VirtualBox

Ticket #19572: DJ Virtual-Vboxlog1.log

File DJ Virtual-Vboxlog1.log, 362.7 KB (added by djstocko, 4 years ago)
Line 
114fc.2848: Log file opened: 6.0.20r137117 g_hStartupLog=0000000000000074 g_uNtVerCombined=0xa047ba00
214fc.2848: \SystemRoot\System32\ntdll.dll:
314fc.2848: CreationTime: 2020-04-16T09:06:27.442210500Z
414fc.2848: LastWriteTime: 2020-04-16T09:06:27.597186100Z
514fc.2848: ChangeTime: 2020-04-16T12:25:35.509162400Z
614fc.2848: FileAttributes: 0x20
714fc.2848: Size: 0x1e8458
814fc.2848: NT Headers: 0xd8
914fc.2848: Timestamp: 0xc1bb301
1014fc.2848: Machine: 0x8664 - amd64
1114fc.2848: Timestamp: 0xc1bb301
1214fc.2848: Image Version: 10.0
1314fc.2848: SizeOfImage: 0x1f0000 (2031616)
1414fc.2848: Resource Dir: 0x17f000 LB 0x6f310
1514fc.2848: [Version info resource found at 0xd8! (ID/Name: 0x1; SubID/SubName: 0x409)]
1614fc.2848: [Raw version resource data: 0x17f0f0 LB 0x380, codepage 0x0 (reserved 0x0)]
1714fc.2848: ProductName: Microsoft® Windows® Operating System
1814fc.2848: ProductVersion: 10.0.18362.778
1914fc.2848: FileVersion: 10.0.18362.778 (WinBuild.160101.0800)
2014fc.2848: FileDescription: NT Layer DLL
2114fc.2848: \SystemRoot\System32\kernel32.dll:
2214fc.2848: CreationTime: 2020-04-16T09:05:45.959732900Z
2314fc.2848: LastWriteTime: 2020-04-16T09:05:46.019711100Z
2414fc.2848: ChangeTime: 2020-04-16T12:25:13.828643300Z
2514fc.2848: FileAttributes: 0x20
2614fc.2848: Size: 0xb0498
2714fc.2848: NT Headers: 0xe8
2814fc.2848: Timestamp: 0x21b07e83
2914fc.2848: Machine: 0x8664 - amd64
3014fc.2848: Timestamp: 0x21b07e83
3114fc.2848: Image Version: 10.0
3214fc.2848: SizeOfImage: 0xb2000 (729088)
3314fc.2848: Resource Dir: 0xb0000 LB 0x520
3414fc.2848: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
3514fc.2848: [Raw version resource data: 0xb00b0 LB 0x3a4, codepage 0x0 (reserved 0x0)]
3614fc.2848: ProductName: Microsoft® Windows® Operating System
3714fc.2848: ProductVersion: 10.0.18362.778
3814fc.2848: FileVersion: 10.0.18362.778 (WinBuild.160101.0800)
3914fc.2848: FileDescription: Windows NT BASE API Client DLL
4014fc.2848: \SystemRoot\System32\KernelBase.dll:
4114fc.2848: CreationTime: 2020-04-16T09:06:29.304756100Z
4214fc.2848: LastWriteTime: 2020-04-16T09:06:29.519764000Z
4314fc.2848: ChangeTime: 2020-04-16T12:25:31.352898400Z
4414fc.2848: FileAttributes: 0x20
4514fc.2848: Size: 0x2a3c38
4614fc.2848: NT Headers: 0xf0
4714fc.2848: Timestamp: 0xafa78a6a
4814fc.2848: Machine: 0x8664 - amd64
4914fc.2848: Timestamp: 0xafa78a6a
5014fc.2848: Image Version: 10.0
5114fc.2848: SizeOfImage: 0x2a3000 (2764800)
5214fc.2848: Resource Dir: 0x27d000 LB 0x548
5314fc.2848: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
5414fc.2848: [Raw version resource data: 0x27d0b0 LB 0x3bc, codepage 0x0 (reserved 0x0)]
5514fc.2848: ProductName: Microsoft® Windows® Operating System
5614fc.2848: ProductVersion: 10.0.18362.778
5714fc.2848: FileVersion: 10.0.18362.778 (WinBuild.160101.0800)
5814fc.2848: FileDescription: Windows NT BASE API Client DLL
5914fc.2848: \SystemRoot\System32\apisetschema.dll:
6014fc.2848: CreationTime: 2019-03-19T04:43:54.837151500Z
6114fc.2848: LastWriteTime: 2019-03-19T04:43:54.837151500Z
6214fc.2848: ChangeTime: 2020-04-16T09:10:48.262837500Z
6314fc.2848: FileAttributes: 0x20
6414fc.2848: Size: 0x1d028
6514fc.2848: NT Headers: 0xc8
6614fc.2848: Timestamp: 0xd6ced080
6714fc.2848: Machine: 0x8664 - amd64
6814fc.2848: Timestamp: 0xd6ced080
6914fc.2848: Image Version: 10.0
7014fc.2848: SizeOfImage: 0x1e000 (122880)
7114fc.2848: Resource Dir: 0x1d000 LB 0x408
7214fc.2848: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
7314fc.2848: [Raw version resource data: 0x1d060 LB 0x3a8, codepage 0x0 (reserved 0x0)]
7414fc.2848: ProductName: Microsoft® Windows® Operating System
7514fc.2848: ProductVersion: 10.0.18362.1
7614fc.2848: FileVersion: 10.0.18362.1 (WinBuild.160101.0800)
7714fc.2848: FileDescription: ApiSet Schema DLL
7814fc.2848: NtOpenDirectoryObject failed on \Driver: 0xc0000022
7914fc.2848: supR3HardenedWinFindAdversaries: 0x0
8014fc.2848: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox'
8114fc.2848: Calling main()
8214fc.2848: SUPR3HardenedMain: pszProgName=VirtualBoxVM fFlags=0x2
8314fc.2848: supR3HardenedWinInitAppBin(0x2): '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox'
8414fc.2848: SUPR3HardenedMain: Respawn #1
8514fc.2848: System32: \Device\HarddiskVolume2\Windows\System32
8614fc.2848: WinSxS: \Device\HarddiskVolume2\Windows\WinSxS
8714fc.2848: KnownDllPath: C:\WINDOWS\System32
8814fc.2848: supR3HardenedWinInit: Performing a limited self purification...
8914fc.2848: supHardNtVpScanVirtualMemory: enmKind=SELF_PURIFICATION
9014fc.2848: *0000000000000000-00000000001cffff 0x0001/0x0000 0x0000000
9114fc.2848: *00000000001d0000-00000000001dffff 0x0004/0x0004 0x0040000
9214fc.2848: 00000000001e0000-00000000001effff 0x0001/0x0000 0x0000000
9314fc.2848: *00000000001f0000-00000000001f3fff 0x0002/0x0002 0x0040000
9414fc.2848: 00000000001f4000-00000000001fffff 0x0001/0x0000 0x0000000
9514fc.2848: *0000000000200000-0000000000203fff 0x0000/0x0004 0x0020000
9614fc.2848: 0000000000204000-0000000000206fff 0x0004/0x0004 0x0020000
9714fc.2848: 0000000000207000-00000000003fffff 0x0000/0x0004 0x0020000
9814fc.2848: *0000000000400000-000000000041afff 0x0002/0x0002 0x0040000
9914fc.2848: 000000000041b000-000000000041ffff 0x0001/0x0000 0x0000000
10014fc.2848: *0000000000420000-00000000004d8fff 0x0000/0x0004 0x0020000
10114fc.2848: 00000000004d9000-00000000004dbfff 0x0104/0x0004 0x0020000
10214fc.2848: 00000000004dc000-000000000051ffff 0x0004/0x0004 0x0020000
10314fc.2848: *0000000000520000-0000000000521fff 0x0004/0x0004 0x0020000
10414fc.2848: 0000000000522000-000000000052ffff 0x0001/0x0000 0x0000000
10514fc.2848: *0000000000530000-0000000000531fff 0x0004/0x0004 0x0020000
10614fc.2848: 0000000000532000-0000000000549fff 0x0000/0x0004 0x0020000
10714fc.2848: 000000000054a000-000000000054ffff 0x0001/0x0000 0x0000000
10814fc.2848: *0000000000550000-000000000055efff 0x0004/0x0004 0x0020000
10914fc.2848: 000000000055f000-000000000055ffff 0x0000/0x0004 0x0020000
11014fc.2848: 0000000000560000-00000000005bffff 0x0001/0x0000 0x0000000
11114fc.2848: *00000000005c0000-00000000005c4fff 0x0004/0x0004 0x0020000
11214fc.2848: 00000000005c5000-00000000006bffff 0x0000/0x0004 0x0020000
11314fc.2848: *00000000006c0000-0000000000786fff 0x0002/0x0002 0x0040000
11414fc.2848: 0000000000787000-000000000078ffff 0x0001/0x0000 0x0000000
11514fc.2848: *0000000000790000-0000000000791fff 0x0000/0x0004 0x0020000
11614fc.2848: 0000000000792000-0000000000982fff 0x0004/0x0004 0x0020000
11714fc.2848: 0000000000983000-0000000000983fff 0x0000/0x0004 0x0020000
11814fc.2848: 0000000000984000-000000000098ffff 0x0001/0x0000 0x0000000
11914fc.2848: *0000000000990000-00000000009acfff 0x0004/0x0004 0x0020000
12014fc.2848: 00000000009ad000-0000000000a8ffff 0x0000/0x0004 0x0020000
12114fc.2848: 0000000000a90000-000000007ffdffff 0x0001/0x0000 0x0000000
12214fc.2848: *000000007ffe0000-000000007ffe0fff 0x0002/0x0002 0x0020000
12314fc.2848: *000000007ffe1000-000000007ffe1fff 0x0002/0x0002 0x0020000
12414fc.2848: 000000007ffe2000-00007ff4bc72ffff 0x0001/0x0000 0x0000000
12514fc.2848: *00007ff4bc730000-00007ff4bc734fff 0x0002/0x0002 0x0040000
12614fc.2848: 00007ff4bc735000-00007ff4bc82ffff 0x0000/0x0002 0x0040000
12714fc.2848: *00007ff4bc830000-00007ff5bc84ffff 0x0000/0x0004 0x0020000
12814fc.2848: *00007ff5bc850000-00007ff5be84ffff 0x0000/0x0004 0x0020000
12914fc.2848: 00007ff5be850000-00007ff5be850fff 0x0004/0x0004 0x0020000
13014fc.2848: 00007ff5be851000-00007ff5be85ffff 0x0001/0x0000 0x0000000
13114fc.2848: *00007ff5be860000-00007ff5be860fff 0x0002/0x0002 0x0040000
13214fc.2848: 00007ff5be861000-00007ff5be86ffff 0x0001/0x0000 0x0000000
13314fc.2848: *00007ff5be870000-00007ff5be892fff 0x0002/0x0002 0x0040000
13414fc.2848: 00007ff5be893000-00007ff6c527ffff 0x0001/0x0000 0x0000000
13514fc.2848: *00007ff6c5280000-00007ff6c5280fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
13614fc.2848: 00007ff6c5281000-00007ff6c52f5fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
13714fc.2848: 00007ff6c52f6000-00007ff6c52f6fff 0x0080/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
13814fc.2848: 00007ff6c52f7000-00007ff6c533efff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
13914fc.2848: 00007ff6c533f000-00007ff6c5341fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
14014fc.2848: 00007ff6c5342000-00007ff6c5344fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
14114fc.2848: 00007ff6c5345000-00007ff6c5347fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
14214fc.2848: 00007ff6c5348000-00007ff6c5348fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
14314fc.2848: 00007ff6c5349000-00007ff6c534afff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
14414fc.2848: 00007ff6c534b000-00007ff6c534bfff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
14514fc.2848: 00007ff6c534c000-00007ff6c5394fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
14614fc.2848: 00007ff6c5395000-00007ffe346bffff 0x0001/0x0000 0x0000000
14714fc.2848: *00007ffe346c0000-00007ffe346c0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\KernelBase.dll
14814fc.2848: 00007ffe346c1000-00007ffe347c5fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\KernelBase.dll
14914fc.2848: 00007ffe347c6000-00007ffe34927fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\KernelBase.dll
15014fc.2848: 00007ffe34928000-00007ffe3492bfff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\KernelBase.dll
15114fc.2848: 00007ffe3492c000-00007ffe3492cfff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\KernelBase.dll
15214fc.2848: 00007ffe3492d000-00007ffe34962fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\KernelBase.dll
15314fc.2848: 00007ffe34963000-00007ffe34c6ffff 0x0001/0x0000 0x0000000
15414fc.2848: *00007ffe34c70000-00007ffe34c70fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\kernel32.dll
15514fc.2848: 00007ffe34c71000-00007ffe34ce5fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\kernel32.dll
15614fc.2848: 00007ffe34ce6000-00007ffe34d17fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\kernel32.dll
15714fc.2848: 00007ffe34d18000-00007ffe34d18fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\kernel32.dll
15814fc.2848: 00007ffe34d19000-00007ffe34d19fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\kernel32.dll
15914fc.2848: 00007ffe34d1a000-00007ffe34d21fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\kernel32.dll
16014fc.2848: 00007ffe34d22000-00007ffe36bbffff 0x0001/0x0000 0x0000000
16114fc.2848: *00007ffe36bc0000-00007ffe36bc0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
16214fc.2848: 00007ffe36bc1000-00007ffe36cd7fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
16314fc.2848: 00007ffe36cd8000-00007ffe36d1efff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
16414fc.2848: 00007ffe36d1f000-00007ffe36d1ffff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
16514fc.2848: 00007ffe36d20000-00007ffe36d21fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
16614fc.2848: 00007ffe36d22000-00007ffe36d2afff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
16714fc.2848: 00007ffe36d2b000-00007ffe36daffff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
16814fc.2848: 00007ffe36db0000-00007ffffffeffff 0x0001/0x0000 0x0000000
16914fc.2848: kernel32.dll: timestamp 0x21b07e83 (rc=VINF_SUCCESS)
17014fc.2848: kernelbase.dll: timestamp 0xafa78a6a (rc=VINF_SUCCESS)
17114fc.2848: VirtualBoxVM.exe: timestamp 0x5e8f449f (rc=VINF_SUCCESS)
17214fc.2848: '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe' has no imports
17314fc.2848: '\Device\HarddiskVolume2\Windows\System32\ntdll.dll' has no imports
17414fc.2848: supR3HardenedWinInit: SUPHARDNTVPKIND_SELF_PURIFICATION_LIMITED -> VINF_SUCCESS, cFixes=0
17514fc.2848: '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe' has no imports
17614fc.2848: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe)
17714fc.2848: supR3HardNtEnableThreadCreationEx:
17814fc.2848: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007ffe36c31770 pvNtTerminateThread=00007ffe36c5cac0
17914fc.2848: supR3HardenedWinDoReSpawn(1): New child b04.1c78 [kernel32].
18014fc.2848: supR3HardNtChildGatherData: PebBaseAddress=0000000000bcc000 cbPeb=0x388
18114fc.2848: supR3HardNtPuChFindNtdll: uNtDllParentAddr=00007ffe36bc0000 uNtDllChildAddr=00007ffe36bc0000
18214fc.2848: supR3HardenedWinSetupChildInit: uLdrInitThunk=00007ffe36c31770
18314fc.2848: supR3HardenedWinSetupChildInit: Start child.
18414fc.2848: supR3HardNtChildWaitFor: Found expected request 0 (PurifyChildAndCloseHandles) after 0 ms.
