [rescheduled]
17921c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\mpr.dll'.
17931c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\mpr.dll' [rescheduled]
17941c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\shell32.dll'.
17951c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\shell32.dll' [rescheduled]
17961c64.15c4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'.
17971c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll' [rescheduled]
17981c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\win32u.dll'.
17991c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rescheduled]
18001c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\gdi32.dll'.
18011c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rescheduled]
18021c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\user32.dll'.
18031c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rescheduled]
18041c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll'.
18051c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rescheduled]
18061c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\combase.dll'.
18071c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rescheduled]
18081c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\winmmbase.dll'.
18091c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\winmmbase.dll' [rescheduled]
18101c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\windows.storage.dll'.
18111c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\windows.storage.dll' [rescheduled]
18121c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll'.
18131c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll' [rescheduled]
18141c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\shlwapi.dll'.
18151c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\shlwapi.dll' [rescheduled]
18161c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\powrprof.dll'.
18171c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\powrprof.dll' [rescheduled]
18181c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\umpdc.dll'.
18191c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\umpdc.dll' [rescheduled]
18201c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\SHCore.dll'.
18211c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\SHCore.dll' [rescheduled]
18221c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll'.
18231c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll' [rescheduled]
18241c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\gdi32full.dll'.
18251c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\gdi32full.dll' [rescheduled]
18261c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\DXCore.dll'.
18271c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\DXCore.dll' [rescheduled]
18281c64.15c4: Detected loader lock ownership: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume3\Windows\System32\glu32.dll'.
18291c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 22900 (was 22900) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\glu32.dll' [rescheduled]
18301c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\mpr.dll'.
18311c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\mpr.dll' [rescheduled]
18321c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\shell32.dll'.
18331c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\shell32.dll' [rescheduled]
18341c64.15c4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'.
18351c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll' [rescheduled]
18361c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\win32u.dll'.
18371c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rescheduled]
18381c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\gdi32.dll'.
18391c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rescheduled]
18401c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\user32.dll'.
18411c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rescheduled]
18421c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll'.
18431c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rescheduled]
18441c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\combase.dll'.
18451c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rescheduled]
18461c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\winmmbase.dll'.
18471c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\winmmbase.dll' [rescheduled]
18481c64.15c4: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-string-l1-1-0) -> 0x0, fPresent=1
18491c64.15c4: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-string-l1-1-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
18501c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf5fa0000 'api-ms-win-core-string-l1-1-0'
18511c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\windows.storage.dll'.
18521c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\windows.storage.dll' [rescheduled]
18531c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll'.
18541c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll' [rescheduled]
18551c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\shlwapi.dll'.
18561c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\shlwapi.dll' [rescheduled]
18571c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\powrprof.dll'.
18581c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\powrprof.dll' [rescheduled]
18591c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\umpdc.dll'.
18601c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\umpdc.dll' [rescheduled]
18611c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\SHCore.dll'.
18621c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\SHCore.dll' [rescheduled]
18631c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll'.
18641c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll' [rescheduled]
18651c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\gdi32full.dll'.
18661c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\gdi32full.dll' [rescheduled]
18671c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\DXCore.dll'.
18681c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\DXCore.dll' [rescheduled]
18691c64.15c4: Detected loader lock ownership: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume3\Windows\System32\glu32.dll'.
18701c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 22900 (was 22900) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\glu32.dll' [rescheduled]
18711c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\mpr.dll'.
18721c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\mpr.dll' [rescheduled]
18731c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\shell32.dll'.
18741c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\shell32.dll' [rescheduled]
18751c64.15c4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'.
18761c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll' [rescheduled]
18771c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\win32u.dll'.
18781c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rescheduled]
18791c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\gdi32.dll'.
18801c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rescheduled]
18811c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\user32.dll'.
18821c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rescheduled]
18831c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll'.
18841c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rescheduled]
18851c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\combase.dll'.
18861c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rescheduled]
18871c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\winmmbase.dll'.
18881c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\winmmbase.dll' [rescheduled]
18891c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\windows.storage.dll'.
18901c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\windows.storage.dll' [rescheduled]
18911c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll'.
18921c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll' [rescheduled]
18931c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\shlwapi.dll'.
18941c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\shlwapi.dll' [rescheduled]
18951c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\powrprof.dll'.
18961c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\powrprof.dll' [rescheduled]
18971c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\umpdc.dll'.
18981c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\umpdc.dll' [rescheduled]
18991c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\SHCore.dll'.
19001c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\SHCore.dll' [rescheduled]
19011c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll'.
19021c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll' [rescheduled]
19031c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\gdi32full.dll'.
19041c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\gdi32full.dll' [rescheduled]
19051c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\DXCore.dll'.
19061c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\DXCore.dll' [rescheduled]
19071c64.15c4: Detected loader lock ownership: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume3\Windows\System32\glu32.dll'.
19081c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 22900 (was 22900) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\glu32.dll' [rescheduled]
19091c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\mpr.dll'.
19101c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\mpr.dll' [rescheduled]
19111c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\shell32.dll'.
19121c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\shell32.dll' [rescheduled]
19131c64.15c4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'.
19141c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll' [rescheduled]
19151c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\win32u.dll'.
19161c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rescheduled]
19171c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\gdi32.dll'.
19181c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rescheduled]
19191c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\user32.dll'.
19201c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rescheduled]
19211c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll'.
19221c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rescheduled]
19231c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\combase.dll'.
19241c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rescheduled]
19251c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\winmmbase.dll'.
19261c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\winmmbase.dll' [rescheduled]
19271c64.15c4: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-datetime-l1-1-1) -> 0x0, fPresent=1
19281c64.15c4: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-datetime-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
19291c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf5fa0000 'api-ms-win-core-datetime-l1-1-1'
19301c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\windows.storage.dll'.
19311c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\windows.storage.dll' [rescheduled]
19321c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll'.
19331c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll' [rescheduled]
19341c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\shlwapi.dll'.
19351c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\shlwapi.dll' [rescheduled]
19361c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\powrprof.dll'.
19371c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\powrprof.dll' [rescheduled]
19381c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\umpdc.dll'.
19391c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\umpdc.dll' [rescheduled]
19401c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\SHCore.dll'.
19411c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\SHCore.dll' [rescheduled]
19421c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll'.
19431c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll' [rescheduled]
19441c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\gdi32full.dll'.
19451c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\gdi32full.dll' [rescheduled]
19461c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\DXCore.dll'.
19471c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\DXCore.dll' [rescheduled]
19481c64.15c4: Detected loader lock ownership: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume3\Windows\System32\glu32.dll'.
19491c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 22900 (was 22900) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\glu32.dll' [rescheduled]
19501c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\mpr.dll'.
19511c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\mpr.dll' [rescheduled]
19521c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\shell32.dll'.
19531c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\shell32.dll' [rescheduled]
19541c64.15c4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'.
19551c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll' [rescheduled]
19561c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\win32u.dll'.
19571c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rescheduled]
19581c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\gdi32.dll'.
19591c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rescheduled]
19601c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\user32.dll'.
19611c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rescheduled]
19621c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll'.
19631c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rescheduled]
19641c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\combase.dll'.
19651c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rescheduled]
19661c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\winmmbase.dll'.
19671c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\winmmbase.dll' [rescheduled]
19681c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\windows.storage.dll'.
19691c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\windows.storage.dll' [rescheduled]
19701c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll'.
19711c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll' [rescheduled]
19721c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\shlwapi.dll'.
19731c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\shlwapi.dll' [rescheduled]
19741c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\powrprof.dll'.
19751c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\powrprof.dll' [rescheduled]
19761c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\umpdc.dll'.
19771c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\umpdc.dll' [rescheduled]
19781c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\SHCore.dll'.
19791c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\SHCore.dll' [rescheduled]
19801c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll'.
19811c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll' [rescheduled]
19821c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\gdi32full.dll'.
19831c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\gdi32full.dll' [rescheduled]
19841c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\DXCore.dll'.
19851c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\DXCore.dll' [rescheduled]
19861c64.15c4: Detected loader lock ownership: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume3\Windows\System32\glu32.dll'.
19871c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 22900 (was 22900) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\glu32.dll' [rescheduled]
19881c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\mpr.dll'.
19891c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\mpr.dll' [rescheduled]
19901c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\shell32.dll'.
19911c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\shell32.dll' [rescheduled]
19921c64.15c4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'.
19931c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll' [rescheduled]
19941c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\win32u.dll'.
19951c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rescheduled]
19961c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\gdi32.dll'.
19971c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rescheduled]
19981c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\user32.dll'.
19991c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rescheduled]
20001c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll'.
20011c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rescheduled]
20021c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\combase.dll'.
20031c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rescheduled]
20041c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\winmmbase.dll'.
20051c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\winmmbase.dll' [rescheduled]
20061c64.15c4: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-localization-obsolete-l1-2-0) -> 0x0, fPresent=1
20071c64.15c4: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-obsolete-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
20081c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf5fa0000 'api-ms-win-core-localization-obsolete-l1-2-0'
20091c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\windows.storage.dll'.
20101c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\windows.storage.dll' [rescheduled]
20111c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll'.
20121c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll' [rescheduled]
20131c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\shlwapi.dll'.
20141c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\shlwapi.dll' [rescheduled]
20151c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\powrprof.dll'.
20161c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\powrprof.dll' [rescheduled]
20171c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\umpdc.dll'.
20181c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\umpdc.dll' [rescheduled]
20191c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\SHCore.dll'.
20201c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\SHCore.dll' [rescheduled]
20211c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll'.
20221c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll' [rescheduled]
20231c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\gdi32full.dll'.
20241c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\gdi32full.dll' [rescheduled]
20251c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\DXCore.dll'.
20261c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\DXCore.dll' [rescheduled]
20271c64.15c4: Detected loader lock ownership: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume3\Windows\System32\glu32.dll'.
20281c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 22900 (was 22900) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\glu32.dll' [rescheduled]
20291c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\mpr.dll'.
20301c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\mpr.dll' [rescheduled]
20311c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\shell32.dll'.
20321c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\shell32.dll' [rescheduled]
20331c64.15c4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'.
20341c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll' [rescheduled]
20351c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\win32u.dll'.
20361c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rescheduled]
20371c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\gdi32.dll'.
20381c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rescheduled]
20391c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\user32.dll'.
20401c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rescheduled]
20411c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll'.
20421c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rescheduled]
20431c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\combase.dll'.
20441c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rescheduled]
20451c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\winmmbase.dll'.
20461c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\winmmbase.dll' [rescheduled]
20471c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\windows.storage.dll'.
20481c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\windows.storage.dll' [rescheduled]
20491c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll'.
20501c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll' [rescheduled]
20511c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\shlwapi.dll'.
20521c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\shlwapi.dll' [rescheduled]
20531c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\powrprof.dll'.
20541c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\powrprof.dll' [rescheduled]
20551c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\umpdc.dll'.
20561c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\umpdc.dll' [rescheduled]
20571c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\SHCore.dll'.
20581c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\SHCore.dll' [rescheduled]
20591c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll'.
20601c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll' [rescheduled]
20611c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\gdi32full.dll'.
20621c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\gdi32full.dll' [rescheduled]
20631c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\DXCore.dll'.
20641c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\DXCore.dll' [rescheduled]
20651c64.15c4: Detected loader lock ownership: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume3\Windows\System32\glu32.dll'.
20661c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 22900 (was 22900) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\glu32.dll' [rescheduled]
20671c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\mpr.dll'.
20681c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\mpr.dll' [rescheduled]
20691c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\shell32.dll'.
20701c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\shell32.dll' [rescheduled]
20711c64.15c4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'.
20721c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll' [rescheduled]
20731c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\win32u.dll'.
20741c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rescheduled]
20751c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\gdi32.dll'.
20761c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rescheduled]
20771c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\user32.dll'.
20781c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rescheduled]
20791c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll'.
20801c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rescheduled]
20811c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\combase.dll'.
20821c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rescheduled]
20831c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\winmmbase.dll'.
20841c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\winmmbase.dll' [rescheduled]
20851c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\imm32.dll'.
20861c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'user32.dll'.
20871c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #25 'win32u.dll'.
20881c64.15c4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\imm32.dll)
20891c64.15c4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\imm32.dll
20901c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
20911c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
20921c64.15c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\win32u.dll [redoing WinVerifyTrust]
20931c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\win32u.dll'.
20941c64.15c4: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume3\Windows\System32\win32u.dll
20951c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
20961c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
20971c64.15c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [redoing WinVerifyTrust]
20981c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\user32.dll'.
20991c64.15c4: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume3\Windows\System32\user32.dll
21001c64.15c4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\IMM32.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
21011c64.15c4: supR3HardenedDllNotificationCallback: load 00007ffcf8090000 LB 0x0002e000 C:\WINDOWS\System32\IMM32.DLL [fFlags=0x0]
21021c64.15c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\imm32.dll [avoiding WinVerifyTrust]
21031c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf8090000 'C:\WINDOWS\system32\IMM32.DLL'
21041c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\imm32.dll'.
21051c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\imm32.dll' [rescheduled]
21061c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\windows.storage.dll'.
21071c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\windows.storage.dll' [rescheduled]
21081c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll'.
21091c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll' [rescheduled]
21101c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\shlwapi.dll'.
21111c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\shlwapi.dll' [rescheduled]
21121c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\powrprof.dll'.
21131c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\powrprof.dll' [rescheduled]
21141c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\umpdc.dll'.
21151c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\umpdc.dll' [rescheduled]
21161c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\SHCore.dll'.
21171c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\SHCore.dll' [rescheduled]
21181c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll'.
21191c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll' [rescheduled]
21201c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\gdi32full.dll'.
21211c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\gdi32full.dll' [rescheduled]
21221c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\DXCore.dll'.
21231c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\DXCore.dll' [rescheduled]
21241c64.15c4: Detected loader lock ownership: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume3\Windows\System32\glu32.dll'.
21251c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 22900 (was 22900) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\glu32.dll' [rescheduled]
21261c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\mpr.dll'.
21271c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\mpr.dll' [rescheduled]
21281c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\shell32.dll'.
21291c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\shell32.dll' [rescheduled]
21301c64.15c4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'.
21311c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll' [rescheduled]
21321c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\win32u.dll'.
21331c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rescheduled]
21341c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\gdi32.dll'.
21351c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rescheduled]
21361c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\user32.dll'.
21371c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rescheduled]
21381c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll'.
21391c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rescheduled]
21401c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\combase.dll'.
21411c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rescheduled]
21421c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\winmmbase.dll'.
21431c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\winmmbase.dll' [rescheduled]
21441c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\imm32.dll'.
21451c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\imm32.dll' [rescheduled]
21461c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\windows.storage.dll'.
21471c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\windows.storage.dll' [rescheduled]
21481c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll'.
21491c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll' [rescheduled]
21501c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\shlwapi.dll'.
21511c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\shlwapi.dll' [rescheduled]
21521c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\powrprof.dll'.
21531c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\powrprof.dll' [rescheduled]
21541c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\umpdc.dll'.
21551c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\umpdc.dll' [rescheduled]
21561c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\SHCore.dll'.
21571c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\SHCore.dll' [rescheduled]
21581c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll'.
21591c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll' [rescheduled]
21601c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\gdi32full.dll'.
21611c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\gdi32full.dll' [rescheduled]
21621c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\DXCore.dll'.
21631c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\DXCore.dll' [rescheduled]
21641c64.15c4: Detected loader lock ownership: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume3\Windows\System32\glu32.dll'.
21651c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 22900 (was 22900) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\glu32.dll' [rescheduled]
21661c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\mpr.dll'.
21671c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\mpr.dll' [rescheduled]
21681c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\shell32.dll'.
21691c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\shell32.dll' [rescheduled]
21701c64.15c4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'.
21711c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll' [rescheduled]
21721c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\win32u.dll'.
21731c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rescheduled]
21741c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\gdi32.dll'.
21751c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rescheduled]
21761c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\user32.dll'.
21771c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rescheduled]
21781c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll'.
21791c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rescheduled]
21801c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\combase.dll'.
21811c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rescheduled]
21821c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\winmmbase.dll'.
21831c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\winmmbase.dll' [rescheduled]
21841c64.15c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll
21851c64.15c4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\ADVAPI32.DLL (Input=ADVAPI32.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
21861c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf80d0000 'C:\WINDOWS\System32\ADVAPI32.DLL'
21871c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\imm32.dll'.
21881c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\imm32.dll' [rescheduled]
21891c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\windows.storage.dll'.
21901c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\windows.storage.dll' [rescheduled]
21911c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll'.
21921c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll' [rescheduled]
21931c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\shlwapi.dll'.
21941c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\shlwapi.dll' [rescheduled]
21951c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\powrprof.dll'.
21961c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\powrprof.dll' [rescheduled]
21971c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\umpdc.dll'.
21981c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\umpdc.dll' [rescheduled]
21991c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\SHCore.dll'.
22001c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\SHCore.dll' [rescheduled]
22011c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll'.
22021c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll' [rescheduled]
22031c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\gdi32full.dll'.
22041c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\gdi32full.dll' [rescheduled]
22051c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\DXCore.dll'.
22061c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\DXCore.dll' [rescheduled]
22071c64.15c4: Detected loader lock ownership: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume3\Windows\System32\glu32.dll'.
22081c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 22900 (was 22900) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\glu32.dll' [rescheduled]
22091c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\mpr.dll'.
22101c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\mpr.dll' [rescheduled]
22111c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\shell32.dll'.
22121c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\shell32.dll' [rescheduled]
22131c64.15c4: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'.
22141c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll' [rescheduled]
22151c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\win32u.dll'.
22161c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rescheduled]
22171c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\gdi32.dll'.
22181c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rescheduled]
22191c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\user32.dll'.
22201c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rescheduled]
22211c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll'.
22221c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rescheduled]
22231c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\combase.dll'.
22241c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rescheduled]
22251c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\winmmbase.dll'.
22261c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\winmmbase.dll' [rescheduled]
22271c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcdfc10000 'C:\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll'
22281c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
22291c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6c40000 'C:\WINDOWS\System32\crypt32.dll'
22301c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\imm32.dll'
22311c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
22321c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6c40000 'C:\WINDOWS\System32\crypt32.dll'
22331c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\windows.storage.dll'
22341c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
22351c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6c40000 'C:\WINDOWS\System32\crypt32.dll'
22361c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll'
22371c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
22381c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6c40000 'C:\WINDOWS\System32\crypt32.dll'
22391c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\shlwapi.dll'
22401c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
22411c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6c40000 'C:\WINDOWS\System32\crypt32.dll'
22421c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\powrprof.dll'
22431c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
22441c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6c40000 'C:\WINDOWS\System32\crypt32.dll'
22451c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\umpdc.dll'
22461c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
22471c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6c40000 'C:\WINDOWS\System32\crypt32.dll'
22481c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\SHCore.dll'
22491c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
22501c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6c40000 'C:\WINDOWS\System32\crypt32.dll'
22511c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll'
22521c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
22531c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6c40000 'C:\WINDOWS\System32\crypt32.dll'
22541c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\gdi32full.dll'
22551c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
22561c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6c40000 'C:\WINDOWS\System32\crypt32.dll'
22571c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\DXCore.dll'
22581c64.15c4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000000000004ac pwszName=\Device\HarddiskVolume3\Windows\System32\glu32.dll
22591c64.15c4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000016481c0
22601c64.15c4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000016481c0
22611c64.15c4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=F356C86D0A2DBA0570D09B39D4AF818DFCB17010
22621c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
22631c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6c40000 'C:\WINDOWS\System32\crypt32.dll'
22641c64.15c4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0212~31bf3856ad364e35~amd64~~10.0.18362.387.cat'; file='\Device\HarddiskVolume3\Windows\System32\glu32.dll'
22651c64.15c4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
22661c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\glu32.dll'
22671c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
22681c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6c40000 'C:\WINDOWS\System32\crypt32.dll'
22691c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\mpr.dll'
22701c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
22711c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6c40000 'C:\WINDOWS\System32\crypt32.dll'
22721c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\shell32.dll'
22731c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
22741c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 24202) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'
22751c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
22761c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6c40000 'C:\WINDOWS\System32\crypt32.dll'
22771c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\win32u.dll'
22781c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
22791c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6c40000 'C:\WINDOWS\System32\crypt32.dll'
22801c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\gdi32.dll'
22811c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
22821c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6c40000 'C:\WINDOWS\System32\crypt32.dll'
22831c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\user32.dll'
22841c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
22851c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6c40000 'C:\WINDOWS\System32\crypt32.dll'
22861c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll'
22871c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
22881c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6c40000 'C:\WINDOWS\System32\crypt32.dll'
22891c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\combase.dll'
22901c64.15c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
22911c64.15c4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
22921c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
22931c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6c40000 'C:\WINDOWS\System32\crypt32.dll'
22941c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\winmmbase.dll'
22951c64.15c4: SUPR3HardenedMain: Calling TrustedMain (00007ffcdfc116c0)...
22961c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
22971c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'gdi32.dll'.
22981c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'ole32.dll'.
22991c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'user32.dll'.
23001c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'imm32.dll'.
23011c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'winmm.dll'.
23021c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'oleaut32.dll'.
23031c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'shell32.dll'.
23041c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'advapi32.dll'.
23051c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'qt5guivbox.dll'.
23061c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'qt5corevbox.dll'.
23071c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'msvcr100.dll'.
23081c64.15c4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\platforms\qwindows.dll) WinVerifyTrust
23091c64.15c4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\platforms\qwindows.dll
23101c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
23111c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
23121c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
23131c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
23141c64.15c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll
23151c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
23161c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
23171c64.15c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll
23181c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
23191c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
23201c64.15c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll
23211c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
23221c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume3\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
23231c64.15c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
23241c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
23251c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
23261c64.15c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll
23271c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
23281c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume3\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008]
23291c64.15c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmm.dll
23301c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'imm32.dll'...
23311c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'imm32.dll' -> '\Device\HarddiskVolume3\Windows\System32\imm32.dll' [rcNtRedir=0xc0150008]
23321c64.15c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\imm32.dll
23331c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
23341c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
23351c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
23361c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
23371c64.15c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ole32.dll
23381c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
23391c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
23401c64.15c4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\platforms\qwindows.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
23411c64.15c4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\platforms\qwindows.dll
23421c64.15c4: supR3HardenedDllNotificationCallback: load 00007ffcd1250000 LB 0x0012e000 C:\Program Files\Oracle\VirtualBox\platforms\qwindows.dll [fFlags=0x0]
23431c64.15c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\platforms\qwindows.dll
23441c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcd1250000 'C:\Program Files\Oracle\VirtualBox\platforms\qwindows.dll'
23451c64.15c4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000628 pwszName=\Device\HarddiskVolume3\Windows\System32\uxtheme.dll
23461c64.15c4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000016481c0
23471c64.15c4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000016481c0
23481c64.15c4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=286AD1CEC16EFDCA5718925D19E68A486A5851A0
23491c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
23501c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6c40000 'C:\WINDOWS\System32\crypt32.dll'
23511c64.15c4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.18362.778.cat'; file='\Device\HarddiskVolume3\Windows\System32\uxtheme.dll'
23521c64.15c4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
23531c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
23541c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #33 'gdi32.dll'.
23551c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #34 'user32.dll'.
23561c64.15c4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\uxtheme.dll) WinVerifyTrust
23571c64.15c4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\uxtheme.dll
23581c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
23591c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
23601c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
23611c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
23621c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
23631c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
23641c64.15c4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\uxtheme.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
23651c64.15c4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\uxtheme.dll
23661c64.15c4: supR3HardenedDllNotificationCallback: load 00007ffcf3f80000 LB 0x00099000 C:\WINDOWS\system32\uxtheme.dll [fFlags=0x0]
23671c64.15c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\uxtheme.dll
23681c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf3f80000 'C:\WINDOWS\system32\uxtheme.dll'
23691c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf8c80000 'C:\WINDOWS\system32\user32.dll'
23701c64.15c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
23711c64.15c4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\shell32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
23721c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6f10000 'C:\WINDOWS\system32\shell32.dll'
23731c64.15c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\SHCore.dll
23741c64.15c4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\SHCore.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
23751c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf8760000 'C:\WINDOWS\system32\SHCore.dll'
23761c64.15c4: supR3HardenedMonitor_LdrLoadDll: error opening 'C:\WINDOWS\system32\wintab32.dll': 0 (NtPath=\??\C:\WINDOWS\system32\wintab32.dll; Input=C:\WINDOWS\system32\wintab32.dll; rcNtGetDll=0x0
23771c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0xc0000034 'C:\WINDOWS\system32\wintab32.dll'
23781c64.15c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmm.dll
23791c64.15c4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\winmm.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
23801c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf3a20000 'C:\WINDOWS\system32\winmm.dll'
23811c64.15c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmm.dll
23821c64.15c4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\winmm.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
23831c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf3a20000 'C:\WINDOWS\system32\winmm.dll'
23841c64.15c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
23851c64.15c4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\shell32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
23861c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6f10000 'C:\WINDOWS\system32\shell32.dll'
23871c64.15c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\uxtheme.dll
23881c64.15c4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\uxtheme.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
23891c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf3f80000 'C:\WINDOWS\system32\uxtheme.dll'
23901c64.15c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll
23911c64.15c4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\advapi32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
23921c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf80d0000 'C:\WINDOWS\system32\advapi32.dll'
23931c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
23941c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6c40000 'C:\WINDOWS\System32\crypt32.dll'
23951c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #13 'rpcrt4.dll'.
23961c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #30 'profapi.dll'.
23971c64.15c4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\userenv.dll) WinVerifyTrust
23981c64.15c4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\userenv.dll
23991c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'profapi.dll'...
24001c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'profapi.dll' -> '\Device\HarddiskVolume3\Windows\System32\profapi.dll' [rcNtRedir=0xc0150008]
24011c64.15c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\profapi.dll
24021c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
24031c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
24041c64.15c4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\userenv.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
24051c64.15c4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\userenv.dll
24061c64.15c4: supR3HardenedDllNotificationCallback: load 00007ffcf5c40000 LB 0x00025000 C:\WINDOWS\system32\userenv.dll [fFlags=0x0]
24071c64.15c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\userenv.dll
24081c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf5c40000 'C:\WINDOWS\system32\userenv.dll'
24091c64.15c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\kernel32.dll
24101c64.15c4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\kernel32.dll (Input=kernel32, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
24111c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf86a0000 'C:\WINDOWS\System32\kernel32.dll'
24121c64.15c4: supR3HardenedDllNotificationCallback: load 00007ffcf8460000 LB 0x000a2000 C:\WINDOWS\System32\clbcatq.dll [fFlags=0x0]
24131c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
24141c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #30 'rpcrt4.dll'.
24151c64.15c4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\clbcatq.dll)
24161c64.15c4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\clbcatq.dll
24171c64.380: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
24181c64.380: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
24191c64.380: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
24201c64.380: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
24211c64.380: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
24221c64.380: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6c40000 'C:\WINDOWS\System32\crypt32.dll'
24231c64.380: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\clbcatq.dll'
24241c64.380: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
24251c64.380: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
24261c64.380: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp100.dll'.