18514fc.2848: supR3HardNtChildPurify: Startup delay kludge #1/0: 265 ms, 30 sleeps
18614fc.2848: supHardNtVpScanVirtualMemory: enmKind=CHILD_PURIFICATION
18714fc.2848: *0000000000000000-000000000088ffff 0x0001/0x0000 0x0000000
18814fc.2848: *0000000000890000-00000000008affff 0x0004/0x0004 0x0020000
18914fc.2848: *00000000008b0000-00000000008cafff 0x0002/0x0002 0x0040000
19014fc.2848: 00000000008cb000-00000000008cffff 0x0001/0x0000 0x0000000
19114fc.2848: *00000000008d0000-00000000009cafff 0x0000/0x0004 0x0020000
19214fc.2848: 00000000009cb000-00000000009cdfff 0x0104/0x0004 0x0020000
19314fc.2848: 00000000009ce000-00000000009cffff 0x0004/0x0004 0x0020000
19414fc.2848: *00000000009d0000-00000000009d3fff 0x0002/0x0002 0x0040000
19514fc.2848: 00000000009d4000-00000000009dffff 0x0001/0x0000 0x0000000
19614fc.2848: *00000000009e0000-00000000009e1fff 0x0004/0x0004 0x0020000
19714fc.2848: 00000000009e2000-00000000009fffff 0x0001/0x0000 0x0000000
19814fc.2848: *0000000000a00000-0000000000bcbfff 0x0000/0x0004 0x0020000
19914fc.2848: 0000000000bcc000-0000000000bcefff 0x0004/0x0004 0x0020000
20014fc.2848: 0000000000bcf000-0000000000bfffff 0x0000/0x0004 0x0020000
20114fc.2848: 0000000000c00000-000000007ffdffff 0x0001/0x0000 0x0000000
20214fc.2848: *000000007ffe0000-000000007ffe0fff 0x0002/0x0002 0x0020000
20314fc.2848: *000000007ffe1000-000000007ffe1fff 0x0002/0x0002 0x0020000
20414fc.2848: 000000007ffe2000-00007ff51c1affff 0x0001/0x0000 0x0000000
20514fc.2848: *00007ff51c1b0000-00007ff51c1b0fff 0x0002/0x0002 0x0040000
20614fc.2848: 00007ff51c1b1000-00007ff51c1bffff 0x0001/0x0000 0x0000000
20714fc.2848: *00007ff51c1c0000-00007ff51c1e2fff 0x0002/0x0002 0x0040000
20814fc.2848: 00007ff51c1e3000-00007ff6c527ffff 0x0001/0x0000 0x0000000
20914fc.2848: *00007ff6c5280000-00007ff6c5280fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
21014fc.2848: 00007ff6c5281000-00007ff6c52f5fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
21114fc.2848: 00007ff6c52f6000-00007ff6c52f6fff 0x0080/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
21214fc.2848: 00007ff6c52f7000-00007ff6c533efff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
21314fc.2848: 00007ff6c533f000-00007ff6c533ffff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
21414fc.2848: 00007ff6c5340000-00007ff6c5340fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
21514fc.2848: 00007ff6c5341000-00007ff6c5345fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
21614fc.2848: 00007ff6c5346000-00007ff6c5346fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
21714fc.2848: 00007ff6c5347000-00007ff6c5347fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
21814fc.2848: 00007ff6c5348000-00007ff6c534bfff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
21914fc.2848: 00007ff6c534c000-00007ff6c5394fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
22014fc.2848: 00007ff6c5395000-00007ffe36bbffff 0x0001/0x0000 0x0000000
22114fc.2848: *00007ffe36bc0000-00007ffe36bc0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
22214fc.2848: 00007ffe36bc1000-00007ffe36cd7fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
22314fc.2848: 00007ffe36cd8000-00007ffe36d1efff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
22414fc.2848: 00007ffe36d1f000-00007ffe36d2afff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
22514fc.2848: 00007ffe36d2b000-00007ffe36d39fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
22614fc.2848: 00007ffe36d3a000-00007ffe36d3afff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
22714fc.2848: 00007ffe36d3b000-00007ffe36d3dfff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
22814fc.2848: 00007ffe36d3e000-00007ffe36daffff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
22914fc.2848: 00007ffe36db0000-00007ffffffeffff 0x0001/0x0000 0x0000000
23014fc.2848: supR3HardNtChildPurify: Done after 268 ms and 0 fixes (loop #0).
231b04.1c78: Log file opened: 6.0.20r137117 g_hStartupLog=0000000000000004 g_uNtVerCombined=0xa047ba00
232b04.1c78: supR3HardenedVmProcessInit: uNtDllAddr=00007ffe36bc0000 g_uNtVerCombined=0xa047ba00
233b04.1c78: ntdll.dll: timestamp 0xc1bb301 (rc=VINF_SUCCESS)
234b04.1c78: New simple heap: #1 0000000000d00000 LB 0x400000 (for 2031616 allocation)
235b04.1c78: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox'
23614fc.2848: supR3HardNtEnableThreadCreationEx:
237b04.1c78: System32: \Device\HarddiskVolume2\Windows\System32
238b04.1c78: WinSxS: \Device\HarddiskVolume2\Windows\WinSxS
239b04.1c78: KnownDllPath: C:\WINDOWS\System32
240b04.1c78: supR3HardenedVmProcessInit: Opening vboxdrv stub...
241b04.1c78: supR3HardenedVmProcessInit: Restoring LdrInitializeThunk...
242b04.1c78: supR3HardenedVmProcessInit: Returning to LdrInitializeThunk...
243b04.1c78: Registered Dll notification callback with NTDLL.
244b04.1c78: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\kernel32.dll)
245b04.1c78: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\kernel32.dll
246b04.1c78: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\KERNEL32.DLL (Input=KERNEL32.DLL, rcNtResolve=0xc0150008) *pfFlags=0xffffffff pwszSearchPath=0000000000004001:<flags> [calling]
247b04.1c78: supR3HardenedDllNotificationCallback: load 00007ffe346c0000 LB 0x002a3000 C:\WINDOWS\System32\KERNELBASE.dll [fFlags=0x0]
248b04.1c78: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\KernelBase.dll)
249b04.1c78: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\KernelBase.dll
250b04.1c78: supR3HardenedDllNotificationCallback: load 00007ffe34c70000 LB 0x000b2000 C:\WINDOWS\System32\KERNEL32.DLL [fFlags=0x0]
251b04.1c78: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
252b04.1c78: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe34c70000 'C:\WINDOWS\System32\KERNEL32.DLL'
253b04.1c78: supR3HardenedDllNotificationCallback: load 00007ff6c5280000 LB 0x00115000 C:\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe [fFlags=0x0]
254b04.1c78: '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe' has no imports
255b04.1c78: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe)
256b04.1c78: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
257b04.1c78: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007ffe36c31770 pvNtTerminateThread=00007ffe36c5cac0
25814fc.2848: supR3HardNtChildWaitFor: Found expected request 1 (CloseEvents) after 130 ms.
259b04.1c78: \SystemRoot\System32\ntdll.dll:
260b04.1c78: CreationTime: 2020-04-16T09:06:27.442210500Z
261b04.1c78: LastWriteTime: 2020-04-16T09:06:27.597186100Z
262b04.1c78: ChangeTime: 2020-04-16T12:25:35.509162400Z
263b04.1c78: FileAttributes: 0x20
264b04.1c78: Size: 0x1e8458
265b04.1c78: NT Headers: 0xd8
266b04.1c78: Timestamp: 0xc1bb301
267b04.1c78: Machine: 0x8664 - amd64
268b04.1c78: Timestamp: 0xc1bb301
269b04.1c78: Image Version: 10.0
270b04.1c78: SizeOfImage: 0x1f0000 (2031616)
271b04.1c78: Resource Dir: 0x17f000 LB 0x6f310
272b04.1c78: [Version info resource found at 0xd8! (ID/Name: 0x1; SubID/SubName: 0x409)]
273b04.1c78: [Raw version resource data: 0x17f0f0 LB 0x380, codepage 0x0 (reserved 0x0)]
274b04.1c78: ProductName: Microsoft® Windows® Operating System
275b04.1c78: ProductVersion: 10.0.18362.778
276b04.1c78: FileVersion: 10.0.18362.778 (WinBuild.160101.0800)
277b04.1c78: FileDescription: NT Layer DLL
278b04.1c78: \SystemRoot\System32\kernel32.dll:
279b04.1c78: CreationTime: 2020-04-16T09:05:45.959732900Z
280b04.1c78: LastWriteTime: 2020-04-16T09:05:46.019711100Z
281b04.1c78: ChangeTime: 2020-04-16T12:25:13.828643300Z
282b04.1c78: FileAttributes: 0x20
283b04.1c78: Size: 0xb0498
284b04.1c78: NT Headers: 0xe8
285b04.1c78: Timestamp: 0x21b07e83
286b04.1c78: Machine: 0x8664 - amd64
287b04.1c78: Timestamp: 0x21b07e83
288b04.1c78: Image Version: 10.0
289b04.1c78: SizeOfImage: 0xb2000 (729088)
290b04.1c78: Resource Dir: 0xb0000 LB 0x520
291b04.1c78: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
292b04.1c78: [Raw version resource data: 0xb00b0 LB 0x3a4, codepage 0x0 (reserved 0x0)]
293b04.1c78: ProductName: Microsoft® Windows® Operating System
294b04.1c78: ProductVersion: 10.0.18362.778
295b04.1c78: FileVersion: 10.0.18362.778 (WinBuild.160101.0800)
296b04.1c78: FileDescription: Windows NT BASE API Client DLL
297b04.1c78: \SystemRoot\System32\KernelBase.dll:
298b04.1c78: CreationTime: 2020-04-16T09:06:29.304756100Z
299b04.1c78: LastWriteTime: 2020-04-16T09:06:29.519764000Z
300b04.1c78: ChangeTime: 2020-04-16T12:25:31.352898400Z
301b04.1c78: FileAttributes: 0x20
302b04.1c78: Size: 0x2a3c38
303b04.1c78: NT Headers: 0xf0
304b04.1c78: Timestamp: 0xafa78a6a
305b04.1c78: Machine: 0x8664 - amd64
306b04.1c78: Timestamp: 0xafa78a6a
307b04.1c78: Image Version: 10.0
308b04.1c78: SizeOfImage: 0x2a3000 (2764800)
309b04.1c78: Resource Dir: 0x27d000 LB 0x548
310b04.1c78: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
311b04.1c78: [Raw version resource data: 0x27d0b0 LB 0x3bc, codepage 0x0 (reserved 0x0)]
312b04.1c78: ProductName: Microsoft® Windows® Operating System
313b04.1c78: ProductVersion: 10.0.18362.778
314b04.1c78: FileVersion: 10.0.18362.778 (WinBuild.160101.0800)
315b04.1c78: FileDescription: Windows NT BASE API Client DLL
316b04.1c78: \SystemRoot\System32\apisetschema.dll:
317b04.1c78: CreationTime: 2019-03-19T04:43:54.837151500Z
318b04.1c78: LastWriteTime: 2019-03-19T04:43:54.837151500Z
319b04.1c78: ChangeTime: 2020-04-16T09:10:48.262837500Z
320b04.1c78: FileAttributes: 0x20
321b04.1c78: Size: 0x1d028
322b04.1c78: NT Headers: 0xc8
323b04.1c78: Timestamp: 0xd6ced080
324b04.1c78: Machine: 0x8664 - amd64
325b04.1c78: Timestamp: 0xd6ced080
326b04.1c78: Image Version: 10.0
327b04.1c78: SizeOfImage: 0x1e000 (122880)
328b04.1c78: Resource Dir: 0x1d000 LB 0x408
329b04.1c78: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
330b04.1c78: [Raw version resource data: 0x1d060 LB 0x3a8, codepage 0x0 (reserved 0x0)]
331b04.1c78: ProductName: Microsoft® Windows® Operating System
332b04.1c78: ProductVersion: 10.0.18362.1
333b04.1c78: FileVersion: 10.0.18362.1 (WinBuild.160101.0800)
334b04.1c78: FileDescription: ApiSet Schema DLL
335b04.1c78: NtOpenDirectoryObject failed on \Driver: 0xc0000022
336b04.1c78: supR3HardenedWinFindAdversaries: 0x0
337b04.1c78: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox'
338b04.1c78: Calling main()
339b04.1c78: SUPR3HardenedMain: pszProgName=VirtualBoxVM fFlags=0x2
340b04.1c78: supR3HardenedWinInitAppBin(0x2): '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox'
341b04.1c78: '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe' has no imports
342b04.1c78: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe)
343b04.1c78: SUPR3HardenedMain: Respawn #2
344b04.1c78: supR3HardNtEnableThreadCreationEx:
345b04.1c78: supR3HardenedDllNotificationCallback: load 00007ffe35f10000 LB 0x00120000 C:\WINDOWS\System32\RPCRT4.dll [fFlags=0x0]
346b04.1c78: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll)
347b04.1c78: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll
348b04.1c78: supR3HardenedDllNotificationCallback: load 00007ffe36a60000 LB 0x00097000 C:\WINDOWS\System32\sechost.dll [fFlags=0x0]
349b04.1c78: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'rpcrt4.dll'.
350b04.1c78: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\sechost.dll)
351b04.1c78: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\sechost.dll
352b04.1c78: '\Device\HarddiskVolume2\Windows\System32\ntdll.dll' has no imports
353b04.1c78: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\ntdll.dll)
354b04.1c78: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\ntdll.dll
355b04.1c78: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
356b04.1c78: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
357b04.1c78: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
358b04.1c78: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\ntdll.dll (Input=ntdll.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
359b04.1c78: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe36bc0000 'C:\WINDOWS\System32\ntdll.dll'
360b04.1c78: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007ffe36c31770 pvNtTerminateThread=00007ffe36c5cac0
361b04.1c78: supR3HardenedWinDoReSpawn(2): New child 748.eb8 [kernel32].
362b04.1c78: supR3HardenedWinReSpawn: NtSetInformationThread/ThreadHideFromDebugger failed: 0xc0000022 (harmless)
363b04.1c78: supR3HardNtChildGatherData: PebBaseAddress=00000000009cf000 cbPeb=0x388
364b04.1c78: supR3HardNtPuChFindNtdll: uNtDllParentAddr=00007ffe36bc0000 uNtDllChildAddr=00007ffe36bc0000
365b04.1c78: supR3HardenedWinSetupChildInit: uLdrInitThunk=00007ffe36c31770
366b04.1c78: supR3HardenedWinSetupChildInit: Start child.
367b04.1c78: supR3HardNtChildWaitFor: Found expected request 0 (PurifyChildAndCloseHandles) after 0 ms.
368b04.1c78: supR3HardNtChildPurify: Startup delay kludge #1/0: 263 ms, 30 sleeps
369b04.1c78: supHardNtVpScanVirtualMemory: enmKind=CHILD_PURIFICATION
370b04.1c78: *0000000000000000-000000000075ffff 0x0001/0x0000 0x0000000
371b04.1c78: *0000000000760000-000000000077ffff 0x0004/0x0004 0x0020000
372b04.1c78: *0000000000780000-000000000079afff 0x0002/0x0002 0x0040000
373b04.1c78: 000000000079b000-000000000079ffff 0x0001/0x0000 0x0000000
374b04.1c78: *00000000007a0000-00000000007a3fff 0x0002/0x0002 0x0040000
375b04.1c78: 00000000007a4000-00000000007affff 0x0001/0x0000 0x0000000
376b04.1c78: *00000000007b0000-00000000007b1fff 0x0004/0x0004 0x0020000
377b04.1c78: 00000000007b2000-00000000007fffff 0x0001/0x0000 0x0000000
378b04.1c78: *0000000000800000-00000000009cefff 0x0000/0x0004 0x0020000
379b04.1c78: 00000000009cf000-00000000009d1fff 0x0004/0x0004 0x0020000
380b04.1c78: 00000000009d2000-00000000009fffff 0x0000/0x0004 0x0020000
381b04.1c78: *0000000000a00000-0000000000afafff 0x0000/0x0004 0x0020000
382b04.1c78: 0000000000afb000-0000000000afdfff 0x0104/0x0004 0x0020000
383b04.1c78: 0000000000afe000-0000000000afffff 0x0004/0x0004 0x0020000
384b04.1c78: 0000000000b00000-000000007ffdffff 0x0001/0x0000 0x0000000
385b04.1c78: *000000007ffe0000-000000007ffe0fff 0x0002/0x0002 0x0020000
386b04.1c78: *000000007ffe1000-000000007ffe1fff 0x0002/0x0002 0x0020000
387b04.1c78: 000000007ffe2000-00007ff57afcffff 0x0001/0x0000 0x0000000
388b04.1c78: *00007ff57afd0000-00007ff57afd0fff 0x0002/0x0002 0x0040000
389b04.1c78: 00007ff57afd1000-00007ff57afdffff 0x0001/0x0000 0x0000000
390b04.1c78: *00007ff57afe0000-00007ff57b002fff 0x0002/0x0002 0x0040000
391b04.1c78: 00007ff57b003000-00007ff6c527ffff 0x0001/0x0000 0x0000000
392b04.1c78: *00007ff6c5280000-00007ff6c5280fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
393b04.1c78: 00007ff6c5281000-00007ff6c52f5fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
394b04.1c78: 00007ff6c52f6000-00007ff6c52f6fff 0x0080/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
395b04.1c78: 00007ff6c52f7000-00007ff6c533efff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
396b04.1c78: 00007ff6c533f000-00007ff6c533ffff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
397b04.1c78: 00007ff6c5340000-00007ff6c5340fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
398b04.1c78: 00007ff6c5341000-00007ff6c5345fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
399b04.1c78: 00007ff6c5346000-00007ff6c5346fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
400b04.1c78: 00007ff6c5347000-00007ff6c5347fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
401b04.1c78: 00007ff6c5348000-00007ff6c534bfff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
402b04.1c78: 00007ff6c534c000-00007ff6c5394fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
403b04.1c78: 00007ff6c5395000-00007ffe36bbffff 0x0001/0x0000 0x0000000
404b04.1c78: *00007ffe36bc0000-00007ffe36bc0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
405b04.1c78: 00007ffe36bc1000-00007ffe36cd7fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
406b04.1c78: 00007ffe36cd8000-00007ffe36d1efff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
407b04.1c78: 00007ffe36d1f000-00007ffe36d2afff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
408b04.1c78: 00007ffe36d2b000-00007ffe36d39fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
409b04.1c78: 00007ffe36d3a000-00007ffe36d3afff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
410b04.1c78: 00007ffe36d3b000-00007ffe36d3dfff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
411b04.1c78: 00007ffe36d3e000-00007ffe36daffff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
412b04.1c78: 00007ffe36db0000-00007ffffffeffff 0x0001/0x0000 0x0000000
413b04.1c78: VirtualBoxVM.exe: timestamp 0x5e8f449f (rc=VINF_SUCCESS)
414b04.1c78: '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe' has no imports
415b04.1c78: '\Device\HarddiskVolume2\Windows\System32\ntdll.dll' has no imports
416b04.1c78: supR3HardNtChildPurify: Done after 319 ms and 0 fixes (loop #0).
417748.eb8: Log file opened: 6.0.20r137117 g_hStartupLog=0000000000000004 g_uNtVerCombined=0xa047ba00
418748.eb8: supR3HardenedVmProcessInit: uNtDllAddr=00007ffe36bc0000 g_uNtVerCombined=0xa047ba00
419748.eb8: ntdll.dll: timestamp 0xc1bb301 (rc=VINF_SUCCESS)
420748.eb8: New simple heap: #1 0000000000c00000 LB 0x400000 (for 2031616 allocation)
421b04.1c78: supR3HardenedEarlyCompact: Removed heap 1 (0x00000000d00000 LB 0x400000)
422b04.1c78: supR3HardNtEnableThreadCreationEx:
423748.eb8: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox'
424748.eb8: System32: \Device\HarddiskVolume2\Windows\System32
425748.eb8: WinSxS: \Device\HarddiskVolume2\Windows\WinSxS
426748.eb8: KnownDllPath: C:\WINDOWS\System32
427748.eb8: supR3HardenedVmProcessInit: Opening vboxdrv...
428748.eb8: supR3HardenedVmProcessInit: Restoring LdrInitializeThunk...
429748.eb8: supR3HardenedVmProcessInit: Returning to LdrInitializeThunk...
430748.eb8: Registered Dll notification callback with NTDLL.
431748.eb8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\kernel32.dll)
432748.eb8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\kernel32.dll
433748.eb8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\KERNEL32.DLL (Input=KERNEL32.DLL, rcNtResolve=0xc0150008) *pfFlags=0xffffffff pwszSearchPath=0000000000004001:<flags> [calling]
434748.eb8: supR3HardenedDllNotificationCallback: load 00007ffe346c0000 LB 0x002a3000 C:\WINDOWS\System32\KERNELBASE.dll [fFlags=0x0]
435748.eb8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\KernelBase.dll)
436748.eb8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\KernelBase.dll
437748.eb8: supR3HardenedDllNotificationCallback: load 00007ffe34c70000 LB 0x000b2000 C:\WINDOWS\System32\KERNEL32.DLL [fFlags=0x0]
438748.eb8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
439748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe34c70000 'C:\WINDOWS\System32\KERNEL32.DLL'
440748.eb8: supR3HardenedDllNotificationCallback: load 00007ff6c5280000 LB 0x00115000 C:\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe [fFlags=0x0]
441748.eb8: '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe' has no imports
442748.eb8: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe)
443748.eb8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
444748.eb8: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007ffe36c31770 pvNtTerminateThread=00007ffe36c5cac0
445b04.1c78: supR3HardNtChildWaitFor: Found expected request 1 (CloseEvents) after 164 ms.
446748.eb8: \SystemRoot\System32\ntdll.dll:
447748.eb8: CreationTime: 2020-04-16T09:06:27.442210500Z
448748.eb8: LastWriteTime: 2020-04-16T09:06:27.597186100Z
449748.eb8: ChangeTime: 2020-04-16T12:25:35.509162400Z
450748.eb8: FileAttributes: 0x20
451748.eb8: Size: 0x1e8458
452748.eb8: NT Headers: 0xd8
453748.eb8: Timestamp: 0xc1bb301
454748.eb8: Machine: 0x8664 - amd64
455748.eb8: Timestamp: 0xc1bb301
456748.eb8: Image Version: 10.0
457748.eb8: SizeOfImage: 0x1f0000 (2031616)
458748.eb8: Resource Dir: 0x17f000 LB 0x6f310
459748.eb8: [Version info resource found at 0xd8! (ID/Name: 0x1; SubID/SubName: 0x409)]
460748.eb8: [Raw version resource data: 0x17f0f0 LB 0x380, codepage 0x0 (reserved 0x0)]
461748.eb8: ProductName: Microsoft® Windows® Operating System
462748.eb8: ProductVersion: 10.0.18362.778
463748.eb8: FileVersion: 10.0.18362.778 (WinBuild.160101.0800)
464748.eb8: FileDescription: NT Layer DLL
465748.eb8: \SystemRoot\System32\kernel32.dll:
466748.eb8: CreationTime: 2020-04-16T09:05:45.959732900Z
467748.eb8: LastWriteTime: 2020-04-16T09:05:46.019711100Z
468748.eb8: ChangeTime: 2020-04-16T12:25:13.828643300Z
469748.eb8: FileAttributes: 0x20
470748.eb8: Size: 0xb0498
471748.eb8: NT Headers: 0xe8
472748.eb8: Timestamp: 0x21b07e83
473748.eb8: Machine: 0x8664 - amd64
474748.eb8: Timestamp: 0x21b07e83
475748.eb8: Image Version: 10.0
476748.eb8: SizeOfImage: 0xb2000 (729088)
477748.eb8: Resource Dir: 0xb0000 LB 0x520
478748.eb8: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
479748.eb8: [Raw version resource data: 0xb00b0 LB 0x3a4, codepage 0x0 (reserved 0x0)]
480748.eb8: ProductName: Microsoft® Windows® Operating System
481748.eb8: ProductVersion: 10.0.18362.778
482748.eb8: FileVersion: 10.0.18362.778 (WinBuild.160101.0800)
483748.eb8: FileDescription: Windows NT BASE API Client DLL
484748.eb8: \SystemRoot\System32\KernelBase.dll:
485748.eb8: CreationTime: 2020-04-16T09:06:29.304756100Z
486748.eb8: LastWriteTime: 2020-04-16T09:06:29.519764000Z
487748.eb8: ChangeTime: 2020-04-16T12:25:31.352898400Z
488748.eb8: FileAttributes: 0x20
489748.eb8: Size: 0x2a3c38
490748.eb8: NT Headers: 0xf0
491748.eb8: Timestamp: 0xafa78a6a
492748.eb8: Machine: 0x8664 - amd64
493748.eb8: Timestamp: 0xafa78a6a
494748.eb8: Image Version: 10.0
495748.eb8: SizeOfImage: 0x2a3000 (2764800)
496748.eb8: Resource Dir: 0x27d000 LB 0x548
497748.eb8: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
498748.eb8: [Raw version resource data: 0x27d0b0 LB 0x3bc, codepage 0x0 (reserved 0x0)]
499748.eb8: ProductName: Microsoft® Windows® Operating System
500748.eb8: ProductVersion: 10.0.18362.778
501748.eb8: FileVersion: 10.0.18362.778 (WinBuild.160101.0800)
502748.eb8: FileDescription: Windows NT BASE API Client DLL
503748.eb8: \SystemRoot\System32\apisetschema.dll:
504748.eb8: CreationTime: 2019-03-19T04:43:54.837151500Z
505748.eb8: LastWriteTime: 2019-03-19T04:43:54.837151500Z
506748.eb8: ChangeTime: 2020-04-16T09:10:48.262837500Z
507748.eb8: FileAttributes: 0x20
508748.eb8: Size: 0x1d028
509748.eb8: NT Headers: 0xc8
510748.eb8: Timestamp: 0xd6ced080
511748.eb8: Machine: 0x8664 - amd64
512748.eb8: Timestamp: 0xd6ced080
513748.eb8: Image Version: 10.0
514748.eb8: SizeOfImage: 0x1e000 (122880)
515748.eb8: Resource Dir: 0x1d000 LB 0x408
516748.eb8: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
517748.eb8: [Raw version resource data: 0x1d060 LB 0x3a8, codepage 0x0 (reserved 0x0)]
518748.eb8: ProductName: Microsoft® Windows® Operating System
519748.eb8: ProductVersion: 10.0.18362.1
520748.eb8: FileVersion: 10.0.18362.1 (WinBuild.160101.0800)
521748.eb8: FileDescription: ApiSet Schema DLL
522748.eb8: NtOpenDirectoryObject failed on \Driver: 0xc0000022
523748.eb8: supR3HardenedWinFindAdversaries: 0x0
524748.eb8: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox'
525748.eb8: Calling main()
526748.eb8: SUPR3HardenedMain: pszProgName=VirtualBoxVM fFlags=0x2
527748.eb8: supR3HardenedWinInitAppBin(0x2): '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox'
528748.eb8: '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe' has no imports
529748.eb8: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe)
530748.eb8: SUPR3HardenedMain: Final process, opening VBoxDrv...
531748.eb8: supR3HardenedEarlyCompact: Removed heap 1 (0x00000000c00000 LB 0x400000)
532748.eb8: supR3HardNtEnableThreadCreationEx:
533748.eb8: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxSupLib.dll)
534748.eb8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxSupLib.dll
535748.eb8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
536748.eb8: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxSupLib.dll [lacks WinVerifyTrust]
537748.eb8: supR3HardenedDllNotificationCallback: load 00007ffe21e40000 LB 0x00005000 C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL [fFlags=0x0]
538748.eb8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxSupLib.dll [lacks WinVerifyTrust]
539748.eb8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxSupLib.dll [lacks WinVerifyTrust]
540748.eb8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
541748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe21e40000 'C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL'
542748.eb8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxSupLib.dll [lacks WinVerifyTrust]
543748.eb8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
544748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe21e40000 'C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL'
545748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe21e40000 'C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL'
546748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
547748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msasn1.dll'.
548748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'crypt32.dll'.
549748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #27 'rpcrt4.dll'.
550748.eb8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\wintrust.dll)
551748.eb8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\wintrust.dll
552748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
553748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
554748.eb8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll)
555748.eb8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll
556748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'crypt32.dll'...
557748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'crypt32.dll' -> '\Device\HarddiskVolume2\Windows\System32\crypt32.dll' [rcNtRedir=0xc0150008]
558748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #32 'msasn1.dll'.
559748.eb8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\crypt32.dll)
560748.eb8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\crypt32.dll
561748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msasn1.dll'...
562748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msasn1.dll' -> '\Device\HarddiskVolume2\Windows\System32\msasn1.dll' [rcNtRedir=0xc0150008]
563748.eb8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\msasn1.dll)
564748.eb8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\msasn1.dll
565748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
566748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
567748.eb8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\msvcrt.dll)
568748.eb8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\msvcrt.dll
569748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msasn1.dll'...
570748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msasn1.dll' -> '\Device\HarddiskVolume2\Windows\System32\msasn1.dll' [rcNtRedir=0xc0150008]
571748.eb8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msasn1.dll [lacks WinVerifyTrust]
572748.eb8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\Wintrust.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
573748.eb8: supR3HardenedDllNotificationCallback: load 00007ffe369c0000 LB 0x0009e000 C:\WINDOWS\System32\msvcrt.dll [fFlags=0x0]
574748.eb8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
575748.eb8: supR3HardenedDllNotificationCallback: load 00007ffe33a90000 LB 0x00012000 C:\WINDOWS\System32\MSASN1.dll [fFlags=0x0]
576748.eb8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msasn1.dll [lacks WinVerifyTrust]
577748.eb8: supR3HardenedDllNotificationCallback: load 00007ffe34590000 LB 0x000fa000 C:\WINDOWS\System32\ucrtbase.dll [fFlags=0x0]
578748.eb8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\ucrtbase.dll)
579748.eb8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\ucrtbase.dll
580748.eb8: supR3HardenedDllNotificationCallback: load 00007ffe33b50000 LB 0x00149000 C:\WINDOWS\System32\CRYPT32.dll [fFlags=0x0]
581748.eb8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\crypt32.dll [lacks WinVerifyTrust]
582748.eb8: supR3HardenedDllNotificationCallback: load 00007ffe35f10000 LB 0x00120000 C:\WINDOWS\System32\RPCRT4.dll [fFlags=0x0]
583748.eb8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
584748.eb8: supR3HardenedDllNotificationCallback: load 00007ffe34970000 LB 0x0005c000 C:\WINDOWS\System32\Wintrust.dll [fFlags=0x0]
585748.eb8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
586748.eb8: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-synch-l1-2-0) -> 0x0, fPresent=1
587748.eb8: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-synch-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
588748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe346c0000 'api-ms-win-core-synch-l1-2-0'
589748.eb8: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-fibers-l1-1-1) -> 0x0, fPresent=1
590748.eb8: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-fibers-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
591748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe346c0000 'api-ms-win-core-fibers-l1-1-1'
592748.eb8: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-fibers-l1-1-1) -> 0x0, fPresent=1
593748.eb8: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-fibers-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
594748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe346c0000 'api-ms-win-core-fibers-l1-1-1'
595748.eb8: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-synch-l1-2-0) -> 0x0, fPresent=1
596748.eb8: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-synch-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
597748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe346c0000 'api-ms-win-core-synch-l1-2-0'
598748.eb8: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-localization-l1-2-1) -> 0x0, fPresent=1
599748.eb8: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-l1-2-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
600748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe346c0000 'api-ms-win-core-localization-l1-2-1'
601748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe34970000 'C:\WINDOWS\system32\Wintrust.dll'
602748.eb8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\bcrypt.dll)
603748.eb8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\bcrypt.dll
604748.eb8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\bcrypt.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
605748.eb8: supR3HardenedDllNotificationCallback: load 00007ffe34690000 LB 0x00026000 C:\WINDOWS\System32\bcrypt.dll [fFlags=0x0]
606748.eb8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\bcrypt.dll [lacks WinVerifyTrust]
607748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe34690000 'C:\WINDOWS\system32\bcrypt.dll'
608748.eb8: bcrypt.dll loaded at 00007ffe34690000, BCryptOpenAlgorithmProvider at 00007ffe34694c70, preloading providers:
609748.eb8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\bcryptprimitives.dll)
610748.eb8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\bcryptprimitives.dll
611748.eb8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\bcryptprimitives.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
612748.eb8: supR3HardenedDllNotificationCallback: load 00007ffe33d90000 LB 0x00080000 C:\WINDOWS\System32\bcryptprimitives.dll [fFlags=0x0]
613748.eb8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\bcryptprimitives.dll [lacks WinVerifyTrust]
614748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe33d90000 'C:\WINDOWS\system32\bcryptprimitives.dll'
615748.eb8: BCryptOpenAlgorithmProvider(,'MD2',0,0) -> 0x0 (hAlgo=00000000011ed980)
616748.eb8: BCryptOpenAlgorithmProvider(,'MD4',0,0) -> 0x0 (hAlgo=00000000011ee6e0)
617748.eb8: BCryptOpenAlgorithmProvider(,'MD5',0,0) -> 0x0 (hAlgo=00000000011ef1f0)
618748.eb8: BCryptOpenAlgorithmProvider(,'SHA1',0,0) -> 0x0 (hAlgo=00000000011ef4f0)
619748.eb8: BCryptOpenAlgorithmProvider(,'SHA256',0,0) -> 0x0 (hAlgo=00000000011ef7f0)
620748.eb8: BCryptOpenAlgorithmProvider(,'SHA512',0,0) -> 0x0 (hAlgo=00000000011efaf0)
621748.eb8: BCryptOpenAlgorithmProvider(,'RSA',0,0) -> 0x0 (hAlgo=00000000011efdf0)
622748.eb8: BCryptOpenAlgorithmProvider(,'DSA',0,0) -> 0x0 (hAlgo=00000000011f00f0)
623748.eb8: supR3HardenedDllNotificationCallback: load 00007ffe34b70000 LB 0x00017000 C:\WINDOWS\System32\CRYPTSP.dll [fFlags=0x0]
624748.eb8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\cryptsp.dll)
625748.eb8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\cryptsp.dll
626748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #18 'bcrypt.dll'.