24271c64.380: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxrt.dll'.
24281c64.380: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'advapi32.dll'.
24291c64.380: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'ole32.dll'.
24301c64.380: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'oleaut32.dll'.
24311c64.380: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxC.dll) WinVerifyTrust
24321c64.380: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxC.dll
24331c64.380: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
24341c64.380: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
24351c64.380: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll
24361c64.380: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
24371c64.380: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
24381c64.380: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ole32.dll
24391c64.380: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
24401c64.380: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
24411c64.380: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll
24421c64.380: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
24431c64.380: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
24441c64.380: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
24451c64.380: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
24461c64.380: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll
24471c64.380: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
24481c64.380: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
24491c64.380: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxC.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
24501c64.380: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxC.dll
24511c64.380: supR3HardenedDllNotificationCallback: load 00007ffcca350000 LB 0x003b0000 C:\Program Files\Oracle\VirtualBox\VBoxC.dll [fFlags=0x0]
24521c64.380: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxC.dll
24531c64.380: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcca350000 'C:\Program Files\Oracle\VirtualBox\VBoxC.dll'
24541c64.380: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
24551c64.380: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
24561c64.380: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
24571c64.380: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'advapi32.dll'.
24581c64.380: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'shlwapi.dll'.
24591c64.380: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'ole32.dll'.
24601c64.380: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'oleaut32.dll'.
24611c64.380: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'rpcrt4.dll'.
24621c64.380: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxProxyStub.dll) WinVerifyTrust
24631c64.380: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxProxyStub.dll
24641c64.380: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
24651c64.380: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
24661c64.380: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
24671c64.380: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
24681c64.380: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll
24691c64.380: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
24701c64.380: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
24711c64.380: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ole32.dll
24721c64.380: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shlwapi.dll'...
24731c64.380: supR3HardenedWinVerifyCacheProcessImportTodos: 'shlwapi.dll' -> '\Device\HarddiskVolume3\Windows\System32\shlwapi.dll' [rcNtRedir=0xc0150008]
24741c64.380: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shlwapi.dll
24751c64.380: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
24761c64.380: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
24771c64.380: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll
24781c64.380: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
24791c64.380: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
24801c64.380: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
24811c64.380: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
24821c64.380: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxProxyStub.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
24831c64.380: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxProxyStub.dll
24841c64.380: supR3HardenedDllNotificationCallback: load 00007ffcd0e30000 LB 0x000ed000 C:\Program Files\Oracle\VirtualBox\VBoxProxyStub.dll [fFlags=0x0]
24851c64.380: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxProxyStub.dll
24861c64.380: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcd0e30000 'C:\Program Files\Oracle\VirtualBox\VBoxProxyStub.dll'
24871c64.380: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll
24881c64.380: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\oleaut32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
24891c64.380: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf7600000 'C:\Windows\System32\oleaut32.dll'
24901c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf7fe0000 'C:\WINDOWS\system32\gdi32.dll'
24911c64.484: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
24921c64.484: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
24931c64.484: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
24941c64.484: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
24951c64.484: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
24961c64.484: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxPuelMainVM.dll) WinVerifyTrust
24971c64.484: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxPuelMainVM.dll
24981c64.484: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
24991c64.484: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
25001c64.484: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
25011c64.484: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
25021c64.484: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxPuelMainVM.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
25031c64.484: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxPuelMainVM.dll
25041c64.484: supR3HardenedDllNotificationCallback: load 00007ffcee3b0000 LB 0x0000e000 C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxPuelMainVM.DLL [fFlags=0x0]
25051c64.484: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxPuelMainVM.dll
25061c64.484: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcee3b0000 'C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxPuelMainVM.DLL'
25071c64.15c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
25081c64.15c4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\shell32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
25091c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6f10000 'C:\WINDOWS\system32\shell32.dll'
25101c64.15c4: supR3HardenedDllNotificationCallback: load 00007ffcf81e0000 LB 0x00136000 C:\WINDOWS\System32\MSCTF.dll [fFlags=0x0]
25111c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
25121c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'oleaut32.dll'.
25131c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #38 'user32.dll'.
25141c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #39 'gdi32.dll'.
25151c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #40 'imm32.dll'.
25161c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #41 'advapi32.dll'.
25171c64.15c4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\msctf.dll)
25181c64.15c4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\msctf.dll
25191c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
25201c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
25211c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'imm32.dll'...
25221c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'imm32.dll' -> '\Device\HarddiskVolume3\Windows\System32\imm32.dll' [rcNtRedir=0xc0150008]
25231c64.15c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\imm32.dll
25241c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
25251c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
25261c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
25271c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
25281c64.15c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll
25291c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
25301c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
25311c64.15c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll
25321c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
25331c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
25341c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
25351c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6c40000 'C:\WINDOWS\System32\crypt32.dll'
25361c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\msctf.dll'
25371c64.15c4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000988 pwszName=\Device\HarddiskVolume3\Windows\System32\DataExchange.dll
25381c64.15c4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000016481c0
25391c64.15c4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000016481c0
25401c64.15c4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=3632E0380EF7C400BBC7C4B0B9ED8D9F9860503B
25411c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
25421c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6c40000 'C:\WINDOWS\System32\crypt32.dll'
25431c64.15c4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.18362.778.cat'; file='\Device\HarddiskVolume3\Windows\System32\DataExchange.dll'
25441c64.15c4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
25451c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
25461c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'shcore.dll'.
25471c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #29 'combase.dll'.
25481c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #34 'd3d11.dll'.
25491c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #35 'dcomp.dll'.
25501c64.15c4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\DataExchange.dll) WinVerifyTrust
25511c64.15c4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\DataExchange.dll
25521c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'dcomp.dll'...
25531c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'dcomp.dll' -> '\Device\HarddiskVolume3\Windows\System32\dcomp.dll' [rcNtRedir=0xc0150008]
25541c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
25551c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6c40000 'C:\WINDOWS\System32\crypt32.dll'
25561c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'win32u.dll'.
25571c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp_win.dll'.
25581c64.15c4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\dcomp.dll) WinVerifyTrust
25591c64.15c4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\dcomp.dll
25601c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'd3d11.dll'...
25611c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'd3d11.dll' -> '\Device\HarddiskVolume3\Windows\System32\d3d11.dll' [rcNtRedir=0xc0150008]
25621c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
25631c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
25641c64.15c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll
25651c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
25661c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
25671c64.15c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\win32u.dll
25681c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
25691c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6c40000 'C:\WINDOWS\System32\crypt32.dll'
25701c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
25711c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #24 'dxgi.dll'.
25721c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #27 'win32u.dll'.
25731c64.15c4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\d3d11.dll) WinVerifyTrust
25741c64.15c4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\d3d11.dll
25751c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
25761c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
25771c64.15c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\combase.dll
25781c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shcore.dll'...
25791c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'shcore.dll' -> '\Device\HarddiskVolume3\Windows\System32\shcore.dll' [rcNtRedir=0xc0150008]
25801c64.15c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\SHCore.dll
25811c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
25821c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
25831c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
25841c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
25851c64.15c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\win32u.dll
25861c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'dxgi.dll'...
25871c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'dxgi.dll' -> '\Device\HarddiskVolume3\Windows\System32\dxgi.dll' [rcNtRedir=0xc0150008]
25881c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
25891c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6c40000 'C:\WINDOWS\System32\crypt32.dll'
25901c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
25911c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'win32u.dll'.
25921c64.15c4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\dxgi.dll) WinVerifyTrust
25931c64.15c4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\dxgi.dll
25941c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
25951c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
25961c64.15c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll
25971c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
25981c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
25991c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
26001c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
26011c64.15c4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\dataexchange.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
26021c64.15c4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\DataExchange.dll
26031c64.15c4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\d3d11.dll
26041c64.15c4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\dcomp.dll
26051c64.15c4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\dxgi.dll
26061c64.15c4: supR3HardenedDllNotificationCallback: load 00007ffcf49e0000 LB 0x000eb000 C:\WINDOWS\system32\dxgi.dll [fFlags=0x0]
26071c64.15c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\dxgi.dll
26081c64.15c4: supR3HardenedDllNotificationCallback: load 00007ffcf2330000 LB 0x0025b000 C:\WINDOWS\system32\d3d11.dll [fFlags=0x0]
26091c64.15c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\d3d11.dll
26101c64.15c4: supR3HardenedDllNotificationCallback: load 00007ffcf31f0000 LB 0x001dc000 C:\WINDOWS\system32\dcomp.dll [fFlags=0x0]
26111c64.15c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\dcomp.dll
26121c64.15c4: supR3HardenedDllNotificationCallback: load 00007ffcda0d0000 LB 0x0003a000 C:\WINDOWS\system32\dataexchange.dll [fFlags=0x0]
26131c64.15c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\DataExchange.dll
26141c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf7fe0000 'C:\WINDOWS\System32\gdi32.dll'
26151c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcda0d0000 'C:\WINDOWS\system32\dataexchange.dll'
26161c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'rmclient.dll'.
26171c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #31 'rpcrt4.dll'.
26181c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #47 'combase.dll'.
26191c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #50 'msvcp_win.dll'.
26201c64.15c4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\twinapi.appcore.dll)
26211c64.15c4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\twinapi.appcore.dll
26221c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
26231c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'rpcrt4.dll'.
26241c64.15c4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\rmclient.dll)
26251c64.15c4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\rmclient.dll
26261c64.15c4: supR3HardenedDllNotificationCallback: load 00007ffcf4130000 LB 0x00029000 C:\WINDOWS\system32\RMCLIENT.dll [fFlags=0x0]
26271c64.15c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rmclient.dll [avoiding WinVerifyTrust]
26281c64.15c4: supR3HardenedDllNotificationCallback: load 00007ffcf3b50000 LB 0x0025a000 C:\WINDOWS\system32\twinapi.appcore.dll [fFlags=0x0]
26291c64.15c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\twinapi.appcore.dll [avoiding WinVerifyTrust]
26301c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
26311c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
26321c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
26331c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
26341c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
26351c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
26361c64.15c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll
26371c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
26381c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
26391c64.15c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\combase.dll
26401c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
26411c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
26421c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rmclient.dll'...
26431c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rmclient.dll' -> '\Device\HarddiskVolume3\Windows\System32\rmclient.dll' [rcNtRedir=0xc0150008]
26441c64.15c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rmclient.dll [lacks WinVerifyTrust]
26451c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
26461c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6c40000 'C:\WINDOWS\System32\crypt32.dll'
26471c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\rmclient.dll'
26481c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
26491c64.15c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll
26501c64.15c4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\crypt32.dll (Input=crypt32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
26511c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6c40000 'C:\WINDOWS\System32\crypt32.dll'
26521c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\twinapi.appcore.dll'
26531c64.15c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\SHCore.dll
26541c64.15c4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\Shcore.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
26551c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf8760000 'C:\WINDOWS\system32\Shcore.dll'
26561c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
26571c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #15 'rpcrt4.dll'.
26581c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #19 'coreuicomponents.dll'.
26591c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #20 'coremessaging.dll'.
26601c64.15c4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\TextInputFramework.dll)
26611c64.15c4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\TextInputFramework.dll
26621c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
26631c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #35 'coremessaging.dll'.
26641c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #47 'shcore.dll'.
26651c64.15c4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\CoreUIComponents.dll)
26661c64.15c4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\CoreUIComponents.dll
26671c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
26681c64.15c4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\CoreMessaging.dll)
26691c64.15c4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\CoreMessaging.dll
26701c64.15c4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\ntmarta.dll)
26711c64.15c4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\ntmarta.dll
26721c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'combase.dll'.
26731c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #24 'rpcrt4.dll'.
26741c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #32 'bcryptprimitives.dll'.
26751c64.15c4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\WinTypes.dll)
26761c64.15c4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\WinTypes.dll
26771c64.15c4: supR3HardenedDllNotificationCallback: load 00007ffcf4d40000 LB 0x00031000 C:\WINDOWS\SYSTEM32\ntmarta.dll [fFlags=0x0]
26781c64.15c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ntmarta.dll [avoiding WinVerifyTrust]
26791c64.15c4: supR3HardenedDllNotificationCallback: load 00007ffcf2590000 LB 0x000d4000 C:\WINDOWS\System32\CoreMessaging.dll [fFlags=0x0]
26801c64.15c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\CoreMessaging.dll [avoiding WinVerifyTrust]
26811c64.15c4: supR3HardenedDllNotificationCallback: load 00007ffcf1ab0000 LB 0x00153000 C:\WINDOWS\SYSTEM32\wintypes.dll [fFlags=0x0]
26821c64.15c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\WinTypes.dll [avoiding WinVerifyTrust]
26831c64.15c4: supR3HardenedDllNotificationCallback: load 00007ffcf12b0000 LB 0x0032a000 C:\WINDOWS\System32\CoreUIComponents.dll [fFlags=0x0]
26841c64.15c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\CoreUIComponents.dll [avoiding WinVerifyTrust]
26851c64.15c4: supR3HardenedDllNotificationCallback: load 00007ffce77e0000 LB 0x0009e000 C:\WINDOWS\System32\TextInputFramework.dll [fFlags=0x0]
26861c64.15c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\TextInputFramework.dll [avoiding WinVerifyTrust]
26871c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcryptprimitives.dll'...
26881c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcryptprimitives.dll' -> '\Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll' [rcNtRedir=0xc0150008]
26891c64.15c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll
26901c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
26911c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
26921c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
26931c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
26941c64.15c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\combase.dll
26951c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
26961c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
26971c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shcore.dll'...
26981c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'shcore.dll' -> '\Device\HarddiskVolume3\Windows\System32\shcore.dll' [rcNtRedir=0xc0150008]
26991c64.15c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\SHCore.dll
27001c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'coremessaging.dll'...
27011c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'coremessaging.dll' -> '\Device\HarddiskVolume3\Windows\System32\coremessaging.dll' [rcNtRedir=0xc0150008]
27021c64.15c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\CoreMessaging.dll [lacks WinVerifyTrust]
27031c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
27041c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
27051c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'coremessaging.dll'...
27061c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'coremessaging.dll' -> '\Device\HarddiskVolume3\Windows\System32\coremessaging.dll' [rcNtRedir=0xc0150008]
27071c64.15c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\CoreMessaging.dll [lacks WinVerifyTrust]
27081c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'coreuicomponents.dll'...
27091c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'coreuicomponents.dll' -> '\Device\HarddiskVolume3\Windows\System32\coreuicomponents.dll' [rcNtRedir=0xc0150008]
27101c64.15c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\CoreUIComponents.dll [lacks WinVerifyTrust]
27111c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
27121c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
27131c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
27141c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
27151c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
27161c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6c40000 'C:\WINDOWS\System32\crypt32.dll'
27171c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\WinTypes.dll'
27181c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
27191c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6c40000 'C:\WINDOWS\System32\crypt32.dll'
27201c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\ntmarta.dll'
27211c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
27221c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6c40000 'C:\WINDOWS\System32\crypt32.dll'
27231c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\CoreMessaging.dll'
27241c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
27251c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6c40000 'C:\WINDOWS\System32\crypt32.dll'
27261c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\CoreUIComponents.dll'
27271c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
27281c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6c40000 'C:\WINDOWS\System32\crypt32.dll'
27291c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\TextInputFramework.dll'
27301c64.15c4: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(ext-ms-win-rtcore-ntuser-window-ext-l1-1-0.dll) -> 0x0, fPresent=1
27311c64.15c4: supR3HardenedMonitor_LdrLoadDll: pName=ext-ms-win-rtcore-ntuser-window-ext-l1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
27321c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf8c80000 'ext-ms-win-rtcore-ntuser-window-ext-l1-1-0.dll'
27331c64.15c4: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(ext-ms-win-rtcore-ntuser-integration-l1-1-0.dll) -> 0x0, fPresent=1
27341c64.15c4: supR3HardenedMonitor_LdrLoadDll: pName=ext-ms-win-rtcore-ntuser-integration-l1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
27351c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf8c80000 'ext-ms-win-rtcore-ntuser-integration-l1-1-0.dll'
27361c64.15c4: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-com-l1-1-0.dll) -> 0x0, fPresent=1
27371c64.15c4: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-com-l1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
27381c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf7a80000 'api-ms-win-core-com-l1-1-0.dll'
27391c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
27401c64.15c4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\iertutil.dll)
27411c64.15c4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\iertutil.dll
27421c64.15c4: supR3HardenedDllNotificationCallback: load 00007ffce4070000 LB 0x002a6000 C:\WINDOWS\System32\iertutil.dll [fFlags=0x0]
27431c64.15c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\iertutil.dll [avoiding WinVerifyTrust]
27441c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
27451c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
27461c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
27471c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6c40000 'C:\WINDOWS\System32\crypt32.dll'
27481c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\iertutil.dll'
27491c64.15c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msctf.dll
27501c64.15c4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\MSCTF.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
27511c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf81e0000 'C:\WINDOWS\System32\MSCTF.dll'
27521c64.15c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
27531c64.15c4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\shell32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
27541c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6f10000 'C:\WINDOWS\system32\shell32.dll'
27551c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6f10000 'C:\WINDOWS\system32\shell32.dll'
27561c64.15c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ole32.dll
27571c64.15c4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\ole32.dll (Input=ole32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
27581c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf7880000 'C:\WINDOWS\System32\ole32.dll'
27591c64.15c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll
27601c64.15c4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\OLEAUT32.dll (Input=OLEAUT32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
27611c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf7600000 'C:\WINDOWS\System32\OLEAUT32.dll'
27621c64.15c4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000ab0 pwszName=\Device\HarddiskVolume3\Windows\System32\wbem\wbemprox.dll
27631c64.15c4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000016481c0
27641c64.15c4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000016481c0
27651c64.15c4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=DB1AA7E2E4704C908EC9382E1F9E64808B9E5E1D
27661c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
27671c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6c40000 'C:\WINDOWS\System32\crypt32.dll'
27681c64.15c4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package03~31bf3856ad364e35~amd64~~10.0.18362.418.cat'; file='\Device\HarddiskVolume3\Windows\System32\wbem\wbemprox.dll'
27691c64.15c4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
27701c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
27711c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'ws2_32.dll'.
27721c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #18 'wbemcomn.dll'.
27731c64.15c4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\wbem\wbemprox.dll) WinVerifyTrust
27741c64.15c4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\wbem\wbemprox.dll
27751c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'wbemcomn.dll'...
27761c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'wbemcomn.dll' -> '\Device\HarddiskVolume3\Windows\System32\wbemcomn.dll' [rcNtRedir=0xc0150008]
27771c64.15c4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000af4 pwszName=\Device\HarddiskVolume3\Windows\System32\wbemcomn.dll
27781c64.15c4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000016481c0
27791c64.15c4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000016481c0
27801c64.15c4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=22EAF38FA276D7A374D3945ACD556FA0953D3440
27811c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
27821c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6c40000 'C:\WINDOWS\System32\crypt32.dll'
27831c64.15c4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package03~31bf3856ad364e35~amd64~~10.0.18362.418.cat'; file='\Device\HarddiskVolume3\Windows\System32\wbemcomn.dll'
27841c64.15c4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
27851c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
27861c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #14 'bcrypt.dll'.
27871c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #18 'ws2_32.dll'.
27881c64.15c4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\wbemcomn.dll) WinVerifyTrust
27891c64.15c4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\wbemcomn.dll
27901c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
27911c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
27921c64.15c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ws2_32.dll
27931c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
27941c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
27951c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
27961c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
27971c64.15c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ws2_32.dll
27981c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcrypt.dll'...
27991c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcrypt.dll' -> '\Device\HarddiskVolume3\Windows\System32\bcrypt.dll' [rcNtRedir=0xc0150008]
28001c64.15c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\bcrypt.dll
28011c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
28021c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
28031c64.15c4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\wbem\wbemprox.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
28041c64.15c4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wbem\wbemprox.dll
28051c64.15c4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wbemcomn.dll
28061c64.15c4: supR3HardenedDllNotificationCallback: load 00007ffce4c90000 LB 0x00084000 C:\WINDOWS\SYSTEM32\wbemcomn.dll [fFlags=0x0]
28071c64.15c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wbemcomn.dll
28081c64.15c4: supR3HardenedDllNotificationCallback: load 00007ffce4bf0000 LB 0x00011000 C:\WINDOWS\system32\wbem\wbemprox.dll [fFlags=0x0]
28091c64.15c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wbem\wbemprox.dll
28101c64.15c4: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(API-MS-Win-Core-LocalRegistry-L1-1-0.dll) -> 0x0, fPresent=1
28111c64.15c4: supR3HardenedMonitor_LdrLoadDll: pName=API-MS-Win-Core-LocalRegistry-L1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
28121c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf5fa0000 'API-MS-Win-Core-LocalRegistry-L1-1-0.dll'
28131c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffce4bf0000 'C:\WINDOWS\system32\wbem\wbemprox.dll'
28141c64.15c4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000b14 pwszName=\Device\HarddiskVolume3\Windows\System32\wbem\wbemsvc.dll
28151c64.15c4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000016481c0
28161c64.15c4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000016481c0
28171c64.15c4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=00C864D7F76A7AD25E7D0DA164B0B66188F5B7FF
28181c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
28191c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6c40000 'C:\WINDOWS\System32\crypt32.dll'
28201c64.15c4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package03~31bf3856ad364e35~amd64~~10.0.18362.418.cat'; file='\Device\HarddiskVolume3\Windows\System32\wbem\wbemsvc.dll'
28211c64.15c4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
28221c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
28231c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'rpcrt4.dll'.
28241c64.15c4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\wbem\wbemsvc.dll) WinVerifyTrust
28251c64.15c4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\wbem\wbemsvc.dll
28261c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
28271c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
28281c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
28291c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
28301c64.15c4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\wbem\wbemsvc.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
28311c64.15c4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wbem\wbemsvc.dll
28321c64.15c4: supR3HardenedDllNotificationCallback: load 00007ffce3d60000 LB 0x00014000 C:\WINDOWS\system32\wbem\wbemsvc.dll [fFlags=0x0]
28331c64.15c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wbem\wbemsvc.dll
28341c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffce3d60000 'C:\WINDOWS\system32\wbem\wbemsvc.dll'
28351c64.15c4: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-localization-l1-2-0.dll) -> 0x0, fPresent=1
28361c64.15c4: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-l1-2-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
28371c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf5fa0000 'api-ms-win-core-localization-l1-2-0.dll'
28381c64.15c4: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-localization-obsolete-l1-1-0.dll) -> 0x0, fPresent=1
28391c64.15c4: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-obsolete-l1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
28401c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf5fa0000 'api-ms-win-core-localization-obsolete-l1-1-0.dll'
28411c64.15c4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000b08 pwszName=\Device\HarddiskVolume3\Windows\System32\wbem\fastprox.dll
28421c64.15c4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000016481c0
28431c64.15c4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000016481c0
28441c64.15c4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=0708A64F48237CD4D5092546CE9C373F20B30CA1
28451c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
28461c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6c40000 'C:\WINDOWS\System32\crypt32.dll'
28471c64.15c4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package03~31bf3856ad364e35~amd64~~10.0.18362.418.cat'; file='\Device\HarddiskVolume3\Windows\System32\wbem\fastprox.dll'
28481c64.15c4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
28491c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
28501c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #20 'wbemcomn.dll'.
28511c64.15c4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\wbem\fastprox.dll) WinVerifyTrust
28521c64.15c4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\wbem\fastprox.dll
28531c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'wbemcomn.dll'...
28541c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'wbemcomn.dll' -> '\Device\HarddiskVolume3\Windows\System32\wbemcomn.dll' [rcNtRedir=0xc0150008]
28551c64.15c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wbemcomn.dll
28561c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
28571c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
28581c64.15c4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\wbem\fastprox.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
28591c64.15c4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wbem\fastprox.dll
28601c64.15c4: supR3HardenedDllNotificationCallback: load 00007ffce1e90000 LB 0x00101000 C:\WINDOWS\system32\wbem\fastprox.dll [fFlags=0x0]
28611c64.15c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wbem\fastprox.dll
28621c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffce1e90000 'C:\WINDOWS\system32\wbem\fastprox.dll'
28631c64.15c4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000af8 pwszName=\Device\HarddiskVolume3\Windows\System32\amsi.dll
28641c64.15c4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000016481c0
28651c64.15c4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000016481c0
28661c64.15c4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=B5D4D58A583ACAD5AA76D7DD0F2DB8ADE903942B
28671c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
28681c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6c40000 'C:\WINDOWS\System32\crypt32.dll'
28691c64.15c4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package04~31bf3856ad364e35~amd64~~10.0.18362.778.cat'; file='\Device\HarddiskVolume3\Windows\System32\amsi.dll'
28701c64.15c4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
28711c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
28721c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #14 'rpcrt4.dll'.
28731c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #16 'userenv.dll'.
28741c64.15c4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\amsi.dll) WinVerifyTrust
28751c64.15c4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\amsi.dll
28761c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'userenv.dll'...
28771c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'userenv.dll' -> '\Device\HarddiskVolume3\Windows\System32\userenv.dll' [rcNtRedir=0xc0150008]
28781c64.15c4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\userenv.dll
28791c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
28801c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
28811c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
28821c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
28831c64.15c4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\amsi.dll (Input=amsi.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
28841c64.15c4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\amsi.dll
28851c64.15c4: supR3HardenedDllNotificationCallback: load 00007ffcefe80000 LB 0x00015000 C:\WINDOWS\System32\amsi.dll [fFlags=0x0]
28861c64.15c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\amsi.dll
28871c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcefe80000 'C:\WINDOWS\System32\amsi.dll'
28881c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
28891c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6c40000 'C:\WINDOWS\System32\crypt32.dll'
28901c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'advapi32.dll'.
28911c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'ole32.dll'.
28921c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'oleaut32.dll'.
28931c64.15c4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Platform\4.18.2004.6-0\MpOAV.dll) WinVerifyTrust
28941c64.15c4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Platform\4.18.2004.6-0\MpOAV.dll
28951c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
28961c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
28971c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
28981c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
28991c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
29001c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
29011c64.15c4: supR3HardenedMonitor_LdrLoadDll: pName=C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2004.6-0\MpOav.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
29021c64.15c4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Platform\4.18.2004.6-0\MpOAV.dll
29031c64.15c4: supR3HardenedDllNotificationCallback: load 00007ffcee5d0000 LB 0x00046000 C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2004.6-0\MpOav.dll [fFlags=0x0]
29041c64.15c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Platform\4.18.2004.6-0\MpOAV.dll
29051c64.15c4: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-synch-l1-2-0) -> 0x0, fPresent=1
29061c64.15c4: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-synch-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
29071c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf5fa0000 'api-ms-win-core-synch-l1-2-0'
29081c64.15c4: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-fibers-l1-1-1) -> 0x0, fPresent=1
29091c64.15c4: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-fibers-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
29101c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf5fa0000 'api-ms-win-core-fibers-l1-1-1'
29111c64.15c4: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-synch-l1-2-0) -> 0x0, fPresent=1
29121c64.15c4: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-synch-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
29131c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf5fa0000 'api-ms-win-core-synch-l1-2-0'
29141c64.15c4: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-fibers-l1-1-1) -> 0x0, fPresent=1
29151c64.15c4: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-fibers-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
29161c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf5fa0000 'api-ms-win-core-fibers-l1-1-1'
29171c64.15c4: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-localization-l1-2-1) -> 0x0, fPresent=1
29181c64.15c4: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-l1-2-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
29191c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf5fa0000 'api-ms-win-core-localization-l1-2-1'
29201c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\version.dll'.