627748.eb8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\rsaenh.dll)
628748.eb8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\rsaenh.dll
629748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcrypt.dll'...
630748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcrypt.dll' -> '\Device\HarddiskVolume2\Windows\System32\bcrypt.dll' [rcNtRedir=0xc0150008]
631748.eb8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\bcrypt.dll [lacks WinVerifyTrust]
632748.eb8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
633748.eb8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
634748.eb8: supR3HardenedDllNotificationCallback: load 00007ffe32e00000 LB 0x00033000 C:\WINDOWS\system32\rsaenh.dll [fFlags=0x0]
635748.eb8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
636748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe32e00000 'C:\WINDOWS\system32\rsaenh.dll'
637748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'bcryptprimitives.dll'.
638748.eb8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\cryptbase.dll)
639748.eb8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\cryptbase.dll
640748.eb8: supR3HardenedDllNotificationCallback: load 00007ffe334c0000 LB 0x0000c000 C:\WINDOWS\SYSTEM32\CRYPTBASE.dll [fFlags=0x0]
641748.eb8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\cryptbase.dll [lacks WinVerifyTrust]
642748.eb8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
643748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcryptprimitives.dll'...
644748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcryptprimitives.dll' -> '\Device\HarddiskVolume2\Windows\System32\bcryptprimitives.dll' [rcNtRedir=0xc0150008]
645748.eb8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\bcryptprimitives.dll [lacks WinVerifyTrust]
646748.eb8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\kernel32.dll (Input=kernel32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
647748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe34c70000 'C:\WINDOWS\System32\kernel32.dll'
648748.eb8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
649748.eb8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\WINTRUST.DLL (Input=WINTRUST.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
650748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe34970000 'C:\WINDOWS\System32\WINTRUST.DLL'
651748.eb8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\crypt32.dll [lacks WinVerifyTrust]
652748.eb8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\CRYPT32.dll (rcNtResolve=0xc0150008) *pfFlags=0x2 pwszSearchPath=0000000000000001:<flags> [calling]
653748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe33b50000 'C:\WINDOWS\System32\CRYPT32.dll'
654748.eb8: supR3HardenedDllNotificationCallback: load 00007ffe36b60000 LB 0x0001d000 C:\WINDOWS\System32\imagehlp.dll [fFlags=0x0]
655748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #20 'rpcrt4.dll'.
656748.eb8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\imagehlp.dll)
657748.eb8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\imagehlp.dll
658748.eb8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
659748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
660748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
661748.eb8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
662748.eb8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
663748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe32e00000 'C:\WINDOWS\system32\rsaenh.dll'
664748.eb8: supR3HardenedDllNotificationCallback: load 00007ffe36a60000 LB 0x00097000 C:\WINDOWS\System32\sechost.dll [fFlags=0x0]
665748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'rpcrt4.dll'.
666748.eb8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\sechost.dll)
667748.eb8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\sechost.dll
668748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
669748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'rpcrt4.dll'.
670748.eb8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\gpapi.dll)
671748.eb8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\gpapi.dll
672748.eb8: supR3HardenedDllNotificationCallback: load 00007ffe326a0000 LB 0x00022000 C:\WINDOWS\SYSTEM32\gpapi.dll [fFlags=0x0]
673748.eb8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gpapi.dll [lacks WinVerifyTrust]
674748.eb8: supR3HardenedDllNotificationCallback: load 00007ffe33b20000 LB 0x00023000 C:\WINDOWS\System32\profapi.dll [fFlags=0x0]
675748.eb8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\profapi.dll)
676748.eb8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\profapi.dll
677748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
678748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'crypt32.dll'.
679748.eb8: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\cryptnet.dll)
680748.eb8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\cryptnet.dll
681748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'crypt32.dll'...
682748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'crypt32.dll' -> '\Device\HarddiskVolume2\Windows\System32\crypt32.dll' [rcNtRedir=0xc0150008]
683748.eb8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\crypt32.dll [lacks WinVerifyTrust]
684748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
685748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
686748.eb8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
687748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
688748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
689748.eb8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
690748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
691748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
692748.eb8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
693748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
694748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
695748.eb8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
696748.eb8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\cryptnet.dll (Input=cryptnet.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
697748.eb8: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
698748.eb8: supR3HardenedDllNotificationCallback: load 00007ffe1cd20000 LB 0x0002f000 C:\WINDOWS\System32\cryptnet.dll [fFlags=0x0]
699748.eb8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
700748.eb8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
701748.eb8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x2 pwszSearchPath=0000000000000001:<flags> [calling]
702748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe1cd20000 'C:\WINDOWS\System32\cryptnet.dll'
703748.eb8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
704748.eb8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x2 pwszSearchPath=0000000000000001:<flags> [calling]
705748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe1cd20000 'C:\WINDOWS\System32\cryptnet.dll'
706748.eb8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
707748.eb8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x2 pwszSearchPath=0000000000000001:<flags> [calling]
708748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe1cd20000 'C:\WINDOWS\System32\cryptnet.dll'
709748.eb8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
710748.eb8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x2 pwszSearchPath=0000000000000001:<flags> [calling]
711748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe1cd20000 'C:\WINDOWS\System32\cryptnet.dll'
712748.eb8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
713748.eb8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x2 pwszSearchPath=0000000000000001:<flags> [calling]
714748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe1cd20000 'C:\WINDOWS\System32\cryptnet.dll'
715748.eb8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
716748.eb8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x2 pwszSearchPath=0000000000000001:<flags> [calling]
717748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe1cd20000 'C:\WINDOWS\System32\cryptnet.dll'
718748.eb8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
719748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe1cd20000 'C:\WINDOWS\System32\cryptnet.dll'
720748.eb8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
721748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe1cd20000 'C:\WINDOWS\System32\cryptnet.dll'
722748.eb8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
723748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe1cd20000 'C:\WINDOWS\System32\cryptnet.dll'
724748.eb8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
725748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe1cd20000 'C:\WINDOWS\System32\cryptnet.dll'
726748.eb8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
727748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe1cd20000 'C:\WINDOWS\System32\cryptnet.dll'
728748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe1cd20000 'C:\WINDOWS\System32\cryptnet.dll'
729748.eb8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
730748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe1cd20000 'C:\Windows\System32\cryptnet.dll'
731748.eb8: supR3HardenedDllNotificationCallback: load 00007ffe36030000 LB 0x000a3000 C:\WINDOWS\System32\advapi32.dll [fFlags=0x0]
732748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
733748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'sechost.dll'.
734748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #27 'rpcrt4.dll'.
735748.eb8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\advapi32.dll)
736748.eb8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\advapi32.dll
737748.eb8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
738748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
739748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
740748.eb8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
741748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'sechost.dll'...
742748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'sechost.dll' -> '\Device\HarddiskVolume2\Windows\System32\sechost.dll' [rcNtRedir=0xc0150008]
743748.eb8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\sechost.dll [lacks WinVerifyTrust]
744748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
745748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
746748.eb8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
747748.eb8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
748748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe32e00000 'C:\WINDOWS\system32\rsaenh.dll'
749748.eb8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\crypt32.dll [lacks WinVerifyTrust]
750748.eb8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\crypt32.dll (Input=crypt32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
751748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe33b50000 'C:\WINDOWS\System32\crypt32.dll'
752748.eb8: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000000 pwszName=\SystemRoot\System32\ntdll.dll
753748.eb8: supR3HardNtViCallWinVerifyTrustCatFile: New context 0000000001295d20
754748.eb8: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000001295d20
755748.eb8: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=F482F3EE4619F819AA795BCEA059C3E3AC97DEF9
756748.eb8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
757748.eb8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\rpcrt4.dll (Input=rpcrt4.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
758748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe35f10000 'C:\WINDOWS\System32\rpcrt4.dll'
759748.eb8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
760748.eb8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
761748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe32e00000 'C:\WINDOWS\system32\rsaenh.dll'
762748.eb8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\crypt32.dll [lacks WinVerifyTrust]
763748.eb8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\crypt32.dll (Input=crypt32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
764748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe33b50000 'C:\WINDOWS\System32\crypt32.dll'
765748.eb8: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.18362.778.cat'; file='\SystemRoot\System32\ntdll.dll'
766748.eb8: g_pfnWinVerifyTrust=00007ffe349761f0
767748.eb8: supR3HardenedScreenImage/preload: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\crypt32.dll [redoing WinVerifyTrust]
768748.eb8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
769748.eb8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
770748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe32e00000 'C:\WINDOWS\system32\rsaenh.dll'
771748.eb8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\crypt32.dll [lacks WinVerifyTrust]
772748.eb8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\crypt32.dll (Input=crypt32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
773748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe33b50000 'C:\WINDOWS\System32\crypt32.dll'
774748.eb8: supR3HardenedScreenImage/preload: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\crypt32.dll'
775748.eb8: supR3HardenedScreenImage/preload: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\wintrust.dll [redoing WinVerifyTrust]
776748.eb8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
777748.eb8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
778748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe32e00000 'C:\WINDOWS\system32\rsaenh.dll'
779748.eb8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\crypt32.dll
780748.eb8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\crypt32.dll (Input=crypt32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
781748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe33b50000 'C:\WINDOWS\System32\crypt32.dll'
782748.eb8: supR3HardenedScreenImage/preload: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\wintrust.dll'
783748.eb8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
784748.eb8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
785748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe32e00000 'C:\WINDOWS\system32\rsaenh.dll'
786748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe33b50000 'C:\WINDOWS\System32\crypt32.dll'
787748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\advapi32.dll'
788748.eb8: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000394 pwszName=\Device\HarddiskVolume2\Windows\System32\cryptnet.dll
789748.eb8: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000001295d20
790748.eb8: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000001295d20
791748.eb8: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=09032EBC3D9D9BDDC0EE4A6463C043296B79FF20
792748.eb8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
793748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe32e00000 'C:\WINDOWS\system32\rsaenh.dll'
794748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe33b50000 'C:\WINDOWS\System32\crypt32.dll'
795748.eb8: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.18362.778.cat'; file='\Device\HarddiskVolume2\Windows\System32\cryptnet.dll'
796748.eb8: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
797748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\cryptnet.dll'
798748.eb8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
799748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe32e00000 'C:\WINDOWS\system32\rsaenh.dll'
800748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe33b50000 'C:\WINDOWS\System32\crypt32.dll'
801748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\profapi.dll'
802748.eb8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
803748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe32e00000 'C:\WINDOWS\system32\rsaenh.dll'
804748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe33b50000 'C:\WINDOWS\System32\crypt32.dll'
805748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\gpapi.dll'
806748.eb8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
807748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe32e00000 'C:\WINDOWS\system32\rsaenh.dll'
808748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe33b50000 'C:\WINDOWS\System32\crypt32.dll'
809748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\sechost.dll'
810748.eb8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
811748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe32e00000 'C:\WINDOWS\system32\rsaenh.dll'
812748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe33b50000 'C:\WINDOWS\System32\crypt32.dll'
813748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\imagehlp.dll'
814748.eb8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
815748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe32e00000 'C:\WINDOWS\system32\rsaenh.dll'
816748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe33b50000 'C:\WINDOWS\System32\crypt32.dll'
817748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\cryptbase.dll'
818748.eb8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
819748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe32e00000 'C:\WINDOWS\system32\rsaenh.dll'
820748.eb8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\crypt32.dll
821748.eb8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\crypt32.dll (Input=crypt32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
822748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe33b50000 'C:\WINDOWS\System32\crypt32.dll'
823748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\rsaenh.dll'
824748.eb8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rsaenh.dll
825748.eb8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
826748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe32e00000 'C:\WINDOWS\system32\rsaenh.dll'
827748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe33b50000 'C:\WINDOWS\System32\crypt32.dll'
828748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\cryptsp.dll'
829748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe32e00000 'C:\WINDOWS\system32\rsaenh.dll'
830748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe33b50000 'C:\WINDOWS\System32\crypt32.dll'
831748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\bcryptprimitives.dll'
832748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe32e00000 'C:\WINDOWS\system32\rsaenh.dll'
833748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe33b50000 'C:\WINDOWS\System32\crypt32.dll'
834748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\bcrypt.dll'
835748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe32e00000 'C:\WINDOWS\system32\rsaenh.dll'
836748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe33b50000 'C:\WINDOWS\System32\crypt32.dll'
837748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\ucrtbase.dll'
838748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe32e00000 'C:\WINDOWS\system32\rsaenh.dll'
839748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe33b50000 'C:\WINDOWS\System32\crypt32.dll'
840748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll'
841748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe32e00000 'C:\WINDOWS\system32\rsaenh.dll'
842748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe33b50000 'C:\WINDOWS\System32\crypt32.dll'
843748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\msasn1.dll'
844748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe32e00000 'C:\WINDOWS\system32\rsaenh.dll'
845748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe33b50000 'C:\WINDOWS\System32\crypt32.dll'
846748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll'
847748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe32e00000 'C:\WINDOWS\system32\rsaenh.dll'
848748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 24202) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxSupLib.dll'
849748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe32e00000 'C:\WINDOWS\system32\rsaenh.dll'
850748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 24202) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe'
851748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe32e00000 'C:\WINDOWS\system32\rsaenh.dll'
852748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe33b50000 'C:\WINDOWS\System32\crypt32.dll'
853748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\KernelBase.dll'
854748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe32e00000 'C:\WINDOWS\system32\rsaenh.dll'
855748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe33b50000 'C:\WINDOWS\System32\crypt32.dll'
856748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\kernel32.dll'
857748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe33b50000 'C:\WINDOWS\system32\crypt32.dll'
858748.eb8: supR3HardenedWinIsDesiredRootCA: Adding 0xb7dad5de80bd500 CN=MAIN
859748.eb8: supR3HardenedWinIsDesiredRootCA: Adding 0x5ad46780fa5df300 DC=com, DC=microsoft, CN=Microsoft Root Certificate Authority
860748.eb8: supR3HardenedWinIsDesiredRootCA: Adding 0xea5386456178582b C=ZA, ST=Western Cape, L=Durbanville, O=Thawte, OU=Thawte Certification, CN=Thawte Timestamping CA
861748.eb8: supR3HardenedWinIsDesiredRootCA: Adding 0x3be670c1bd02a900 OU=Copyright (c) 1997 Microsoft Corp., OU=Microsoft Corporation, CN=Microsoft Root Authority
862748.eb8: supR3HardenedWinIsDesiredRootCA: Adding 0xe991ee72b03db500 C=US, O=Symantec Corporation, CN=Symantec Enterprise Mobile Root for Microsoft
863748.eb8: supR3HardenedWinIsDesiredRootCA: Adding 0x4d3835aa4180b200 C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Root Certificate Authority 2011
864748.eb8: supR3HardenedWinIsDesiredRootCA: Adding 0x646e3fe3ba08df00 C=US, O=MSFT, CN=Microsoft Authenticode(tm) Root Authority
865748.eb8: supR3HardenedWinIsDesiredRootCA: Adding 0x4e412021c389dc00 C=CZ, ST=Moravia, L=Brno, O=AVG Technologies cz, OU=Engineering, CN=AVG Technologies
866748.eb8: supR3HardenedWinIsDesiredRootCA: Adding 0xece4e4289e08b900 C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Root Certificate Authority 2010
867748.eb8: supR3HardenedWinIsDesiredRootCA: Adding 0xf3bb4d7e894b420 C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft ECC TS Root Certificate Authority 2018
868748.eb8: supR3HardenedWinIsDesiredRootCA: Adding 0x43a9cc371ff5385a O=Microsoft Trust Network, OU=Microsoft Corporation, OU=Microsoft Time Stamping Service Root, OU=Copyright (c) 1997 Microsoft Corp.
869748.eb8: supR3HardenedWinIsDesiredRootCA: Adding 0x7cb5fa9480369800 CN=MAIN
870748.eb8: supR3HardenedWinIsDesiredRootCA: Adding 0x2e2d2c7c68f0202e O=VeriSign Trust Network, OU=VeriSign, Inc., OU=VeriSign Time Stamping Service Root, OU=NO LIABILITY ACCEPTED, (c)97 VeriSign, Inc.
871748.eb8: supR3HardenedWinIsDesiredRootCA: Adding 0xcec3d46562b9be8e C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft ECC Product Root Certificate Authority 2018
872748.eb8: supR3HardenedWinIsDesiredRootCA: Adding 0xca58a05dd401ae00 C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Time Stamp Root Certificate Authority 2014
873748.eb8: supR3HardenedWinIsDesiredRootCA: Adding 0x2ca429a5c4c6a700 C=IT, L=Milan, O=Actalis S.p.A./03358520967, CN=Actalis Authentication Root CA
874748.eb8: supR3HardenedWinIsDesiredRootCA: Adding 0xd8dbfb2c27bfb200 C=US, O=thawte, Inc., OU=Certification Services Division, OU=(c) 2008 thawte, Inc. - For authorized use only, CN=thawte Primary Root CA - G3
875748.eb8: supR3HardenedWinIsDesiredRootCA: Adding 0x61a3a33f81aace00 C=US, ST=UT, L=Salt Lake City, O=The USERTRUST Network, OU=http://www.usertrust.com, CN=UTN-USERFirst-Object
876748.eb8: supR3HardenedWinIsDesiredRootCA: Adding 0x6b7bdc34cd37bb00 C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root G2
877748.eb8: supR3HardenedWinIsDesiredRootCA: Adding 0x57ba5395b561bf00 C=BM, O=QuoVadis Limited, OU=Root Certification Authority, CN=QuoVadis Root Certification Authority
878748.eb8: supR3HardenedWinIsDesiredRootCA: Adding 0xf4fd306318ccda00 C=US, O=GeoTrust Inc., CN=GeoTrust Global CA
879748.eb8: supR3HardenedWinIsDesiredRootCA: Adding 0x83085097e9afdf00 O=Digital Signature Trust Co., CN=DST Root CA X3
880748.eb8: supR3HardenedWinIsDesiredRootCA: Adding 0xe248b7eeee4af00 C=CH, O=SwissSign AG, CN=SwissSign Gold CA - G2
881748.eb8: supR3HardenedWinIsDesiredRootCA: Adding 0x780679907625cc00 OU=GlobalSign Root CA - R3, O=GlobalSign, CN=GlobalSign
882748.eb8: supR3HardenedWinIsDesiredRootCA: Adding 0x3d98ab22bb04a300 C=IE, O=Baltimore, OU=CyberTrust, CN=Baltimore CyberTrust Root
883748.eb8: supR3HardenedWinIsDesiredRootCA: Adding 0xa0ee62086758b15d C=US, O=Equifax, OU=Equifax Secure Certificate Authority
884748.eb8: supR3HardenedWinIsDesiredRootCA: Adding 0xd944bca189a00 C=BM, O=QuoVadis Limited, CN=QuoVadis Root CA 2
885748.eb8: supR3HardenedWinIsDesiredRootCA: Adding 0x1591b8ac8dcabd00 C=CN, O=WoSign CA Limited, CN=Certification Authority of WoSign
886748.eb8: supR3HardenedWinIsDesiredRootCA: Adding 0x8ff6fc03c1edbd00 C=US, ST=Arizona, L=Scottsdale, O=Starfield Technologies, Inc., CN=Starfield Root Certificate Authority - G2
887748.eb8: supR3HardenedWinIsDesiredRootCA: Adding 0xc6fa4243b695b600 C=US, O=Entrust, Inc., OU=www.entrust.net/CPS is incorporated by reference, OU=(c) 2006 Entrust, Inc., CN=Entrust Root Certification Authority
888748.eb8: supR3HardenedWinIsDesiredRootCA: Adding 0xa3ce8d99e60eda00 C=BE, O=GlobalSign nv-sa, OU=Root CA, CN=GlobalSign Root CA
889748.eb8: supR3HardenedWinIsDesiredRootCA: Adding 0x560ad29254e89100 C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO RSA Certification Authority
890748.eb8: supR3HardenedWinIsDesiredRootCA: Adding 0xa671e9fec832b700 C=US, O=Starfield Technologies, Inc., OU=Starfield Class 2 Certification Authority
891748.eb8: supR3HardenedWinIsDesiredRootCA: Adding 0xa8de7211e13be200 C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root CA
892748.eb8: supR3HardenedWinIsDesiredRootCA: Adding 0x3178d37f87f1c400 C=CH, O=SwissSign AG, CN=SwissSign Silver CA - G2
893748.eb8: supR3HardenedWinIsDesiredRootCA: Adding 0xd45980fbf0a0ac00 C=US, O=thawte, Inc., OU=Certification Services Division, OU=(c) 2006 thawte, Inc. - For authorized use only, CN=thawte Primary Root CA
894748.eb8: supR3HardenedWinIsDesiredRootCA: Adding 0xc9edb72b684ba00 C=US, O=Entrust, Inc., OU=See www.entrust.net/legal-terms, OU=(c) 2009 Entrust, Inc. - for authorized use only, CN=Entrust Root Certification Authority - G2
895748.eb8: supR3HardenedWinIsDesiredRootCA: Adding 0xf5cd95e581a4ab00 C=US, O=SecureTrust Corporation, CN=SecureTrust CA
896748.eb8: supR3HardenedWinIsDesiredRootCA: Adding 0x298be035a30bab00 C=DE, O=Deutsche Telekom AG, OU=T-TeleSec Trust Center, CN=Deutsche Telekom Root CA 2
897748.eb8: supR3HardenedWinIsDesiredRootCA: Adding 0x802b3770cb00af00 C=EU, L=Madrid (see current address at www.camerfirma.com/address), SRN=A82743287, O=AC Camerfirma S.A., CN=Chambers of Commerce Root - 2008
898748.eb8: supR3HardenedWinIsDesiredRootCA: Adding 0x6f2ebe0e24cfa600 OU=GlobalSign Root CA - R2, O=GlobalSign, CN=GlobalSign
899748.eb8: supR3HardenedWinIsDesiredRootCA: Adding 0x14018a1bf29e595c C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification Authority
900748.eb8: supR3HardenedWinIsDesiredRootCA: Adding 0x9e5bc2d78b6a3636 C=ZA, ST=Western Cape, L=Cape Town, O=Thawte Consulting cc, OU=Certification Services Division, CN=Thawte Premium Server CA, Email=premium-server@thawte.com
901748.eb8: supR3HardenedWinIsDesiredRootCA: Adding 0x7c4fd32ec1b1ce00 C=PL, O=Unizeto Sp. z o.o., CN=Certum CA
902748.eb8: supR3HardenedWinIsDesiredRootCA: Adding 0xd4fbe673e5ccc600 C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert High Assurance EV Root CA
903748.eb8: supR3HardenedWinIsDesiredRootCA: Adding 0x73e85f1bda5faa00 C=DE, O=T-Systems Enterprise Services GmbH, OU=T-Systems Trust Center, CN=T-TeleSec GlobalRoot Class 2
904748.eb8: supR3HardenedWinIsDesiredRootCA: Adding 0xef477acf4ab2d300 C=DE, O=D-Trust GmbH, CN=D-TRUST Root Class 3 CA 2 2009
905748.eb8: supR3HardenedWinIsDesiredRootCA: Adding 0x1b8578514b74ac00 C=US, O=WFA Hotspot 2.0, CN=Hotspot 2.0 Trust Root CA - 03
906748.eb8: supR3HardenedWinIsDesiredRootCA: Adding 0xb28612a94b4dad00 O=Entrust.net, OU=www.entrust.net/CPS_2048 incorp. by ref. (limits liab.), OU=(c) 1999 Entrust.net Limited, CN=Entrust.net Certification Authority (2048)
907748.eb8: supR3HardenedWinIsDesiredRootCA: Adding 0x357a29080824af00 C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. - For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority - G5
908748.eb8: supR3HardenedWinIsDesiredRootCA: Adding 0x9b3ae4d356dfc000 C=EU, L=Madrid (see current address at www.camerfirma.com/address), SRN=A82743287, O=AC Camerfirma S.A., CN=Global Chambersign Root - 2008
909748.eb8: supR3HardenedWinIsDesiredRootCA: Adding 0x59faf1086271bf00 C=US, ST=Arizona, L=Scottsdale, O=GoDaddy.com, Inc., CN=Go Daddy Root Certificate Authority - G2
910748.eb8: supR3HardenedWinIsDesiredRootCA: Adding 0x3401b15e3761c700 C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2008 VeriSign, Inc. - For authorized use only, CN=VeriSign Universal Root Certification Authority
911748.eb8: supR3HardenedWinIsDesiredRootCA: Adding 0x7cd4ff7b15b8be00 C=US, O=GeoTrust Inc., CN=GeoTrust Primary Certification Authority
912748.eb8: supR3HardenedWinIsDesiredRootCA: Adding 0xc30e361765128000 C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority
913748.eb8: supR3HardenedWinIsDesiredRootCA: Adding 0x491857ead79dde00 C=US, O=The Go Daddy Group, Inc., OU=Go Daddy Class 2 Certification Authority
914748.eb8: supR3HardenedWinIsDesiredRootCA: Adding 0xb9ff821d139e9bf OU=GlobalSign ECC Root CA - R5, O=GlobalSign, CN=GlobalSign
915748.eb8: supR3HardenedWinIsDesiredRootCA: Adding 0x1f78fc529cbacb00 C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 1999 VeriSign, Inc. - For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority - G3
916748.eb8: supR3HardenedWinIsDesiredRootCA: Adding 0xdc1801b225aea100 C=BM, O=QuoVadis Limited, CN=QuoVadis Root CA 2 G3
917748.eb8: supR3HardenedWinIsDesiredRootCA: Adding 0xc2ba72a37dfbe300 C=PL, O=Unizeto Technologies S.A., OU=Certum Certification Authority, CN=Certum Trusted Network CA
918748.eb8: supR3HardenedWinIsDesiredRootCA: Adding 0x8043e4ce150ead00 C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Assured ID Root CA
919748.eb8: supR3HardenedWinIsDesiredRootCA: Adding 0x331d58625ee2dc00 C=US, O=GeoTrust Inc., OU=(c) 2008 GeoTrust Inc. - For authorized use only, CN=GeoTrust Primary Certification Authority - G3
920748.eb8: supR3HardenedWinIsDesiredRootCA: Adding 0xf2e6331af7b700 C=SE, O=AddTrust AB, OU=AddTrust External TTP Network, CN=AddTrust External CA Root
921748.eb8: supR3HardenedWinRetrieveTrustedRootCAs: cAdded=63
922748.eb8: SUPR3HardenedMain: Load Runtime...
923748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe32e00000 'C:\WINDOWS\system32\rsaenh.dll'
924748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
925748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp100.dll'.
926748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'rpcrt4.dll'.
927748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'ws2_32.dll'.
928748.eb8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll) WinVerifyTrust
929748.eb8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll
930748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
931748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
932748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe32e00000 'C:\WINDOWS\system32\rsaenh.dll'
933748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe33b50000 'C:\WINDOWS\System32\crypt32.dll'
934748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #26 'rpcrt4.dll'.
935748.eb8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\ws2_32.dll) WinVerifyTrust
936748.eb8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\ws2_32.dll
937748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
938748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
939748.eb8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll
940748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
941748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
942748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
943748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
944748.eb8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll
945748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe32e00000 'C:\WINDOWS\system32\rsaenh.dll'
946748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
947748.eb8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll) WinVerifyTrust
948748.eb8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll
949748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
950748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
951748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
952748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
953748.eb8: Detected WinVerifyTrust recursion: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'.
954748.eb8: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll)
955748.eb8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll
956748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe32e00000 'C:\WINDOWS\system32\rsaenh.dll'
957748.eb8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll) WinVerifyTrust
958748.eb8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000a01:<flags> [calling]
959748.eb8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll
960748.eb8: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll [avoiding WinVerifyTrust]
961748.eb8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll
962748.eb8: supR3HardenedDllNotificationCallback: load 000000005a8c0000 LB 0x000d2000 C:\Program Files\Oracle\VirtualBox\MSVCR100.dll [fFlags=0x0]
963748.eb8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll [avoiding WinVerifyTrust]
964748.eb8: supR3HardenedDllNotificationCallback: load 0000000059d40000 LB 0x00098000 C:\Program Files\Oracle\VirtualBox\MSVCP100.dll [fFlags=0x0]
965748.eb8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll
966748.eb8: supR3HardenedDllNotificationCallback: load 00007ffe35ea0000 LB 0x0006f000 C:\WINDOWS\System32\WS2_32.dll [fFlags=0x0]
967748.eb8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ws2_32.dll
968748.eb8: supR3HardenedDllNotificationCallback: load 00007ffdfe6f0000 LB 0x005cb000 C:\Program Files\Oracle\VirtualBox\VBoxRT.dll [fFlags=0x0]
969748.eb8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll
970748.eb8: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'.
971748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
972748.eb8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll
973748.eb8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
974748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdfe6f0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
975748.eb8: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'.
976748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
977748.eb8: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'.
978748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
979748.eb8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll
980748.eb8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
981748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdfe6f0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
982748.eb8: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'.
983748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
984748.eb8: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'.
985748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
986748.eb8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll
987748.eb8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
988748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdfe6f0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
989748.eb8: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'.
990748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
991748.eb8: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'.
992748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
993748.eb8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll
994748.eb8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
995748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdfe6f0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
996748.eb8: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'.
997748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
998748.eb8: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'.
999748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
1000748.eb8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll
1001748.eb8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
1002748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdfe6f0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1003748.eb8: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'.
1004748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
1005748.eb8: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'.
1006748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
1007748.eb8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll
1008748.eb8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
1009748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdfe6f0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1010748.eb8: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'.
1011748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
1012748.eb8: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'.
1013748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
1014748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdfe6f0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1015748.eb8: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'.
1016748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
1017748.eb8: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'.
1018748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
1019748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdfe6f0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1020748.eb8: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'.
1021748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
1022748.eb8: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'.
1023748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
1024748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdfe6f0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1025748.eb8: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'.
1026748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
1027748.eb8: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'.
1028748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
1029748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdfe6f0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1030748.eb8: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'.
1031748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
1032748.eb8: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'.
1033748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
1034748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdfe6f0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1035748.eb8: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'.
1036748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
1037748.eb8: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'.
1038748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
1039748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdfe6f0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1040748.eb8: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'.
1041748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
1042748.eb8: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'.
1043748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
1044748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdfe6f0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1045748.eb8: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'.
1046748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
1047748.eb8: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'.
1048748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
1049748.eb8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll
1050748.eb8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
1051748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdfe6f0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1052748.eb8: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'.
1053748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
1054748.eb8: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'.
1055748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
1056748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdfe6f0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1057748.eb8: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'.
1058748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
1059748.eb8: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'.
1060748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
1061748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdfe6f0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1062748.eb8: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'.
1063748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
1064748.eb8: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'.
1065748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
1066748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdfe6f0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1067748.eb8: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'.
1068748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
1069748.eb8: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'.
1070748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
1071748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdfe6f0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1072748.eb8: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'.
1073748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
1074748.eb8: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'.
1075748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
1076748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdfe6f0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1077748.eb8: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'.
1078748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
1079748.eb8: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'.
1080748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
1081748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdfe6f0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1082748.eb8: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'.
1083748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
1084748.eb8: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'.
1085748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
1086748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdfe6f0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1087748.eb8: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'.
1088748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
1089748.eb8: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'.
1090748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
1091748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdfe6f0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1092748.eb8: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'.
1093748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
1094748.eb8: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'.
1095748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
1096748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdfe6f0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1097748.eb8: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'.
1098748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
1099748.eb8: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'.
1100748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
1101748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdfe6f0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1102748.eb8: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'.
1103748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
1104748.eb8: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'.
1105748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
1106748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdfe6f0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1107748.eb8: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'.
1108748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
1109748.eb8: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'.
1110748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
1111748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdfe6f0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1112748.eb8: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'.
1113748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
1114748.eb8: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'.