29211c64.15c4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
29221c64.15c4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\version.dll)
29231c64.15c4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\version.dll
29241c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
29251c64.15c4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
29261c64.15c4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\version.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
29271c64.15c4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\version.dll [avoiding WinVerifyTrust]
29281c64.15c4: supR3HardenedDllNotificationCallback: load 00007ffcede90000 LB 0x0000a000 C:\WINDOWS\system32\version.dll [fFlags=0x0]
29291c64.15c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\version.dll [avoiding WinVerifyTrust]
29301c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcede90000 'C:\WINDOWS\system32\version.dll'
29311c64.15c4: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\version.dll'.
29321c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\version.dll' [rescheduled]
29331c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcee5d0000 'C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2004.6-0\MpOav.dll'
29341c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
29351c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6c40000 'C:\WINDOWS\System32\crypt32.dll'
29361c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\version.dll'
29371c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf80d0000 'C:\WINDOWS\System32\ADVAPI32.dll'
29381c64.1918: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
29391c64.1918: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
29401c64.1918: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
29411c64.1918: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxVMM.dll) WinVerifyTrust
29421c64.1918: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxVMM.dll
29431c64.1918: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
29441c64.1918: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
29451c64.1918: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
29461c64.1918: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
29471c64.1918: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxVMM.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
29481c64.1918: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxVMM.dll
29491c64.1918: supR3HardenedDllNotificationCallback: load 00007ffcb6500000 LB 0x0037d000 C:\Program Files\Oracle\VirtualBox\VBoxVMM.DLL [fFlags=0x0]
29501c64.1918: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxVMM.dll
29511c64.1918: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcb6500000 'C:\Program Files\Oracle\VirtualBox\VBoxVMM.DLL'
29521c64.b98: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
29531c64.1e0c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
29541c64.1e0c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
29551c64.1e0c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp100.dll'.
29561c64.1e0c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxvmm.dll'.
29571c64.1e0c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'vboxrt.dll'.
29581c64.1e0c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'user32.dll'.
29591c64.1e0c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxSharedClipboard.dll) WinVerifyTrust
29601c64.1e0c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxSharedClipboard.dll
29611c64.1e0c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
29621c64.1e0c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
29631c64.1e0c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
29641c64.1e0c: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
29651c64.1e0c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxvmm.dll'...
29661c64.1e0c: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxvmm.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxvmm.dll' [rcNtRedir=0xc0150008]
29671c64.1e0c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxVMM.dll
29681c64.1e0c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
29691c64.1e0c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
29701c64.1e0c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
29711c64.1e0c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
29721c64.1e0c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxSharedClipboard.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
29731c64.1e0c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxSharedClipboard.dll
29741c64.1e0c: supR3HardenedDllNotificationCallback: load 00007ffcee3a0000 LB 0x0000f000 C:\Program Files\Oracle\VirtualBox\VBoxSharedClipboard.DLL [fFlags=0x0]
29751c64.1e0c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxSharedClipboard.dll
29761c64.1e0c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcee3a0000 'C:\Program Files\Oracle\VirtualBox\VBoxSharedClipboard.DLL'
29771c64.2974: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
29781c64.2974: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
29791c64.2974: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp100.dll'.
29801c64.2974: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxrt.dll'.
29811c64.2974: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxDragAndDropSvc.dll) WinVerifyTrust
29821c64.2974: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxDragAndDropSvc.dll
29831c64.2974: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
29841c64.2974: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
29851c64.2974: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
29861c64.2974: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
29871c64.2974: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
29881c64.2974: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
29891c64.2974: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll
29901c64.2974: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxDragAndDropSvc.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
29911c64.2974: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxDragAndDropSvc.dll
29921c64.2974: supR3HardenedDllNotificationCallback: load 00007ffcee390000 LB 0x0000d000 C:\Program Files\Oracle\VirtualBox\VBoxDragAndDropSvc.DLL [fFlags=0x0]
29931c64.2974: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxDragAndDropSvc.dll
29941c64.2974: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcee390000 'C:\Program Files\Oracle\VirtualBox\VBoxDragAndDropSvc.DLL'
29951c64.b98: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6f10000 'C:\WINDOWS\system32\Shell32.dll'
29961c64.b98: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxVMM.dll
29971c64.b98: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxVMM.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
29981c64.b98: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcb6500000 'C:\Program Files\Oracle\VirtualBox\VBoxVMM.DLL'
29991c64.b98: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
30001c64.b98: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
30011c64.b98: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
30021c64.b98: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
30031c64.b98: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'ole32.dll'.
30041c64.b98: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'oleaut32.dll'.
30051c64.b98: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.dll) WinVerifyTrust
30061c64.b98: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.dll
30071c64.b98: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
30081c64.b98: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
30091c64.b98: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
30101c64.b98: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
30111c64.b98: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
30121c64.b98: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
30131c64.b98: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
30141c64.b98: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
30151c64.b98: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
30161c64.b98: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
30171c64.b98: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
30181c64.b98: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.dll
30191c64.b98: supR3HardenedDllNotificationCallback: load 00007ffcc61a0000 LB 0x00041000 C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.DLL [fFlags=0x0]
30201c64.b98: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.dll
30211c64.b98: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc61a0000 'C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.DLL'
30221c64.b98: supR3HardenedDllNotificationCallback: Unload 00007ffcc61a0000 LB 0x00041000 C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.DLL [flags=0x0]
30231c64.b98: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000cc8 pwszName=\Device\HarddiskVolume3\Windows\System32\WinHvPlatform.dll
30241c64.b98: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000016481c0
30251c64.b98: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000016481c0
30261c64.b98: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=F44CBC4BAFE3CCCC07F920C1E6C13E8202CB0B4C
30271c64.b98: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
30281c64.b98: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6c40000 'C:\WINDOWS\System32\crypt32.dll'
30291c64.b98: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.18362.778.cat'; file='\Device\HarddiskVolume3\Windows\System32\WinHvPlatform.dll'
30301c64.b98: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
30311c64.b98: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'vid.dll'.
30321c64.b98: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\WinHvPlatform.dll) WinVerifyTrust
30331c64.b98: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\WinHvPlatform.dll
30341c64.b98: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vid.dll'...
30351c64.b98: supR3HardenedWinVerifyCacheProcessImportTodos: 'vid.dll' -> '\Device\HarddiskVolume3\Windows\System32\vid.dll' [rcNtRedir=0xc0150008]
30361c64.b98: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
30371c64.b98: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6c40000 'C:\WINDOWS\System32\crypt32.dll'
30381c64.b98: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\vid.dll) WinVerifyTrust
30391c64.b98: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\vid.dll
30401c64.b98: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\WinHvPlatform.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
30411c64.b98: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\WinHvPlatform.dll
30421c64.b98: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\vid.dll
30431c64.b98: supR3HardenedDllNotificationCallback: load 00007ffcdcb50000 LB 0x00019000 C:\WINDOWS\SYSTEM32\vid.dll [fFlags=0x0]
30441c64.b98: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\vid.dll
30451c64.b98: supR3HardenedDllNotificationCallback: load 00007ffce7350000 LB 0x00024000 C:\WINDOWS\system32\WinHvPlatform.dll [fFlags=0x0]
30461c64.b98: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\WinHvPlatform.dll
30471c64.b98: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffce7350000 'C:\WINDOWS\system32\WinHvPlatform.dll'
30481c64.b98: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\vid.dll
30491c64.b98: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\vid.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
30501c64.b98: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcdcb50000 'C:\WINDOWS\system32\vid.dll'
30511c64.b98: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
30521c64.b98: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6c40000 'C:\WINDOWS\System32\crypt32.dll'
30531c64.b98: '\Device\HarddiskVolume3\Windows\System32\ntdll.dll' has no imports
30541c64.b98: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\ntdll.dll) WinVerifyTrust
30551c64.b98: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\ntdll.dll
30561c64.b98: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\NTDLL.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
30571c64.b98: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf8e60000 'C:\WINDOWS\system32\NTDLL.DLL'
30581c64.b98: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
30591c64.b98: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
30601c64.b98: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
30611c64.b98: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxvmm.dll'.
30621c64.b98: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxrt.dll'.
30631c64.b98: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'vboxddu.dll'.
30641c64.b98: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'vboxdd2.dll'.
30651c64.b98: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'user32.dll'.
30661c64.b98: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'setupapi.dll'.
30671c64.b98: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'ws2_32.dll'.
30681c64.b98: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'ole32.dll'.
30691c64.b98: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'iphlpapi.dll'.
30701c64.b98: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxDD.dll) WinVerifyTrust
30711c64.b98: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxDD.dll
30721c64.b98: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'iphlpapi.dll'...
30731c64.b98: supR3HardenedWinVerifyCacheProcessImportTodos: 'iphlpapi.dll' -> '\Device\HarddiskVolume3\Windows\System32\iphlpapi.dll' [rcNtRedir=0xc0150008]
30741c64.b98: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
30751c64.b98: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6c40000 'C:\WINDOWS\System32\crypt32.dll'
30761c64.b98: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\IPHLPAPI.DLL) WinVerifyTrust
30771c64.b98: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\IPHLPAPI.DLL
30781c64.b98: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
30791c64.b98: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
30801c64.b98: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
30811c64.b98: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
30821c64.b98: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ws2_32.dll
30831c64.b98: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'setupapi.dll'...
30841c64.b98: supR3HardenedWinVerifyCacheProcessImportTodos: 'setupapi.dll' -> '\Device\HarddiskVolume3\Windows\System32\setupapi.dll' [rcNtRedir=0xc0150008]
30851c64.b98: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
30861c64.b98: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6c40000 'C:\WINDOWS\System32\crypt32.dll'
30871c64.b98: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
30881c64.b98: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #29 'rpcrt4.dll'.
30891c64.b98: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #36 'cfgmgr32.dll'.
30901c64.b98: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #41 'bcrypt.dll'.
30911c64.b98: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\setupapi.dll) WinVerifyTrust
30921c64.b98: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\setupapi.dll
30931c64.b98: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
30941c64.b98: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
30951c64.b98: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxdd2.dll'...
30961c64.b98: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxdd2.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxdd2.dll' [rcNtRedir=0xc0150008]
30971c64.b98: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcrypt.dll'...
30981c64.b98: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcrypt.dll' -> '\Device\HarddiskVolume3\Windows\System32\bcrypt.dll' [rcNtRedir=0xc0150008]
30991c64.b98: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\bcrypt.dll
31001c64.b98: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'cfgmgr32.dll'...
31011c64.b98: supR3HardenedWinVerifyCacheProcessImportTodos: 'cfgmgr32.dll' -> '\Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll' [rcNtRedir=0xc0150008]
31021c64.b98: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll
31031c64.b98: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
31041c64.b98: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
31051c64.b98: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
31061c64.b98: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
31071c64.b98: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
31081c64.b98: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
31091c64.b98: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
31101c64.b98: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxDD2.dll) WinVerifyTrust
31111c64.b98: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxDD2.dll
31121c64.b98: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxddu.dll'...
31131c64.b98: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxddu.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxddu.dll' [rcNtRedir=0xc0150008]
31141c64.b98: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
31151c64.b98: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
31161c64.b98: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
31171c64.b98: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
31181c64.b98: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
31191c64.b98: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
31201c64.b98: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
31211c64.b98: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
31221c64.b98: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'setupapi.dll'.
31231c64.b98: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'advapi32.dll'.
31241c64.b98: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxDDU.dll) WinVerifyTrust
31251c64.b98: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxDDU.dll
31261c64.b98: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
31271c64.b98: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
31281c64.b98: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxvmm.dll'...
31291c64.b98: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxvmm.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxvmm.dll' [rcNtRedir=0xc0150008]
31301c64.b98: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxVMM.dll
31311c64.b98: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
31321c64.b98: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
31331c64.b98: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
31341c64.b98: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
31351c64.b98: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'setupapi.dll'...