1115748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
1116748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdfe6f0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1117748.eb8: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'.
1118748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
1119748.eb8: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'.
1120748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
1121748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdfe6f0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1122748.eb8: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'.
1123748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
1124748.eb8: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'.
1125748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
1126748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdfe6f0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1127748.eb8: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'.
1128748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
1129748.eb8: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'.
1130748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
1131748.eb8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll
1132748.eb8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
1133748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdfe6f0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1134748.eb8: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'.
1135748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
1136748.eb8: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'.
1137748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
1138748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdfe6f0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1139748.eb8: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'.
1140748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
1141748.eb8: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'.
1142748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
1143748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdfe6f0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1144748.eb8: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'.
1145748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
1146748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdfe6f0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
1147748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe32e00000 'C:\WINDOWS\system32\rsaenh.dll'
1148748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 24202) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'
1149748.eb8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\wintrust.dll
1150748.eb8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\Wintrust.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
1151748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe34970000 'C:\WINDOWS\system32\Wintrust.dll'
1152748.eb8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rsaenh.dll
1153748.eb8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
1154748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe32e00000 'C:\WINDOWS\system32\rsaenh.dll'
1155748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe33b50000 'C:\WINDOWS\System32\crypt32.dll'
1156748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe32e00000 'C:\WINDOWS\system32\rsaenh.dll'
1157748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe33b50000 'C:\WINDOWS\System32\crypt32.dll'
1158748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe33b50000 'C:\WINDOWS\system32\crypt32.dll'
1159748.eb8: SUPR3HardenedMain: Load TrustedMain...
1160748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe32e00000 'C:\WINDOWS\system32\rsaenh.dll'
1161748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'opengl32.dll'.
1162748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxglobal.dll'.
1163748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxrt.dll'.
1164748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'msvcp100.dll'.
1165748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'msvcr100.dll'.
1166748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'qt5corevbox.dll'.
1167748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'qt5guivbox.dll'.
1168748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'qt5widgetsvbox.dll'.
1169748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'qt5openglvbox.dll'.
1170748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'user32.dll'.
1171748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'ole32.dll'.
1172748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'oleaut32.dll'.
1173748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #13 'winmm.dll'.
1174748.eb8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll) WinVerifyTrust
1175748.eb8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll
1176748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
1177748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume2\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008]
1178748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe32e00000 'C:\WINDOWS\system32\rsaenh.dll'
1179748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe33b50000 'C:\WINDOWS\System32\crypt32.dll'
1180748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'winmmbase.dll'.
1181748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'msvcrt.dll'.
1182748.eb8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\winmm.dll) WinVerifyTrust
1183748.eb8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\winmm.dll
1184748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
1185748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume2\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
1186748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
1187748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
1188748.eb8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll
1189748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmmbase.dll'...
1190748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmmbase.dll' -> '\Device\HarddiskVolume2\Windows\System32\winmmbase.dll' [rcNtRedir=0xc0150008]
1191748.eb8: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\winmmbase.dll'.
1192748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
1193748.eb8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\winmmbase.dll)
1194748.eb8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\winmmbase.dll
1195748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
1196748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
1197748.eb8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll
1198748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe32e00000 'C:\WINDOWS\system32\rsaenh.dll'
1199748.eb8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\crypt32.dll
1200748.eb8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\crypt32.dll (Input=crypt32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
1201748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe33b50000 'C:\WINDOWS\System32\crypt32.dll'
1202748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcp_win.dll'.
1203748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'combase.dll'.
1204748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #23 'rpcrt4.dll'.
1205748.eb8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\oleaut32.dll) WinVerifyTrust
1206748.eb8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\oleaut32.dll
1207748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
1208748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
1209748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
1210748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
1211748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
1212748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume2\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
1213748.eb8: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\combase.dll'.
1214748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'rpcrt4.dll'.
1215748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #45 'bcryptprimitives.dll'.
1216748.eb8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\combase.dll)
1217748.eb8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\combase.dll
1218748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
1219748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
1220748.eb8: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\msvcp_win.dll'.
1221748.eb8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\msvcp_win.dll)
1222748.eb8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\msvcp_win.dll
1223748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcryptprimitives.dll'...
1224748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcryptprimitives.dll' -> '\Device\HarddiskVolume2\Windows\System32\bcryptprimitives.dll' [rcNtRedir=0xc0150008]
1225748.eb8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\bcryptprimitives.dll
1226748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
1227748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
1228748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe32e00000 'C:\WINDOWS\system32\rsaenh.dll'
1229748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe33b50000 'C:\WINDOWS\System32\crypt32.dll'
1230748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #22 'rpcrt4.dll'.
1231748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #56 'gdi32.dll'.
1232748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #57 'user32.dll'.
1233748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #58 'combase.dll'.
1234748.eb8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\ole32.dll) WinVerifyTrust
1235748.eb8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\ole32.dll
1236748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
1237748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
1238748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
1239748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume2\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
1240748.eb8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\combase.dll [lacks WinVerifyTrust]
1241748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
1242748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
1243748.eb8: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\user32.dll'.
1244748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'win32u.dll'.
1245748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #34 'gdi32.dll'.
1246748.eb8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\user32.dll)
1247748.eb8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\user32.dll
1248748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
1249748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
1250748.eb8: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\gdi32.dll'.
1251748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'win32u.dll'.
1252748.eb8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\gdi32.dll)
1253748.eb8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\gdi32.dll
1254748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
1255748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
1256748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
1257748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume2\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
1258748.eb8: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\win32u.dll'.
1259748.eb8: '\Device\HarddiskVolume2\Windows\System32\win32u.dll' has no imports
1260748.eb8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\win32u.dll)
1261748.eb8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\win32u.dll
1262748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
1263748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
1264748.eb8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
1265748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
1266748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume2\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
1267748.eb8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\win32u.dll [lacks WinVerifyTrust]
1268748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe32e00000 'C:\WINDOWS\system32\rsaenh.dll'
1269748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe33b50000 'C:\WINDOWS\System32\crypt32.dll'
1270748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'win32u.dll'.
1271748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #34 'gdi32.dll'.
1272748.eb8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\user32.dll) WinVerifyTrust
1273748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5openglvbox.dll'...
1274748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5openglvbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5openglvbox.dll' [rcNtRedir=0xc0150008]
1275748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
1276748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
1277748.eb8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
1278748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
1279748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume2\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
1280748.eb8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\win32u.dll [lacks WinVerifyTrust]
1281748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe32e00000 'C:\WINDOWS\system32\rsaenh.dll'
1282748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'qt5widgetsvbox.dll'.
1283748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'qt5guivbox.dll'.
1284748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5corevbox.dll'.
1285748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'msvcr100.dll'.
1286748.eb8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll) WinVerifyTrust
1287748.eb8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll
1288748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5widgetsvbox.dll'...
1289748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5widgetsvbox.dll' [rcNtRedir=0xc0150008]
1290748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
1291748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
1292748.eb8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll
1293748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
1294748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
1295748.eb8: Detected WinVerifyTrust recursion: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll'.
1296748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'.
1297748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'shell32.dll'.
1298748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'ole32.dll'.
1299748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'advapi32.dll'.
1300748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'ws2_32.dll'.
1301748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'mpr.dll'.
1302748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'msvcp100.dll'.
1303748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'msvcr100.dll'.
1304748.eb8: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll)
1305748.eb8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll
1306748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
1307748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
1308748.eb8: Detected WinVerifyTrust recursion: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll'.
1309748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'ole32.dll'.
1310748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'opengl32.dll'.
1311748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'gdi32.dll'.
1312748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
1313748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'qt5corevbox.dll'.
1314748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'msvcp100.dll'.
1315748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msvcr100.dll'.
1316748.eb8: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll)
1317748.eb8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll
1318748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5widgetsvbox.dll'...
1319748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5widgetsvbox.dll' [rcNtRedir=0xc0150008]
1320748.eb8: Detected WinVerifyTrust recursion: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'.
1321748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'gdi32.dll'.
1322748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'.
1323748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5guivbox.dll'.
1324748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'qt5corevbox.dll'.
1325748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'shell32.dll'.
1326748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'msvcp100.dll'.
1327748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msvcr100.dll'.
1328748.eb8: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll)
1329748.eb8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll
1330748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
1331748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
1332748.eb8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll
1333748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
1334748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
1335748.eb8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll
1336748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
1337748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume2\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
1338748.eb8: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\shell32.dll'.
1339748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #77 'user32.dll'.
1340748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #79 'gdi32.dll'.
1341748.eb8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\shell32.dll)
1342748.eb8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\shell32.dll
1343748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
1344748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
1345748.eb8: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
1346748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
1347748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
1348748.eb8: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
1349748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
1350748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
1351748.eb8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
1352748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
1353748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
1354748.eb8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
1355748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
1356748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
1357748.eb8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll
1358748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
1359748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
1360748.eb8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll
1361748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
1362748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
1363748.eb8: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
1364748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
1365748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
1366748.eb8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
1367748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
1368748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
1369748.eb8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
1370748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
1371748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume2\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008]
1372748.eb8: Detected WinVerifyTrust recursion: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume2\Windows\System32\opengl32.dll'.
1373748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
1374748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'advapi32.dll'.
1375748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
1376748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'gdi32.dll'.
1377748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'glu32.dll'.
1378748.eb8: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\opengl32.dll)
1379748.eb8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\opengl32.dll
1380748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
1381748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
1382748.eb8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ole32.dll
1383748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
1384748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
1385748.eb8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll
1386748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
1387748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
1388748.eb8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll
1389748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mpr.dll'...
1390748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'mpr.dll' -> '\Device\HarddiskVolume2\Windows\System32\mpr.dll' [rcNtRedir=0xc0150008]
1391748.eb8: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\mpr.dll'.
1392748.eb8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\mpr.dll)
1393748.eb8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\mpr.dll
1394748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
1395748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
1396748.eb8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ws2_32.dll
1397748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
1398748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
1399748.eb8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll
1400748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
1401748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
1402748.eb8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ole32.dll
1403748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
1404748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume2\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
1405748.eb8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\shell32.dll [lacks WinVerifyTrust]
1406748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
1407748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
1408748.eb8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
1409748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'glu32.dll'...
1410748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'glu32.dll' -> '\Device\HarddiskVolume2\Windows\System32\glu32.dll' [rcNtRedir=0xc0150008]
1411748.eb8: Detected WinVerifyTrust recursion: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume2\Windows\System32\glu32.dll'.
1412748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
1413748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'user32.dll'.
1414748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'opengl32.dll'.
1415748.eb8: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\glu32.dll)
1416748.eb8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\glu32.dll
1417748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
1418748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
1419748.eb8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
1420748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
1421748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
1422748.eb8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
1423748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
1424748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
1425748.eb8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll
1426748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
1427748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
1428748.eb8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll
1429748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
1430748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
1431748.eb8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
1432748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
1433748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
1434748.eb8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
1435748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
1436748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume2\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008]
1437748.eb8: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\opengl32.dll [lacks WinVerifyTrust]
1438748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
1439748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
1440748.eb8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
1441748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
1442748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
1443748.eb8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll
1444748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe32e00000 'C:\WINDOWS\system32\rsaenh.dll'
1445748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'gdi32.dll'.
1446748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'.
1447748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5guivbox.dll'.
1448748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'qt5corevbox.dll'.
1449748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'shell32.dll'.
1450748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'msvcp100.dll'.
1451748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msvcr100.dll'.
1452748.eb8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll) WinVerifyTrust
1453748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
1454748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
1455748.eb8: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [redoing WinVerifyTrust]
1456748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
1457748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
1458748.eb8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll
1459748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
1460748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
1461748.eb8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll
1462748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
1463748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume2\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
1464748.eb8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\shell32.dll [lacks WinVerifyTrust]
1465748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
1466748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
1467748.eb8: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
1468748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
1469748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
1470748.eb8: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
1471748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
1472748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
1473748.eb8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
1474748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
1475748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
1476748.eb8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
1477748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe32e00000 'C:\WINDOWS\system32\rsaenh.dll'
1478748.eb8: supR3HardenedScreenImage/Imports: 0 (was 24202) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll'
1479748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
1480748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
1481748.eb8: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [redoing WinVerifyTrust]
1482748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe32e00000 'C:\WINDOWS\system32\rsaenh.dll'
1483748.eb8: supR3HardenedScreenImage/Imports: 0 (was 24202) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll'
1484748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
1485748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
1486748.eb8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll
1487748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
1488748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
1489748.eb8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll
1490748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
1491748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
1492748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxglobal.dll'...
1493748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxglobal.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\vboxglobal.dll' [rcNtRedir=0xc0150008]
1494748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe32e00000 'C:\WINDOWS\system32\rsaenh.dll'
1495748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'vboxrt.dll'.
1496748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcr100.dll'.
1497748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5corevbox.dll'.
1498748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'qt5guivbox.dll'.
1499748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'qt5widgetsvbox.dll'.
1500748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'user32.dll'.
1501748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'advapi32.dll'.
1502748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'ole32.dll'.
1503748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'oleaut32.dll'.
1504748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'rpcrt4.dll'.
1505748.eb8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxGlobal.dll) WinVerifyTrust
1506748.eb8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxGlobal.dll
1507748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
1508748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume2\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008]
1509748.eb8: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\opengl32.dll [redoing WinVerifyTrust]
1510748.eb8: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000408 pwszName=\Device\HarddiskVolume2\Windows\System32\opengl32.dll
1511748.eb8: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000001295d20
1512748.eb8: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000001295d20
1513748.eb8: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=0837440FAE05EB650168FFA2D15E73182F6A3A26
1514748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
1515748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
1516748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
1517748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume2\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
1518748.eb8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\oleaut32.dll
1519748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
1520748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
1521748.eb8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ole32.dll
1522748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
1523748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
1524748.eb8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll
1525748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
1526748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
1527748.eb8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
1528748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5widgetsvbox.dll'...
1529748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5widgetsvbox.dll' [rcNtRedir=0xc0150008]
1530748.eb8: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [lacks WinVerifyTrust]
1531748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
1532748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
1533748.eb8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll
1534748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
1535748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
1536748.eb8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll
1537748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
1538748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
1539748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
1540748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
1541748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe32e00000 'C:\WINDOWS\system32\rsaenh.dll'
1542748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe33b50000 'C:\WINDOWS\System32\crypt32.dll'
1543748.eb8: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0212~31bf3856ad364e35~amd64~~10.0.18362.752.cat'; file='\Device\HarddiskVolume2\Windows\System32\opengl32.dll'
1544748.eb8: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
1545748.eb8: supR3HardenedScreenImage/Imports: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\opengl32.dll'
1546748.eb8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000a01:<flags> [calling]
1547748.eb8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll
1548748.eb8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\opengl32.dll
1549748.eb8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxGlobal.dll
1550748.eb8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll
1551748.eb8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll
1552748.eb8: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [avoiding WinVerifyTrust]
1553748.eb8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll
1554748.eb8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\winmm.dll
1555748.eb8: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\glu32.dll [avoiding WinVerifyTrust]
1556748.eb8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\mpr.dll [avoiding WinVerifyTrust]
1557748.eb8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\winmmbase.dll [avoiding WinVerifyTrust]
1558748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcp_win.dll'.
1559748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #22 'win32u.dll'.
1560748.eb8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\DXCore.dll)
1561748.eb8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\DXCore.dll
1562748.eb8: supR3HardenedDllNotificationCallback: load 00007ffe34c40000 LB 0x00021000 C:\WINDOWS\System32\win32u.dll [fFlags=0x0]
1563748.eb8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\win32u.dll [avoiding WinVerifyTrust]
1564748.eb8: supR3HardenedDllNotificationCallback: load 00007ffe33ca0000 LB 0x0009e000 C:\WINDOWS\System32\msvcp_win.dll [fFlags=0x0]
1565748.eb8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcp_win.dll [avoiding WinVerifyTrust]
1566748.eb8: supR3HardenedDllNotificationCallback: load 00007ffe349d0000 LB 0x00194000 C:\WINDOWS\System32\gdi32full.dll [fFlags=0x0]
1567748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcp_win.dll'.
1568748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #33 'gdi32.dll'.
1569748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #35 'user32.dll'.
1570748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #36 'win32u.dll'.
1571748.eb8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\gdi32full.dll)
1572748.eb8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\gdi32full.dll
1573748.eb8: supR3HardenedDllNotificationCallback: load 00007ffe361c0000 LB 0x00026000 C:\WINDOWS\System32\GDI32.dll [fFlags=0x0]
1574748.eb8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [avoiding WinVerifyTrust]
1575748.eb8: supR3HardenedDllNotificationCallback: load 00007ffe34fd0000 LB 0x00194000 C:\WINDOWS\System32\USER32.dll [fFlags=0x0]
1576748.eb8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll [avoiding WinVerifyTrust]
1577748.eb8: supR3HardenedDllNotificationCallback: load 00007ffe35720000 LB 0x00336000 C:\WINDOWS\System32\combase.dll [fFlags=0x0]
1578748.eb8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\combase.dll [avoiding WinVerifyTrust]
1579748.eb8: supR3HardenedDllNotificationCallback: load 00007ffe33d40000 LB 0x0004a000 C:\WINDOWS\System32\cfgmgr32.dll [fFlags=0x0]
1580748.eb8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\cfgmgr32.dll)
1581748.eb8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\cfgmgr32.dll
1582748.eb8: supR3HardenedDllNotificationCallback: load 00007ffe326f0000 LB 0x00020000 C:\WINDOWS\SYSTEM32\dxcore.dll [fFlags=0x0]
1583748.eb8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\DXCore.dll [avoiding WinVerifyTrust]
1584748.eb8: supR3HardenedDllNotificationCallback: load 00007ffe115e0000 LB 0x0002c000 C:\WINDOWS\SYSTEM32\GLU32.dll [fFlags=0x0]
1585748.eb8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\glu32.dll [avoiding WinVerifyTrust]
1586748.eb8: supR3HardenedDllNotificationCallback: load 00007ffe11610000 LB 0x00156000 C:\WINDOWS\SYSTEM32\OPENGL32.dll [fFlags=0x0]
1587748.eb8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\opengl32.dll
1588748.eb8: supR3HardenedDllNotificationCallback: load 00007ffe35b00000 LB 0x000a9000 C:\WINDOWS\System32\shcore.dll [fFlags=0x0]
1589748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
1590748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #36 'rpcrt4.dll'.
1591748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #43 'combase.dll'.
1592748.eb8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\SHCore.dll)
1593748.eb8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\SHCore.dll
1594748.eb8: supR3HardenedDllNotificationCallback: load 00007ffe33a80000 LB 0x00010000 C:\WINDOWS\System32\UMPDC.dll [fFlags=0x0]
1595748.eb8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\umpdc.dll)
1596748.eb8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\umpdc.dll
1597748.eb8: supR3HardenedDllNotificationCallback: load 00007ffe33ad0000 LB 0x0004a000 C:\WINDOWS\System32\powrprof.dll [fFlags=0x0]
1598748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'rpcrt4.dll'.
1599748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #19 'umpdc.dll'.
1600748.eb8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\powrprof.dll)
1601748.eb8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\powrprof.dll
1602748.eb8: supR3HardenedDllNotificationCallback: load 00007ffe36b00000 LB 0x00052000 C:\WINDOWS\System32\shlwapi.dll [fFlags=0x0]
1603748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcrt.dll'.
1604748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #44 'gdi32.dll'.
1605748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #45 'user32.dll'.
1606748.eb8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\shlwapi.dll)
1607748.eb8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\shlwapi.dll
1608748.eb8: supR3HardenedDllNotificationCallback: load 00007ffe33ab0000 LB 0x00011000 C:\WINDOWS\System32\kernel.appcore.dll [fFlags=0x0]
1609748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'msvcrt.dll'.
1610748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'rpcrt4.dll'.
1611748.eb8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\kernel.appcore.dll)
1612748.eb8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\kernel.appcore.dll
1613748.eb8: supR3HardenedDllNotificationCallback: load 00007ffe33e10000 LB 0x00780000 C:\WINDOWS\System32\windows.storage.dll [fFlags=0x0]
1614748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #31 'combase.dll'.
1615748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #32 'msvcp_win.dll'.
1616748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #39 'rpcrt4.dll'.
1617748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #56 'profapi.dll'.
1618748.eb8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\windows.storage.dll)
1619748.eb8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\windows.storage.dll
1620748.eb8: supR3HardenedDllNotificationCallback: load 00007ffe362d0000 LB 0x006e5000 C:\WINDOWS\System32\SHELL32.dll [fFlags=0x0]
1621748.eb8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\shell32.dll [avoiding WinVerifyTrust]
1622748.eb8: supR3HardenedDllNotificationCallback: load 00007ffe34d30000 LB 0x00157000 C:\WINDOWS\System32\ole32.dll [fFlags=0x0]
1623748.eb8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ole32.dll
1624748.eb8: supR3HardenedDllNotificationCallback: load 00007ffe28780000 LB 0x0001b000 C:\WINDOWS\SYSTEM32\MPR.dll [fFlags=0x0]
1625748.eb8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\mpr.dll [avoiding WinVerifyTrust]
1626748.eb8: supR3HardenedDllNotificationCallback: load 000000005a350000 LB 0x00565000 C:\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [fFlags=0x0]
1627748.eb8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll
1628748.eb8: supR3HardenedDllNotificationCallback: load 00007ffdfe0f0000 LB 0x005f7000 C:\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [fFlags=0x0]
1629748.eb8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll
1630748.eb8: supR3HardenedDllNotificationCallback: load 0000000059de0000 LB 0x00561000 C:\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [fFlags=0x0]
1631748.eb8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [avoiding WinVerifyTrust]
1632748.eb8: supR3HardenedDllNotificationCallback: load 00007ffe360e0000 LB 0x000c4000 C:\WINDOWS\System32\OLEAUT32.dll [fFlags=0x0]
1633748.eb8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\oleaut32.dll
1634748.eb8: supR3HardenedDllNotificationCallback: load 00007ffdf7d60000 LB 0x02388000 C:\Program Files\Oracle\VirtualBox\VBoxGlobal.dll [fFlags=0x0]
1635748.eb8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxGlobal.dll
1636748.eb8: supR3HardenedDllNotificationCallback: load 0000000059ce0000 LB 0x00054000 C:\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll [fFlags=0x0]
1637748.eb8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll
1638748.eb8: supR3HardenedDllNotificationCallback: load 00007ffe314b0000 LB 0x0002d000 C:\WINDOWS\SYSTEM32\WINMMBASE.dll [fFlags=0x0]
1639748.eb8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\winmmbase.dll [avoiding WinVerifyTrust]
1640748.eb8: supR3HardenedDllNotificationCallback: load 00007ffe314e0000 LB 0x00024000 C:\WINDOWS\SYSTEM32\WINMM.dll [fFlags=0x0]
1641748.eb8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\winmm.dll
1642748.eb8: supR3HardenedDllNotificationCallback: load 00007ffdf6b70000 LB 0x00189000 C:\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll [fFlags=0x0]
1643748.eb8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll
1644748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\windows.storage.dll'.
1645748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\windows.storage.dll' [rescheduled]
1646748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\kernel.appcore.dll'.
1647748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\kernel.appcore.dll' [rescheduled]
1648748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\shlwapi.dll'.
1649748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\shlwapi.dll' [rescheduled]
1650748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\powrprof.dll'.
1651748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\powrprof.dll' [rescheduled]
1652748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\umpdc.dll'.
1653748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\umpdc.dll' [rescheduled]
1654748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\SHCore.dll'.
1655748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\SHCore.dll' [rescheduled]
1656748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\cfgmgr32.dll'.
1657748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\cfgmgr32.dll' [rescheduled]
1658748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\gdi32full.dll'.
1659748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\gdi32full.dll' [rescheduled]
1660748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\DXCore.dll'.
1661748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\DXCore.dll' [rescheduled]
1662748.eb8: Detected loader lock ownership: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume2\Windows\System32\glu32.dll'.
1663748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 22900 (was 22900) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\glu32.dll' [rescheduled]
1664748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\mpr.dll'.
1665748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\mpr.dll' [rescheduled]
1666748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\shell32.dll'.
1667748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\shell32.dll' [rescheduled]
1668748.eb8: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'.
1669748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll' [rescheduled]
1670748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\win32u.dll'.
1671748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\win32u.dll' [rescheduled]
1672748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\gdi32.dll'.
1673748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rescheduled]
1674748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\user32.dll'.
1675748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rescheduled]
1676748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\msvcp_win.dll'.
1677748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\msvcp_win.dll' [rescheduled]
1678748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\combase.dll'.
1679748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\combase.dll' [rescheduled]
1680748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\winmmbase.dll'.
1681748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\winmmbase.dll' [rescheduled]
1682748.eb8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\kernel32.dll
1683748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'profapi.dll'...
1684748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'profapi.dll' -> '\Device\HarddiskVolume2\Windows\System32\profapi.dll' [rcNtRedir=0xc0150008]
1685748.eb8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\profapi.dll
1686748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
1687748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
1688748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
1689748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
1690748.eb8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcp_win.dll [redoing WinVerifyTrust]
1691748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\msvcp_win.dll'.
1692748.eb8: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume2\Windows\System32\msvcp_win.dll
1693748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
1694748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume2\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
1695748.eb8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\combase.dll [redoing WinVerifyTrust]
1696748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\combase.dll'.
1697748.eb8: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume2\Windows\System32\combase.dll
1698748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
1699748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
1700748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
1701748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
1702748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
1703748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
1704748.eb8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll [redoing WinVerifyTrust]
1705748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\user32.dll'.
1706748.eb8: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume2\Windows\System32\user32.dll
1707748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
1708748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
1709748.eb8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [redoing WinVerifyTrust]
1710748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\gdi32.dll'.
1711748.eb8: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume2\Windows\System32\gdi32.dll
1712748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
1713748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
1714748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'umpdc.dll'...
1715748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'umpdc.dll' -> '\Device\HarddiskVolume2\Windows\System32\umpdc.dll' [rcNtRedir=0xc0150008]
1716748.eb8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\umpdc.dll [redoing WinVerifyTrust]
1717748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\umpdc.dll'.
1718748.eb8: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume2\Windows\System32\umpdc.dll
1719748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
1720748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
1721748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
1722748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume2\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
1723748.eb8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\combase.dll [redoing WinVerifyTrust]
1724748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\combase.dll'.
1725748.eb8: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume2\Windows\System32\combase.dll
1726748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
1727748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
1728748.eb8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll
1729748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
1730748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
1731748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
1732748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume2\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
1733748.eb8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\win32u.dll [redoing WinVerifyTrust]
1734748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\win32u.dll'.
1735748.eb8: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume2\Windows\System32\win32u.dll
1736748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
1737748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
1738748.eb8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll [redoing WinVerifyTrust]
1739748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\user32.dll'.
1740748.eb8: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume2\Windows\System32\user32.dll
1741748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
1742748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
1743748.eb8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [redoing WinVerifyTrust]
1744748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\gdi32.dll'.
1745748.eb8: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume2\Windows\System32\gdi32.dll
1746748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
1747748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
1748748.eb8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcp_win.dll [redoing WinVerifyTrust]
1749748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\msvcp_win.dll'.
1750748.eb8: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume2\Windows\System32\msvcp_win.dll
1751748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
1752748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume2\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
1753748.eb8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\win32u.dll [redoing WinVerifyTrust]
1754748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\win32u.dll'.
1755748.eb8: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume2\Windows\System32\win32u.dll
1756748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
1757748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
1758748.eb8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcp_win.dll [redoing WinVerifyTrust]
1759748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\msvcp_win.dll'.
1760748.eb8: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume2\Windows\System32\msvcp_win.dll
1761748.eb8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\kernel32.dll (Input=kernel32, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
1762748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe34c70000 'C:\WINDOWS\System32\kernel32.dll'
1763748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\windows.storage.dll'.
1764748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\windows.storage.dll' [rescheduled]
1765748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\kernel.appcore.dll'.
1766748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\kernel.appcore.dll' [rescheduled]
1767748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\shlwapi.dll'.
1768748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\shlwapi.dll' [rescheduled]
1769748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\powrprof.dll'.
1770748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\powrprof.dll' [rescheduled]
1771748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\umpdc.dll'.
1772748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\umpdc.dll' [rescheduled]
1773748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\SHCore.dll'.
1774748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\SHCore.dll' [rescheduled]
1775748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\cfgmgr32.dll'.
1776748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\cfgmgr32.dll' [rescheduled]
1777748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\gdi32full.dll'.
1778748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\gdi32full.dll' [rescheduled]
1779748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\DXCore.dll'.
1780748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\DXCore.dll' [rescheduled]
1781748.eb8: Detected loader lock ownership: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume2\Windows\System32\glu32.dll'.
1782748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 22900 (was 22900) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\glu32.dll' [rescheduled]
1783748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\mpr.dll'.
1784748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\mpr.dll' [rescheduled]
1785748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\shell32.dll'.
1786748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\shell32.dll' [rescheduled]
1787748.eb8: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'.
1788748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll' [rescheduled]
1789748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\win32u.dll'.
1790748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\win32u.dll' [rescheduled]
1791748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\gdi32.dll'.
1792748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rescheduled]
1793748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\user32.dll'.
1794748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rescheduled]
1795748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\msvcp_win.dll'.
1796748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\msvcp_win.dll' [rescheduled]
1797748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\combase.dll'.
1798748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\combase.dll' [rescheduled]
1799748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\winmmbase.dll'.
1800748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\winmmbase.dll' [rescheduled]
1801748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\windows.storage.dll'.
1802748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\windows.storage.dll' [rescheduled]
1803748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\kernel.appcore.dll'.
1804748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\kernel.appcore.dll' [rescheduled]
1805748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\shlwapi.dll'.
1806748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\shlwapi.dll' [rescheduled]
1807748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\powrprof.dll'.
1808748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\powrprof.dll' [rescheduled]
1809748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\umpdc.dll'.
1810748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\umpdc.dll' [rescheduled]
1811748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\SHCore.dll'.
1812748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\SHCore.dll' [rescheduled]
1813748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\cfgmgr32.dll'.
1814748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\cfgmgr32.dll' [rescheduled]
1815748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\gdi32full.dll'.
1816748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\gdi32full.dll' [rescheduled]
1817748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\DXCore.dll'.
1818748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\DXCore.dll' [rescheduled]
1819748.eb8: Detected loader lock ownership: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume2\Windows\System32\glu32.dll'.
1820748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 22900 (was 22900) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\glu32.dll' [rescheduled]
1821748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\mpr.dll'.
1822748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\mpr.dll' [rescheduled]
1823748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\shell32.dll'.
1824748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\shell32.dll' [rescheduled]
1825748.eb8: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'.
1826748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll' [rescheduled]
1827748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\win32u.dll'.
1828748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\win32u.dll' [rescheduled]
1829748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\gdi32.dll'.
1830748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rescheduled]
1831748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\user32.dll'.
1832748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rescheduled]
1833748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\msvcp_win.dll'.
1834748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\msvcp_win.dll' [rescheduled]
1835748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\combase.dll'.
1836748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\combase.dll' [rescheduled]
1837748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\winmmbase.dll'.
1838748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\winmmbase.dll' [rescheduled]
1839748.eb8: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-string-l1-1-0) -> 0x0, fPresent=1
1840748.eb8: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-string-l1-1-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
1841748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe346c0000 'api-ms-win-core-string-l1-1-0'
1842748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\windows.storage.dll'.
1843748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\windows.storage.dll' [rescheduled]
1844748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\kernel.appcore.dll'.
1845748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\kernel.appcore.dll' [rescheduled]
1846748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\shlwapi.dll'.
1847748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\shlwapi.dll' [rescheduled]
1848748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\powrprof.dll'.
1849748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\powrprof.dll' [rescheduled]
1850748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\umpdc.dll'.
1851748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\umpdc.dll' [rescheduled]
1852748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\SHCore.dll'.
1853748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\SHCore.dll' [rescheduled]
1854748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\cfgmgr32.dll'.
1855748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\cfgmgr32.dll' [rescheduled]
1856748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\gdi32full.dll'.
1857748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\gdi32full.dll' [rescheduled]
1858748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\DXCore.dll'.
1859748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\DXCore.dll' [rescheduled]
1860748.eb8: Detected loader lock ownership: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume2\Windows\System32\glu32.dll'.
1861748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 22900 (was 22900) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\glu32.dll' [rescheduled]
1862748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\mpr.dll'.
1863748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\mpr.dll' [rescheduled]
1864748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\shell32.dll'.