31361c64.b98: supR3HardenedWinVerifyCacheProcessImportTodos: 'setupapi.dll' -> '\Device\HarddiskVolume3\Windows\System32\setupapi.dll' [rcNtRedir=0xc0150008]
31371c64.b98: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\setupapi.dll
31381c64.b98: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
31391c64.b98: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
31401c64.b98: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
31411c64.b98: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
31421c64.b98: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
31431c64.b98: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
31441c64.b98: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxDD.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
31451c64.b98: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxDD.dll
31461c64.b98: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxDDU.dll
31471c64.b98: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxDD2.dll
31481c64.b98: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\IPHLPAPI.DLL
31491c64.b98: supR3HardenedDllNotificationCallback: load 00007ffcf8810000 LB 0x00470000 C:\WINDOWS\System32\SETUPAPI.dll [fFlags=0x0]
31501c64.b98: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\setupapi.dll
31511c64.b98: supR3HardenedDllNotificationCallback: load 00007ffcd11e0000 LB 0x00066000 C:\Program Files\Oracle\VirtualBox\VBoxDDU.dll [fFlags=0x0]
31521c64.b98: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxDDU.dll
31531c64.b98: supR3HardenedDllNotificationCallback: load 00007ffca9fe0000 LB 0x0085c000 C:\Program Files\Oracle\VirtualBox\VBoxDD2.dll [fFlags=0x0]
31541c64.b98: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxDD2.dll
31551c64.b98: supR3HardenedDllNotificationCallback: load 00007ffcf52a0000 LB 0x0003a000 C:\WINDOWS\SYSTEM32\IPHLPAPI.DLL [fFlags=0x0]
31561c64.b98: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\IPHLPAPI.DLL
31571c64.b98: supR3HardenedDllNotificationCallback: load 00007ffcab3d0000 LB 0x009e4000 C:\Program Files\Oracle\VirtualBox\VBoxDD.DLL [fFlags=0x0]
31581c64.b98: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxDD.dll
31591c64.b98: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcab3d0000 'C:\Program Files\Oracle\VirtualBox\VBoxDD.DLL'
31601c64.b98: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
31611c64.b98: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.dll
31621c64.b98: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
31631c64.b98: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.dll
31641c64.b98: supR3HardenedDllNotificationCallback: load 00007ffcc61a0000 LB 0x00041000 C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.DLL [fFlags=0x0]
31651c64.b98: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.dll
31661c64.b98: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc61a0000 'C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.DLL'
31671c64.b98: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
31681c64.b98: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxC.dll
31691c64.b98: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxC.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
31701c64.b98: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcca350000 'C:\Program Files\Oracle\VirtualBox\VBoxC.DLL'
31711c64.b98: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
31721c64.b98: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxDD2.dll
31731c64.b98: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxDD2.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
31741c64.b98: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffca9fe0000 'C:\Program Files\Oracle\VirtualBox\VBoxDD2.DLL'
31751c64.b98: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
31761c64.b98: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
31771c64.b98: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
31781c64.b98: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
31791c64.b98: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxEhciR3.dll) WinVerifyTrust
31801c64.b98: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxEhciR3.dll
31811c64.b98: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
31821c64.b98: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
31831c64.b98: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
31841c64.b98: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
31851c64.b98: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxEhciR3.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
31861c64.b98: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxEhciR3.dll
31871c64.b98: supR3HardenedDllNotificationCallback: load 00007ffcd0cc0000 LB 0x00018000 C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxEhciR3.DLL [fFlags=0x0]
31881c64.b98: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxEhciR3.dll
31891c64.b98: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcd0cc0000 'C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxEhciR3.DLL'
31901c64.b98: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
31911c64.b98: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
31921c64.b98: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
31931c64.b98: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
31941c64.b98: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxNvmeR3.dll) WinVerifyTrust
31951c64.b98: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxNvmeR3.dll
31961c64.b98: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
31971c64.b98: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
31981c64.b98: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
31991c64.b98: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
32001c64.b98: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxNvmeR3.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
32011c64.b98: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxNvmeR3.dll
32021c64.b98: supR3HardenedDllNotificationCallback: load 00007ffcd02c0000 LB 0x00012000 C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxNvmeR3.DLL [fFlags=0x0]
32031c64.b98: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxNvmeR3.dll
32041c64.b98: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcd02c0000 'C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxNvmeR3.DLL'
32051c64.b98: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
32061c64.b98: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
32071c64.b98: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
32081c64.b98: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
32091c64.b98: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbCardReaderR3.dll) WinVerifyTrust
32101c64.b98: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbCardReaderR3.dll
32111c64.b98: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
32121c64.b98: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
32131c64.b98: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
32141c64.b98: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
32151c64.b98: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbCardReaderR3.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
32161c64.b98: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbCardReaderR3.dll
32171c64.b98: supR3HardenedDllNotificationCallback: load 00007ffcd02a0000 LB 0x00018000 C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbCardReaderR3.DLL [fFlags=0x0]
32181c64.b98: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbCardReaderR3.dll
32191c64.b98: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcd02a0000 'C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbCardReaderR3.DLL'
32201c64.b98: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
32211c64.b98: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
32221c64.b98: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
32231c64.b98: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
32241c64.b98: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbWebcamR3.dll) WinVerifyTrust
32251c64.b98: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbWebcamR3.dll
32261c64.b98: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
32271c64.b98: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
32281c64.b98: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
32291c64.b98: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
32301c64.b98: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbWebcamR3.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
32311c64.b98: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbWebcamR3.dll
32321c64.b98: supR3HardenedDllNotificationCallback: load 00007ffcd0240000 LB 0x00019000 C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbWebcamR3.DLL [fFlags=0x0]
32331c64.b98: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbWebcamR3.dll
32341c64.b98: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcd0240000 'C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbWebcamR3.DLL'
32351c64.b98: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
32361c64.428: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
32371c64.428: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
32381c64.428: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxvmm.dll'.
32391c64.428: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxrt.dll'.
32401c64.428: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxSharedFolders.dll) WinVerifyTrust
32411c64.428: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxSharedFolders.dll
32421c64.428: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
32431c64.428: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
32441c64.428: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxvmm.dll'...
32451c64.428: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxvmm.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxvmm.dll' [rcNtRedir=0xc0150008]
32461c64.428: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxVMM.dll
32471c64.428: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
32481c64.428: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
32491c64.428: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxSharedFolders.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
32501c64.428: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxSharedFolders.dll
32511c64.428: supR3HardenedDllNotificationCallback: load 00007ffcd0220000 LB 0x00014000 C:\Program Files\Oracle\VirtualBox\VBoxSharedFolders.DLL [fFlags=0x0]
32521c64.428: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxSharedFolders.dll
32531c64.428: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcd0220000 'C:\Program Files\Oracle\VirtualBox\VBoxSharedFolders.DLL'
32541c64.810: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
32551c64.810: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
32561c64.810: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp100.dll'.
32571c64.810: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxvmm.dll'.
32581c64.810: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'vboxrt.dll'.
32591c64.810: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxGuestControlSvc.dll) WinVerifyTrust
32601c64.810: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxGuestControlSvc.dll
32611c64.810: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
32621c64.810: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
32631c64.810: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxvmm.dll'...
32641c64.810: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxvmm.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxvmm.dll' [rcNtRedir=0xc0150008]
32651c64.810: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxVMM.dll
32661c64.810: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
32671c64.810: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
32681c64.810: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
32691c64.810: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
32701c64.810: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxGuestControlSvc.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
32711c64.810: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxGuestControlSvc.dll
32721c64.810: supR3HardenedDllNotificationCallback: load 00007ffcee380000 LB 0x0000c000 C:\Program Files\Oracle\VirtualBox\VBoxGuestControlSvc.DLL [fFlags=0x0]
32731c64.810: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxGuestControlSvc.dll
32741c64.810: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcee380000 'C:\Program Files\Oracle\VirtualBox\VBoxGuestControlSvc.DLL'
32751c64.1e40: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
32761c64.1e40: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
32771c64.1e40: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp100.dll'.
32781c64.1e40: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxrt.dll'.
32791c64.1e40: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxGuestPropSvc.dll) WinVerifyTrust
32801c64.1e40: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxGuestPropSvc.dll
32811c64.1e40: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
32821c64.1e40: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
32831c64.1e40: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
32841c64.1e40: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
32851c64.1e40: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
32861c64.1e40: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
32871c64.1e40: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxGuestPropSvc.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
32881c64.1e40: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxGuestPropSvc.dll
32891c64.1e40: supR3HardenedDllNotificationCallback: load 00007ffce7340000 LB 0x0000d000 C:\Program Files\Oracle\VirtualBox\VBoxGuestPropSvc.DLL [fFlags=0x0]
32901c64.1e40: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxGuestPropSvc.dll
32911c64.1e40: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffce7340000 'C:\Program Files\Oracle\VirtualBox\VBoxGuestPropSvc.DLL'
32921c64.b98: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
32931c64.b98: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
32941c64.b98: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
32951c64.b98: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
32961c64.b98: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VDPluginCrypt.dll) WinVerifyTrust
32971c64.b98: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VDPluginCrypt.dll
32981c64.b98: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
32991c64.b98: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
33001c64.b98: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
33011c64.b98: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
33021c64.b98: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VDPluginCrypt.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
33031c64.b98: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VDPluginCrypt.dll
33041c64.b98: supR3HardenedDllNotificationCallback: load 00007ffcd3df0000 LB 0x0000a000 C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VDPluginCrypt.DLL [fFlags=0x0]
33051c64.b98: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VDPluginCrypt.dll
33061c64.b98: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcd3df0000 'C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VDPluginCrypt.DLL'
33071c64.b98: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\IPHLPAPI.DLL
33081c64.b98: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\Iphlpapi.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
33091c64.b98: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf52a0000 'C:\WINDOWS\system32\Iphlpapi.dll'
33101c64.b98: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'rpcrt4.dll'.
33111c64.b98: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'nsi.dll'.
33121c64.b98: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\winnsi.dll)
33131c64.b98: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\winnsi.dll
33141c64.b98: supR3HardenedDllNotificationCallback: load 00007ffcf85d0000 LB 0x00008000 C:\WINDOWS\System32\NSI.dll [fFlags=0x0]
33151c64.b98: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\nsi.dll)
33161c64.b98: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\nsi.dll
33171c64.b98: supR3HardenedDllNotificationCallback: load 00007ffcec8d0000 LB 0x0000b000 C:\WINDOWS\SYSTEM32\WINNSI.DLL [fFlags=0x0]
33181c64.b98: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winnsi.dll [avoiding WinVerifyTrust]
33191c64.b98: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'rpcrt4.dll'.
33201c64.b98: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\dhcpcsvc6.dll)
33211c64.b98: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\dhcpcsvc6.dll
33221c64.b98: supR3HardenedDllNotificationCallback: load 00007ffcea0b0000 LB 0x00016000 C:\WINDOWS\SYSTEM32\dhcpcsvc6.DLL [fFlags=0x0]
33231c64.b98: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\dhcpcsvc6.dll [avoiding WinVerifyTrust]
33241c64.b98: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'rpcrt4.dll'.
33251c64.b98: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'ws2_32.dll'.
33261c64.b98: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'nsi.dll'.
33271c64.b98: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\dhcpcsvc.dll)
33281c64.b98: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\dhcpcsvc.dll
33291c64.b98: supR3HardenedDllNotificationCallback: load 00007ffcea090000 LB 0x0001c000 C:\WINDOWS\SYSTEM32\dhcpcsvc.DLL [fFlags=0x0]
33301c64.b98: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\dhcpcsvc.dll [avoiding WinVerifyTrust]
33311c64.b98: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #21 'ws2_32.dll'.
33321c64.b98: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #23 'nsi.dll'.
33331c64.b98: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\dnsapi.dll)
33341c64.b98: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\dnsapi.dll
33351c64.b98: supR3HardenedDllNotificationCallback: load 00007ffcf52e0000 LB 0x000ca000 C:\WINDOWS\SYSTEM32\DNSAPI.dll [fFlags=0x0]
33361c64.b98: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\dnsapi.dll [avoiding WinVerifyTrust]
33371c64.b98: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'nsi.dll'...
33381c64.b98: supR3HardenedWinVerifyCacheProcessImportTodos: 'nsi.dll' -> '\Device\HarddiskVolume3\Windows\System32\nsi.dll' [rcNtRedir=0xc0150008]
33391c64.b98: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\nsi.dll [lacks WinVerifyTrust]
33401c64.b98: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
33411c64.b98: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
33421c64.b98: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ws2_32.dll
33431c64.b98: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'nsi.dll'...
33441c64.b98: supR3HardenedWinVerifyCacheProcessImportTodos: 'nsi.dll' -> '\Device\HarddiskVolume3\Windows\System32\nsi.dll' [rcNtRedir=0xc0150008]
33451c64.b98: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\nsi.dll [lacks WinVerifyTrust]
33461c64.b98: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
33471c64.b98: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
33481c64.b98: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ws2_32.dll
33491c64.b98: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
33501c64.b98: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
33511c64.b98: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
33521c64.b98: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
33531c64.b98: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'nsi.dll'...
33541c64.b98: supR3HardenedWinVerifyCacheProcessImportTodos: 'nsi.dll' -> '\Device\HarddiskVolume3\Windows\System32\nsi.dll' [rcNtRedir=0xc0150008]
33551c64.b98: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\nsi.dll [lacks WinVerifyTrust]
33561c64.b98: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
33571c64.b98: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
33581c64.b98: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
33591c64.b98: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6c40000 'C:\WINDOWS\System32\crypt32.dll'
33601c64.b98: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\dnsapi.dll'
33611c64.b98: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000c7c pwszName=\Device\HarddiskVolume3\Windows\System32\dhcpcsvc.dll
33621c64.b98: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000016481c0
33631c64.b98: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000016481c0
33641c64.b98: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=ABBE12EE7925737522BCF905613B49C6CAA0BE8C
33651c64.b98: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
33661c64.b98: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6c40000 'C:\WINDOWS\System32\crypt32.dll'
33671c64.b98: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.18362.778.cat'; file='\Device\HarddiskVolume3\Windows\System32\dhcpcsvc.dll'
33681c64.b98: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
33691c64.b98: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\dhcpcsvc.dll'
33701c64.b98: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000f88 pwszName=\Device\HarddiskVolume3\Windows\System32\dhcpcsvc6.dll
33711c64.b98: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000016481c0
33721c64.b98: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000016481c0
33731c64.b98: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=62657CFC96994F71846A6491CB0A48C51E4DCEBA
33741c64.b98: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
33751c64.b98: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6c40000 'C:\WINDOWS\System32\crypt32.dll'
33761c64.b98: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.18362.778.cat'; file='\Device\HarddiskVolume3\Windows\System32\dhcpcsvc6.dll'
33771c64.b98: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
33781c64.b98: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\dhcpcsvc6.dll'
33791c64.b98: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
33801c64.b98: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
33811c64.b98: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
33821c64.b98: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6c40000 'C:\WINDOWS\System32\crypt32.dll'
33831c64.b98: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\nsi.dll'
33841c64.b98: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
33851c64.b98: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6c40000 'C:\WINDOWS\System32\crypt32.dll'
33861c64.b98: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\winnsi.dll'
33871c64.b98: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
33881c64.b98: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6c40000 'C:\WINDOWS\System32\crypt32.dll'
33891c64.b98: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcp_win.dll'.
33901c64.b98: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #16 'rpcrt4.dll'.
33911c64.b98: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #28 'devobj.dll'.
33921c64.b98: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\MMDevAPI.dll) WinVerifyTrust
33931c64.b98: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\MMDevAPI.dll
33941c64.b98: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'devobj.dll'...
33951c64.b98: supR3HardenedWinVerifyCacheProcessImportTodos: 'devobj.dll' -> '\Device\HarddiskVolume3\Windows\System32\devobj.dll' [rcNtRedir=0xc0150008]
33961c64.b98: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
33971c64.b98: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6c40000 'C:\WINDOWS\System32\crypt32.dll'
33981c64.b98: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #18 'cfgmgr32.dll'.
33991c64.b98: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\devobj.dll) WinVerifyTrust
34001c64.b98: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\devobj.dll
34011c64.b98: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
34021c64.b98: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
34031c64.b98: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
34041c64.b98: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
34051c64.b98: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll
34061c64.b98: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'cfgmgr32.dll'...
34071c64.b98: supR3HardenedWinVerifyCacheProcessImportTodos: 'cfgmgr32.dll' -> '\Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll' [rcNtRedir=0xc0150008]
34081c64.b98: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll
34091c64.b98: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\MMDevApi.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
34101c64.b98: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\MMDevAPI.dll
34111c64.b98: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\devobj.dll
34121c64.b98: supR3HardenedDllNotificationCallback: load 00007ffcf5b20000 LB 0x0002a000 C:\WINDOWS\System32\DEVOBJ.dll [fFlags=0x0]
34131c64.b98: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\devobj.dll
34141c64.b98: supR3HardenedDllNotificationCallback: load 00007ffce97a0000 LB 0x00072000 C:\WINDOWS\System32\MMDevApi.dll [fFlags=0x0]
34151c64.b98: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\MMDevAPI.dll
34161c64.b98: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffce97a0000 'C:\WINDOWS\System32\MMDevApi.dll'
34171c64.b98: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000001034 pwszName=\Device\HarddiskVolume3\Windows\System32\dsound.dll
34181c64.b98: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000016481c0
34191c64.b98: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000016481c0
34201c64.b98: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=8184043CF3F3DF1E3CF96E74DBBF7D0836417373
34211c64.b98: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
34221c64.b98: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6c40000 'C:\WINDOWS\System32\crypt32.dll'
34231c64.b98: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.18362.418.cat'; file='\Device\HarddiskVolume3\Windows\System32\dsound.dll'
34241c64.b98: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
34251c64.b98: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
34261c64.b98: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #32 'winmm.dll'.
34271c64.b98: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\dsound.dll) WinVerifyTrust
34281c64.b98: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\dsound.dll
34291c64.b98: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
34301c64.b98: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume3\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008]
34311c64.b98: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmm.dll
34321c64.b98: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
34331c64.b98: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
34341c64.b98: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\dsound.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
34351c64.b98: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\dsound.dll
34361c64.b98: supR3HardenedDllNotificationCallback: load 00007ffcd13a0000 LB 0x00099000 C:\WINDOWS\System32\dsound.dll [fFlags=0x0]
34371c64.b98: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\dsound.dll
34381c64.b98: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\dsound.dll
34391c64.b98: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\dsound.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
34401c64.b98: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcd13a0000 'C:\WINDOWS\System32\dsound.dll'
34411c64.b98: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcd13a0000 'C:\WINDOWS\System32\dsound.dll'
34421c64.b98: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\dsound.dll
34431c64.b98: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\dsound.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
34441c64.b98: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcd13a0000 'C:\WINDOWS\system32\dsound.dll'
34451c64.b98: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\MMDevAPI.dll
34461c64.b98: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\MMDEVAPI.DLL (Input=MMDEVAPI.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
34471c64.b98: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffce97a0000 'C:\WINDOWS\System32\MMDEVAPI.DLL'
34481c64.304: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
34491c64.304: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6c40000 'C:\WINDOWS\System32\crypt32.dll'
34501c64.304: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcp_win.dll'.
34511c64.304: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'rpcrt4.dll'.
34521c64.304: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'oleaut32.dll'.
34531c64.304: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #29 'mmdevapi.dll'.
34541c64.304: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\AudioSes.dll) WinVerifyTrust
34551c64.304: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\AudioSes.dll
34561c64.304: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mmdevapi.dll'...
34571c64.304: supR3HardenedWinVerifyCacheProcessImportTodos: 'mmdevapi.dll' -> '\Device\HarddiskVolume3\Windows\System32\mmdevapi.dll' [rcNtRedir=0xc0150008]
34581c64.304: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\MMDevAPI.dll
34591c64.304: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
34601c64.304: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
34611c64.304: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
34621c64.304: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
34631c64.304: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
34641c64.304: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
34651c64.304: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll
34661c64.304: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\AUDIOSES.DLL (Input=AUDIOSES.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
34671c64.304: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\AudioSes.dll
34681c64.304: supR3HardenedDllNotificationCallback: load 00007ffce9820000 LB 0x0015d000 C:\WINDOWS\System32\AUDIOSES.DLL [fFlags=0x0]
34691c64.304: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\AudioSes.dll
34701c64.304: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffce9820000 'C:\WINDOWS\System32\AUDIOSES.DLL'
34711c64.304: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
34721c64.304: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'rpcrt4.dll'.
34731c64.304: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\ResourcePolicyClient.dll)
34741c64.304: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\ResourcePolicyClient.dll
34751c64.304: supR3HardenedDllNotificationCallback: load 00007ffcf3db0000 LB 0x00014000 C:\WINDOWS\SYSTEM32\resourcepolicyclient.dll [fFlags=0x0]
34761c64.304: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ResourcePolicyClient.dll [avoiding WinVerifyTrust]
34771c64.b98: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
34781c64.b98: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
34791c64.b98: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll
34801c64.b98: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
34811c64.b98: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
34821c64.b98: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
34831c64.b98: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6c40000 'C:\WINDOWS\System32\crypt32.dll'
34841c64.b98: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\ResourcePolicyClient.dll'
34851c64.b98: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmm.dll
34861c64.b98: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\winmm.dll (Input=winmm.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
34871c64.b98: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf3a20000 'C:\WINDOWS\System32\winmm.dll'
34881c64.b98: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000001104 pwszName=\Device\HarddiskVolume3\Windows\System32\wdmaud.drv
34891c64.b98: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000016481c0
34901c64.b98: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000016481c0
34911c64.b98: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=38EA8D6D625C6A0A9075DAE17FD33652FF8FC23A
34921c64.b98: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
34931c64.b98: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6c40000 'C:\WINDOWS\System32\crypt32.dll'
34941c64.b98: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.18362.418.cat'; file='\Device\HarddiskVolume3\Windows\System32\wdmaud.drv'
34951c64.b98: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
34961c64.b98: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
34971c64.b98: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'mmdevapi.dll'.
34981c64.b98: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #27 'ksuser.dll'.
34991c64.b98: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #28 'avrt.dll'.
35001c64.b98: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\wdmaud.drv) WinVerifyTrust
35011c64.b98: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\wdmaud.drv
35021c64.b98: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'avrt.dll'...
35031c64.b98: supR3HardenedWinVerifyCacheProcessImportTodos: 'avrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\avrt.dll' [rcNtRedir=0xc0150008]
35041c64.b98: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
35051c64.b98: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6c40000 'C:\WINDOWS\System32\crypt32.dll'
35061c64.b98: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\avrt.dll) WinVerifyTrust
35071c64.b98: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\avrt.dll
35081c64.b98: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ksuser.dll'...
35091c64.b98: supR3HardenedWinVerifyCacheProcessImportTodos: 'ksuser.dll' -> '\Device\HarddiskVolume3\Windows\System32\ksuser.dll' [rcNtRedir=0xc0150008]
35101c64.b98: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
35111c64.b98: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6c40000 'C:\WINDOWS\System32\crypt32.dll'
35121c64.b98: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
35131c64.b98: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\ksuser.dll) WinVerifyTrust
35141c64.b98: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\ksuser.dll
35151c64.b98: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mmdevapi.dll'...
35161c64.b98: supR3HardenedWinVerifyCacheProcessImportTodos: 'mmdevapi.dll' -> '\Device\HarddiskVolume3\Windows\System32\mmdevapi.dll' [rcNtRedir=0xc0150008]
35171c64.b98: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\MMDevAPI.dll
35181c64.b98: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
35191c64.b98: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
35201c64.b98: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll
35211c64.b98: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
35221c64.b98: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
35231c64.b98: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
35241c64.b98: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wdmaud.drv
35251c64.b98: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ksuser.dll
35261c64.b98: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\avrt.dll
35271c64.b98: supR3HardenedDllNotificationCallback: load 00007ffcec900000 LB 0x00009000 C:\WINDOWS\SYSTEM32\ksuser.dll [fFlags=0x0]
35281c64.b98: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ksuser.dll
35291c64.b98: supR3HardenedDllNotificationCallback: load 00007ffcf1880000 LB 0x0000a000 C:\WINDOWS\SYSTEM32\AVRT.dll [fFlags=0x0]
35301c64.b98: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\avrt.dll
35311c64.b98: supR3HardenedDllNotificationCallback: load 00007ffcd0d30000 LB 0x00044000 C:\WINDOWS\System32\wdmaud.drv [fFlags=0x0]
35321c64.b98: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wdmaud.drv
35331c64.b98: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcd0d30000 'C:\WINDOWS\System32\wdmaud.drv'
35341c64.b98: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wdmaud.drv
35351c64.b98: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
35361c64.b98: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcd0d30000 'C:\WINDOWS\System32\wdmaud.drv'
35371c64.b98: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wdmaud.drv
35381c64.b98: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
35391c64.b98: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcd0d30000 'C:\WINDOWS\System32\wdmaud.drv'
35401c64.b98: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wdmaud.drv
35411c64.b98: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
35421c64.b98: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcd0d30000 'C:\WINDOWS\System32\wdmaud.drv'
35431c64.b98: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wdmaud.drv
35441c64.b98: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
35451c64.b98: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcd0d30000 'C:\WINDOWS\System32\wdmaud.drv'
35461c64.b98: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wdmaud.drv
35471c64.b98: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
35481c64.b98: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcd0d30000 'C:\WINDOWS\System32\wdmaud.drv'
35491c64.b98: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wdmaud.drv
35501c64.b98: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
35511c64.b98: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcd0d30000 'C:\WINDOWS\System32\wdmaud.drv'
35521c64.b98: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcd0d30000 'C:\WINDOWS\System32\wdmaud.drv'
35531c64.b98: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000000000010a0 pwszName=\Device\HarddiskVolume3\Windows\System32\msacm32.drv
35541c64.b98: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000016481c0
35551c64.b98: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000016481c0
35561c64.b98: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=763C5E89A8DA653902990733D245B99CC7C40BEA
35571c64.b98: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
35581c64.b98: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6c40000 'C:\WINDOWS\System32\crypt32.dll'
35591c64.b98: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.18362.418.cat'; file='\Device\HarddiskVolume3\Windows\System32\msacm32.drv'
35601c64.b98: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
35611c64.b98: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
35621c64.b98: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'mmdevapi.dll'.
35631c64.b98: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #13 'msacm32.dll'.
35641c64.b98: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #14 'winmmbase.dll'.
35651c64.b98: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\msacm32.drv) WinVerifyTrust
35661c64.b98: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\msacm32.drv
35671c64.b98: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmmbase.dll'...
35681c64.b98: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmmbase.dll' -> '\Device\HarddiskVolume3\Windows\System32\winmmbase.dll' [rcNtRedir=0xc0150008]
35691c64.b98: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmmbase.dll
35701c64.b98: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msacm32.dll'...
35711c64.b98: supR3HardenedWinVerifyCacheProcessImportTodos: 'msacm32.dll' -> '\Device\HarddiskVolume3\Windows\System32\msacm32.dll' [rcNtRedir=0xc0150008]
35721c64.b98: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
35731c64.b98: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6c40000 'C:\WINDOWS\System32\crypt32.dll'
35741c64.b98: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
35751c64.b98: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\msacm32.dll) WinVerifyTrust
35761c64.b98: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\msacm32.dll
35771c64.b98: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mmdevapi.dll'...
35781c64.b98: supR3HardenedWinVerifyCacheProcessImportTodos: 'mmdevapi.dll' -> '\Device\HarddiskVolume3\Windows\System32\mmdevapi.dll' [rcNtRedir=0xc0150008]
35791c64.b98: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\MMDevAPI.dll
35801c64.b98: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
35811c64.b98: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
35821c64.b98: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
35831c64.b98: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
35841c64.b98: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
35851c64.b98: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msacm32.drv
35861c64.b98: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msacm32.dll
35871c64.b98: supR3HardenedDllNotificationCallback: load 00007ffcea870000 LB 0x0001c000 C:\WINDOWS\SYSTEM32\MSACM32.dll [fFlags=0x0]
35881c64.b98: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msacm32.dll
35891c64.b98: supR3HardenedDllNotificationCallback: load 00007ffcec8f0000 LB 0x0000d000 C:\WINDOWS\System32\msacm32.drv [fFlags=0x0]
35901c64.b98: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msacm32.drv
35911c64.b98: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcec8f0000 'C:\WINDOWS\System32\msacm32.drv'
35921c64.b98: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msacm32.drv
35931c64.b98: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
35941c64.b98: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcec8f0000 'C:\WINDOWS\System32\msacm32.drv'
35951c64.b98: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msacm32.drv
35961c64.b98: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
35971c64.b98: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcec8f0000 'C:\WINDOWS\System32\msacm32.drv'
35981c64.b98: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msacm32.drv
35991c64.b98: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
36001c64.b98: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcec8f0000 'C:\WINDOWS\System32\msacm32.drv'
36011c64.b98: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msacm32.drv
36021c64.b98: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
36031c64.b98: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcec8f0000 'C:\WINDOWS\System32\msacm32.drv'
36041c64.b98: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msacm32.drv
36051c64.b98: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
36061c64.b98: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcec8f0000 'C:\WINDOWS\System32\msacm32.drv'
36071c64.b98: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msacm32.drv
36081c64.b98: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
36091c64.b98: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcec8f0000 'C:\WINDOWS\System32\msacm32.drv'
36101c64.b98: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcec8f0000 'C:\WINDOWS\System32\msacm32.drv'
36111c64.b98: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcec8f0000 'C:\WINDOWS\System32\msacm32.drv'
36121c64.b98: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcec8f0000 'C:\WINDOWS\System32\msacm32.drv'
36131c64.b98: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000001110 pwszName=\Device\HarddiskVolume3\Windows\System32\midimap.dll
36141c64.b98: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000016481c0
36151c64.b98: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000016481c0
36161c64.b98: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=EB34EC166C3F780657AB67E557E6C2E60C398D10
36171c64.b98: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
36181c64.b98: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6c40000 'C:\WINDOWS\System32\crypt32.dll'
36191c64.b98: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.18362.418.cat'; file='\Device\HarddiskVolume3\Windows\System32\midimap.dll'
36201c64.b98: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
36211c64.b98: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
36221c64.b98: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'winmm.dll'.
36231c64.b98: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\midimap.dll) WinVerifyTrust
36241c64.b98: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\midimap.dll
36251c64.b98: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
36261c64.b98: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume3\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008]
36271c64.b98: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmm.dll
36281c64.b98: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
36291c64.b98: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
36301c64.b98: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\midimap.dll (Input=midimap.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
36311c64.b98: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\midimap.dll
36321c64.b98: supR3HardenedDllNotificationCallback: load 00007ffcdc950000 LB 0x0000a000 C:\WINDOWS\System32\midimap.dll [fFlags=0x0]
36331c64.b98: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\midimap.dll
36341c64.b98: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcdc950000 'C:\WINDOWS\System32\midimap.dll'
36351c64.b98: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\midimap.dll
36361c64.b98: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\midimap.dll (Input=midimap.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
36371c64.b98: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcdc950000 'C:\WINDOWS\System32\midimap.dll'
36381c64.b98: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\midimap.dll
36391c64.b98: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\midimap.dll (Input=midimap.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
36401c64.b98: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcdc950000 'C:\WINDOWS\System32\midimap.dll'
36411c64.b98: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\midimap.dll
36421c64.b98: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\midimap.dll (Input=midimap.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
36431c64.b98: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcdc950000 'C:\WINDOWS\System32\midimap.dll'
36441c64.b98: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf3a20000 'C:\WINDOWS\System32\winmm.dll'
36451c64.b98: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf3a20000 'C:\WINDOWS\System32\winmm.dll'
36461c64.b98: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf3a20000 'C:\WINDOWS\System32\winmm.dll'
36471c64.b98: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf3a20000 'C:\WINDOWS\System32\winmm.dll'
36481c64.b98: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf3a20000 'C:\WINDOWS\System32\winmm.dll'
36491c64.b98: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf3a20000 'C:\WINDOWS\System32\winmm.dll'
36501c64.b98: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf3a20000 'C:\WINDOWS\System32\winmm.dll'
36511c64.b98: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmm.dll
36521c64.b98: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\winmm.dll (Input=winmm.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
36531c64.b98: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf3a20000 'C:\WINDOWS\System32\winmm.dll'
36541c64.b98: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf3a20000 'C:\WINDOWS\System32\winmm.dll'
36551c64.b98: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf3a20000 'C:\WINDOWS\System32\winmm.dll'
36561c64.b98: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf3a20000 'C:\WINDOWS\System32\winmm.dll'
36571c64.b98: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\dsound.dll
36581c64.b98: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\dsound.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
36591c64.b98: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcd13a0000 'C:\WINDOWS\system32\dsound.dll'
36601c64.b98: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf3a20000 'C:\WINDOWS\System32\winmm.dll'
36611c64.b98: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf3a20000 'C:\WINDOWS\System32\winmm.dll'
36621c64.b98: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf3a20000 'C:\WINDOWS\System32\winmm.dll'
36631c64.b98: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf3a20000 'C:\WINDOWS\System32\winmm.dll'
36641c64.b98: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf3a20000 'C:\WINDOWS\System32\winmm.dll'
36651c64.b98: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf3a20000 'C:\WINDOWS\System32\winmm.dll'
36661c64.b98: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
36671c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6f10000 'C:\WINDOWS\system32\shell32.dll'
36681c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6f10000 'C:\WINDOWS\system32\shell32.dll'
36691c64.2698: '\Device\HarddiskVolume3\Windows\System32\tzres.dll' has no imports
36701c64.2698: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\tzres.dll)
36711c64.2698: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\tzres.dll
36721c64.2698: supR3HardenedMonitor_NtCreateSection: NtMapViewOfSection failed on 00000000000012b8 (hFile=0000000000001130) with 0xc0000022 -> STATUS_TRUST_FAILURE
36731c64.2698: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\tzres.dll [avoiding WinVerifyTrust]
36741c64.2698: supR3HardenedMonitor_NtCreateSection: NtMapViewOfSection failed on 000000000000129c (hFile=00000000000012a8) with 0xc0000022 -> STATUS_TRUST_FAILURE
36751c64.15c4: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000b5c pwszName=\Device\HarddiskVolume3\Windows\System32\tzres.dll
36761c64.15c4: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000016481c0
36771c64.15c4: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000016481c0
36781c64.15c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wintrust.dll
36791c64.15c4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\WINTRUST.DLL (Input=WINTRUST.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
36801c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6250000 'C:\WINDOWS\System32\WINTRUST.DLL'
36811c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6c40000 'C:\WINDOWS\System32\CRYPT32.dll'
36821c64.15c4: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=D7221D349BF4BE7BB263BFBAD8DE6E60953ADB2A
36831c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf50a0000 'C:\WINDOWS\system32\rsaenh.dll'
36841c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6c40000 'C:\WINDOWS\System32\crypt32.dll'
36851c64.15c4: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.18362.778.cat'; file='\Device\HarddiskVolume3\Windows\System32\tzres.dll'
36861c64.15c4: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
36871c64.15c4: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\tzres.dll'
36881c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6f10000 'C:\WINDOWS\system32\shell32.dll'
36891c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6f10000 'C:\WINDOWS\system32\shell32.dll'
36901c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6f10000 'C:\WINDOWS\system32\shell32.dll'
36911c64.15c4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
36921c64.15c4: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\shell32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
36931c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6f10000 'C:\WINDOWS\system32\shell32.dll'
36941c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6f10000 'C:\WINDOWS\system32\shell32.dll'
36951c64.15c4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6f10000 'C:\WINDOWS\system32\shell32.dll'
36961c64.1e40: supR3HardenedDllNotificationCallback: Unload 00007ffce7340000 LB 0x0000d000 C:\Program Files\Oracle\VirtualBox\VBoxGuestPropSvc.DLL [flags=0x0]
36971c64.810: supR3HardenedDllNotificationCallback: Unload 00007ffcee380000 LB 0x0000c000 C:\Program Files\Oracle\VirtualBox\VBoxGuestControlSvc.DLL [flags=0x0]
36981c64.428: supR3HardenedDllNotificationCallback: Unload 00007ffcd0220000 LB 0x00014000 C:\Program Files\Oracle\VirtualBox\VBoxSharedFolders.DLL [flags=0x0]
36991c64.2974: supR3HardenedDllNotificationCallback: Unload 00007ffcee390000 LB 0x0000d000 C:\Program Files\Oracle\VirtualBox\VBoxDragAndDropSvc.DLL [flags=0x0]
37001c64.1e0c: supR3HardenedDllNotificationCallback: Unload 00007ffcee3a0000 LB 0x0000f000 C:\Program Files\Oracle\VirtualBox\VBoxSharedClipboard.DLL [flags=0x0]
37011c64.b98: supR3HardenedDllNotificationCallback: Unload 00007ffcd0240000 LB 0x00019000 C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbWebcamR3.DLL [flags=0x0]
37021c64.b98: supR3HardenedDllNotificationCallback: Unload 00007ffcd02a0000 LB 0x00018000 C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbCardReaderR3.DLL [flags=0x0]
37031c64.b98: supR3HardenedDllNotificationCallback: Unload 00007ffcd02c0000 LB 0x00012000 C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxNvmeR3.DLL [flags=0x0]
37041c64.b98: supR3HardenedDllNotificationCallback: Unload 00007ffcd0cc0000 LB 0x00018000 C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxEhciR3.DLL [flags=0x0]
37051c64.b98: supR3HardenedDllNotificationCallback: Unload 00007ffcc61a0000 LB 0x00041000 C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.DLL [flags=0x0]
37061c64.b98: supR3HardenedDllNotificationCallback: Unload 00007ffcab3d0000 LB 0x009e4000 C:\Program Files\Oracle\VirtualBox\VBoxDD.DLL [flags=0x0]
37071c64.b98: supR3HardenedDllNotificationCallback: Unload 00007ffcd11e0000 LB 0x00066000 C:\Program Files\Oracle\VirtualBox\VBoxDDU.dll [flags=0x0]
37081c64.b98: supR3HardenedDllNotificationCallback: Unload 00007ffca9fe0000 LB 0x0085c000 C:\Program Files\Oracle\VirtualBox\VBoxDD2.dll [flags=0x0]
37091c64.b98: supR3HardenedDllNotificationCallback: Unload 00007ffcf8810000 LB 0x00470000 C:\WINDOWS\System32\SETUPAPI.dll [flags=0x0]
37101c64.15c4: supR3HardenedDllNotificationCallback: Unload 00007ffcee3b0000 LB 0x0000e000 C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxPuelMainVM.DLL [flags=0x0]
37111c64.15c4: supR3HardenedDllNotificationCallback: Unload 00007ffce3d60000 LB 0x00014000 C:\WINDOWS\system32\wbem\wbemsvc.dll [flags=0x0]
37121c64.15c4: supR3HardenedDllNotificationCallback: Unload 00007ffcda0d0000 LB 0x0003a000 C:\WINDOWS\system32\dataexchange.dll [flags=0x0]
37131c64.15c4: supR3HardenedDllNotificationCallback: Unload 00007ffcf2330000 LB 0x0025b000 C:\WINDOWS\system32\d3d11.dll [flags=0x0]
37141c64.15c4: supR3HardenedDllNotificationCallback: Unload 00007ffcf49e0000 LB 0x000eb000 C:\WINDOWS\system32\dxgi.dll [flags=0x0]
37151c64.15c4: supR3HardenedDllNotificationCallback: Unload 00007ffcf31f0000 LB 0x001dc000 C:\WINDOWS\system32\dcomp.dll [flags=0x0]
37161c64.15c4: supR3HardenedDllNotificationCallback: Unload 00007ffcf3b50000 LB 0x0025a000 C:\WINDOWS\system32\twinapi.appcore.dll [flags=0x0]
37171c64.15c4: supR3HardenedDllNotificationCallback: Unload 00007ffcf4130000 LB 0x00029000 C:\WINDOWS\system32\RMCLIENT.dll [flags=0x0]
37181c64.15c4: supR3HardenedDllNotificationCallback: Unload 00007ffce1e90000 LB 0x00101000 C:\WINDOWS\system32\wbem\fastprox.dll [flags=0x0]
37191c64.15c4: supR3HardenedDllNotificationCallback: Unload 00007ffcd0e30000 LB 0x000ed000 C:\Program Files\Oracle\VirtualBox\VBoxProxyStub.dll [flags=0x0]
37201c64.15c4: supR3HardenedDllNotificationCallback: Unload 00007ffce4bf0000 LB 0x00011000 C:\WINDOWS\system32\wbem\wbemprox.dll [flags=0x0]
37211c64.15c4: supR3HardenedDllNotificationCallback: Unload 00007ffce4c90000 LB 0x00084000 C:\WINDOWS\SYSTEM32\wbemcomn.dll [flags=0x0]
37221c64.15c4: supR3HardenedDllNotificationCallback: Unload 00007ffcca350000 LB 0x003b0000 C:\Program Files\Oracle\VirtualBox\VBoxC.dll [flags=0x0]
37231c64.15c4: Terminating the normal way: rcExit=0
372427d4.228c: supR3HardNtChildWaitFor[2]: Quitting: ExitCode=0x0 (rcNtWait=0x0, rcNt1=0x0, rcNt2=0x103, rcNt3=0x103, 831435 ms, the end);
37252500.22a0: supR3HardNtChildWaitFor[1]: Quitting: ExitCode=0x0 (rcNtWait=0x0, rcNt1=0x0, rcNt2=0x103, rcNt3=0x103, 832498 ms, the end);

© 2024 Oracle Support Privacy / Do Not Sell My Info Terms of Use Trademark Policy