1865748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\shell32.dll' [rescheduled]
1866748.eb8: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'.
1867748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll' [rescheduled]
1868748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\win32u.dll'.
1869748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\win32u.dll' [rescheduled]
1870748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\gdi32.dll'.
1871748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rescheduled]
1872748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\user32.dll'.
1873748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rescheduled]
1874748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\msvcp_win.dll'.
1875748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\msvcp_win.dll' [rescheduled]
1876748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\combase.dll'.
1877748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\combase.dll' [rescheduled]
1878748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\winmmbase.dll'.
1879748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\winmmbase.dll' [rescheduled]
1880748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\windows.storage.dll'.
1881748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\windows.storage.dll' [rescheduled]
1882748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\kernel.appcore.dll'.
1883748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\kernel.appcore.dll' [rescheduled]
1884748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\shlwapi.dll'.
1885748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\shlwapi.dll' [rescheduled]
1886748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\powrprof.dll'.
1887748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\powrprof.dll' [rescheduled]
1888748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\umpdc.dll'.
1889748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\umpdc.dll' [rescheduled]
1890748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\SHCore.dll'.
1891748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\SHCore.dll' [rescheduled]
1892748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\cfgmgr32.dll'.
1893748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\cfgmgr32.dll' [rescheduled]
1894748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\gdi32full.dll'.
1895748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\gdi32full.dll' [rescheduled]
1896748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\DXCore.dll'.
1897748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\DXCore.dll' [rescheduled]
1898748.eb8: Detected loader lock ownership: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume2\Windows\System32\glu32.dll'.
1899748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 22900 (was 22900) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\glu32.dll' [rescheduled]
1900748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\mpr.dll'.
1901748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\mpr.dll' [rescheduled]
1902748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\shell32.dll'.
1903748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\shell32.dll' [rescheduled]
1904748.eb8: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'.
1905748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll' [rescheduled]
1906748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\win32u.dll'.
1907748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\win32u.dll' [rescheduled]
1908748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\gdi32.dll'.
1909748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rescheduled]
1910748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\user32.dll'.
1911748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rescheduled]
1912748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\msvcp_win.dll'.
1913748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\msvcp_win.dll' [rescheduled]
1914748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\combase.dll'.
1915748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\combase.dll' [rescheduled]
1916748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\winmmbase.dll'.
1917748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\winmmbase.dll' [rescheduled]
1918748.eb8: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-datetime-l1-1-1) -> 0x0, fPresent=1
1919748.eb8: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-datetime-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
1920748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe346c0000 'api-ms-win-core-datetime-l1-1-1'
1921748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\windows.storage.dll'.
1922748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\windows.storage.dll' [rescheduled]
1923748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\kernel.appcore.dll'.
1924748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\kernel.appcore.dll' [rescheduled]
1925748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\shlwapi.dll'.
1926748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\shlwapi.dll' [rescheduled]
1927748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\powrprof.dll'.
1928748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\powrprof.dll' [rescheduled]
1929748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\umpdc.dll'.
1930748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\umpdc.dll' [rescheduled]
1931748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\SHCore.dll'.
1932748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\SHCore.dll' [rescheduled]
1933748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\cfgmgr32.dll'.
1934748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\cfgmgr32.dll' [rescheduled]
1935748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\gdi32full.dll'.
1936748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\gdi32full.dll' [rescheduled]
1937748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\DXCore.dll'.
1938748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\DXCore.dll' [rescheduled]
1939748.eb8: Detected loader lock ownership: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume2\Windows\System32\glu32.dll'.
1940748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 22900 (was 22900) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\glu32.dll' [rescheduled]
1941748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\mpr.dll'.
1942748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\mpr.dll' [rescheduled]
1943748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\shell32.dll'.
1944748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\shell32.dll' [rescheduled]
1945748.eb8: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'.
1946748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll' [rescheduled]
1947748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\win32u.dll'.
1948748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\win32u.dll' [rescheduled]
1949748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\gdi32.dll'.
1950748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rescheduled]
1951748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\user32.dll'.
1952748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rescheduled]
1953748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\msvcp_win.dll'.
1954748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\msvcp_win.dll' [rescheduled]
1955748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\combase.dll'.
1956748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\combase.dll' [rescheduled]
1957748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\winmmbase.dll'.
1958748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\winmmbase.dll' [rescheduled]
1959748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\windows.storage.dll'.
1960748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\windows.storage.dll' [rescheduled]
1961748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\kernel.appcore.dll'.
1962748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\kernel.appcore.dll' [rescheduled]
1963748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\shlwapi.dll'.
1964748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\shlwapi.dll' [rescheduled]
1965748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\powrprof.dll'.
1966748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\powrprof.dll' [rescheduled]
1967748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\umpdc.dll'.
1968748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\umpdc.dll' [rescheduled]
1969748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\SHCore.dll'.
1970748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\SHCore.dll' [rescheduled]
1971748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\cfgmgr32.dll'.
1972748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\cfgmgr32.dll' [rescheduled]
1973748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\gdi32full.dll'.
1974748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\gdi32full.dll' [rescheduled]
1975748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\DXCore.dll'.
1976748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\DXCore.dll' [rescheduled]
1977748.eb8: Detected loader lock ownership: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume2\Windows\System32\glu32.dll'.
1978748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 22900 (was 22900) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\glu32.dll' [rescheduled]
1979748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\mpr.dll'.
1980748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\mpr.dll' [rescheduled]
1981748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\shell32.dll'.
1982748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\shell32.dll' [rescheduled]
1983748.eb8: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'.
1984748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll' [rescheduled]
1985748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\win32u.dll'.
1986748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\win32u.dll' [rescheduled]
1987748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\gdi32.dll'.
1988748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rescheduled]
1989748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\user32.dll'.
1990748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rescheduled]
1991748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\msvcp_win.dll'.
1992748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\msvcp_win.dll' [rescheduled]
1993748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\combase.dll'.
1994748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\combase.dll' [rescheduled]
1995748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\winmmbase.dll'.
1996748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\winmmbase.dll' [rescheduled]
1997748.eb8: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-localization-obsolete-l1-2-0) -> 0x0, fPresent=1
1998748.eb8: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-obsolete-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
1999748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe346c0000 'api-ms-win-core-localization-obsolete-l1-2-0'
2000748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\windows.storage.dll'.
2001748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\windows.storage.dll' [rescheduled]
2002748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\kernel.appcore.dll'.
2003748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\kernel.appcore.dll' [rescheduled]
2004748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\shlwapi.dll'.
2005748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\shlwapi.dll' [rescheduled]
2006748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\powrprof.dll'.
2007748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\powrprof.dll' [rescheduled]
2008748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\umpdc.dll'.
2009748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\umpdc.dll' [rescheduled]
2010748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\SHCore.dll'.
2011748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\SHCore.dll' [rescheduled]
2012748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\cfgmgr32.dll'.
2013748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\cfgmgr32.dll' [rescheduled]
2014748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\gdi32full.dll'.
2015748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\gdi32full.dll' [rescheduled]
2016748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\DXCore.dll'.
2017748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\DXCore.dll' [rescheduled]
2018748.eb8: Detected loader lock ownership: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume2\Windows\System32\glu32.dll'.
2019748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 22900 (was 22900) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\glu32.dll' [rescheduled]
2020748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\mpr.dll'.
2021748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\mpr.dll' [rescheduled]
2022748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\shell32.dll'.
2023748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\shell32.dll' [rescheduled]
2024748.eb8: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'.
2025748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll' [rescheduled]
2026748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\win32u.dll'.
2027748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\win32u.dll' [rescheduled]
2028748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\gdi32.dll'.
2029748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rescheduled]
2030748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\user32.dll'.
2031748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rescheduled]
2032748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\msvcp_win.dll'.
2033748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\msvcp_win.dll' [rescheduled]
2034748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\combase.dll'.
2035748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\combase.dll' [rescheduled]
2036748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\winmmbase.dll'.
2037748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\winmmbase.dll' [rescheduled]
2038748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\windows.storage.dll'.
2039748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\windows.storage.dll' [rescheduled]
2040748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\kernel.appcore.dll'.
2041748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\kernel.appcore.dll' [rescheduled]
2042748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\shlwapi.dll'.
2043748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\shlwapi.dll' [rescheduled]
2044748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\powrprof.dll'.
2045748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\powrprof.dll' [rescheduled]
2046748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\umpdc.dll'.
2047748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\umpdc.dll' [rescheduled]
2048748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\SHCore.dll'.
2049748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\SHCore.dll' [rescheduled]
2050748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\cfgmgr32.dll'.
2051748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\cfgmgr32.dll' [rescheduled]
2052748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\gdi32full.dll'.
2053748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\gdi32full.dll' [rescheduled]
2054748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\DXCore.dll'.
2055748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\DXCore.dll' [rescheduled]
2056748.eb8: Detected loader lock ownership: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume2\Windows\System32\glu32.dll'.
2057748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 22900 (was 22900) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\glu32.dll' [rescheduled]
2058748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\mpr.dll'.
2059748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\mpr.dll' [rescheduled]
2060748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\shell32.dll'.
2061748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\shell32.dll' [rescheduled]
2062748.eb8: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'.
2063748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll' [rescheduled]
2064748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\win32u.dll'.
2065748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\win32u.dll' [rescheduled]
2066748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\gdi32.dll'.
2067748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rescheduled]
2068748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\user32.dll'.
2069748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rescheduled]
2070748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\msvcp_win.dll'.
2071748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\msvcp_win.dll' [rescheduled]
2072748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\combase.dll'.
2073748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\combase.dll' [rescheduled]
2074748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\winmmbase.dll'.
2075748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\winmmbase.dll' [rescheduled]
2076748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\imm32.dll'.
2077748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'user32.dll'.
2078748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #25 'win32u.dll'.
2079748.eb8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\imm32.dll)
2080748.eb8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\imm32.dll
2081748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
2082748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume2\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
2083748.eb8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\win32u.dll [redoing WinVerifyTrust]
2084748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\win32u.dll'.
2085748.eb8: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume2\Windows\System32\win32u.dll
2086748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
2087748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
2088748.eb8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll [redoing WinVerifyTrust]
2089748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\user32.dll'.
2090748.eb8: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume2\Windows\System32\user32.dll
2091748.eb8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\IMM32.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
2092748.eb8: supR3HardenedDllNotificationCallback: load 00007ffe35ad0000 LB 0x0002e000 C:\WINDOWS\System32\IMM32.DLL [fFlags=0x0]
2093748.eb8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\imm32.dll [avoiding WinVerifyTrust]
2094748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe35ad0000 'C:\WINDOWS\system32\IMM32.DLL'
2095748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\imm32.dll'.
2096748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\imm32.dll' [rescheduled]
2097748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\windows.storage.dll'.
2098748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\windows.storage.dll' [rescheduled]
2099748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\kernel.appcore.dll'.
2100748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\kernel.appcore.dll' [rescheduled]
2101748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\shlwapi.dll'.
2102748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\shlwapi.dll' [rescheduled]
2103748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\powrprof.dll'.
2104748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\powrprof.dll' [rescheduled]
2105748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\umpdc.dll'.
2106748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\umpdc.dll' [rescheduled]
2107748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\SHCore.dll'.
2108748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\SHCore.dll' [rescheduled]
2109748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\cfgmgr32.dll'.
2110748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\cfgmgr32.dll' [rescheduled]
2111748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\gdi32full.dll'.
2112748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\gdi32full.dll' [rescheduled]
2113748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\DXCore.dll'.
2114748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\DXCore.dll' [rescheduled]
2115748.eb8: Detected loader lock ownership: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume2\Windows\System32\glu32.dll'.
2116748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 22900 (was 22900) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\glu32.dll' [rescheduled]
2117748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\mpr.dll'.
2118748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\mpr.dll' [rescheduled]
2119748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\shell32.dll'.
2120748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\shell32.dll' [rescheduled]
2121748.eb8: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'.
2122748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll' [rescheduled]
2123748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\win32u.dll'.
2124748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\win32u.dll' [rescheduled]
2125748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\gdi32.dll'.
2126748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rescheduled]
2127748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\user32.dll'.
2128748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rescheduled]
2129748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\msvcp_win.dll'.
2130748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\msvcp_win.dll' [rescheduled]
2131748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\combase.dll'.
2132748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\combase.dll' [rescheduled]
2133748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\winmmbase.dll'.
2134748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\winmmbase.dll' [rescheduled]
2135748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\imm32.dll'.
2136748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\imm32.dll' [rescheduled]
2137748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\windows.storage.dll'.
2138748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\windows.storage.dll' [rescheduled]
2139748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\kernel.appcore.dll'.
2140748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\kernel.appcore.dll' [rescheduled]
2141748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\shlwapi.dll'.
2142748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\shlwapi.dll' [rescheduled]
2143748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\powrprof.dll'.
2144748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\powrprof.dll' [rescheduled]
2145748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\umpdc.dll'.
2146748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\umpdc.dll' [rescheduled]
2147748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\SHCore.dll'.
2148748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\SHCore.dll' [rescheduled]
2149748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\cfgmgr32.dll'.
2150748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\cfgmgr32.dll' [rescheduled]
2151748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\gdi32full.dll'.
2152748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\gdi32full.dll' [rescheduled]
2153748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\DXCore.dll'.
2154748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\DXCore.dll' [rescheduled]
2155748.eb8: Detected loader lock ownership: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume2\Windows\System32\glu32.dll'.
2156748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 22900 (was 22900) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\glu32.dll' [rescheduled]
2157748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\mpr.dll'.
2158748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\mpr.dll' [rescheduled]
2159748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\shell32.dll'.
2160748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\shell32.dll' [rescheduled]
2161748.eb8: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'.
2162748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll' [rescheduled]
2163748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\win32u.dll'.
2164748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\win32u.dll' [rescheduled]
2165748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\gdi32.dll'.
2166748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rescheduled]
2167748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\user32.dll'.
2168748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rescheduled]
2169748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\msvcp_win.dll'.
2170748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\msvcp_win.dll' [rescheduled]
2171748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\combase.dll'.
2172748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\combase.dll' [rescheduled]
2173748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\winmmbase.dll'.
2174748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\winmmbase.dll' [rescheduled]
2175748.eb8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll
2176748.eb8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\ADVAPI32.DLL (Input=ADVAPI32.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
2177748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe36030000 'C:\WINDOWS\System32\ADVAPI32.DLL'
2178748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\imm32.dll'.
2179748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\imm32.dll' [rescheduled]
2180748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\windows.storage.dll'.
2181748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\windows.storage.dll' [rescheduled]
2182748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\kernel.appcore.dll'.
2183748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\kernel.appcore.dll' [rescheduled]
2184748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\shlwapi.dll'.
2185748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\shlwapi.dll' [rescheduled]
2186748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\powrprof.dll'.
2187748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\powrprof.dll' [rescheduled]
2188748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\umpdc.dll'.
2189748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\umpdc.dll' [rescheduled]
2190748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\SHCore.dll'.
2191748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\SHCore.dll' [rescheduled]
2192748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\cfgmgr32.dll'.
2193748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\cfgmgr32.dll' [rescheduled]
2194748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\gdi32full.dll'.
2195748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\gdi32full.dll' [rescheduled]
2196748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\DXCore.dll'.
2197748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\DXCore.dll' [rescheduled]
2198748.eb8: Detected loader lock ownership: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume2\Windows\System32\glu32.dll'.
2199748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 22900 (was 22900) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\glu32.dll' [rescheduled]
2200748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\mpr.dll'.
2201748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\mpr.dll' [rescheduled]
2202748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\shell32.dll'.
2203748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\shell32.dll' [rescheduled]
2204748.eb8: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'.
2205748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll' [rescheduled]
2206748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\win32u.dll'.
2207748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\win32u.dll' [rescheduled]
2208748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\gdi32.dll'.
2209748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rescheduled]
2210748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\user32.dll'.
2211748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rescheduled]
2212748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\msvcp_win.dll'.
2213748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\msvcp_win.dll' [rescheduled]
2214748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\combase.dll'.
2215748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\combase.dll' [rescheduled]
2216748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\winmmbase.dll'.
2217748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\winmmbase.dll' [rescheduled]
2218748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdf6b70000 'C:\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll'
2219748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe32e00000 'C:\WINDOWS\system32\rsaenh.dll'
2220748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe33b50000 'C:\WINDOWS\System32\crypt32.dll'
2221748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\imm32.dll'
2222748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe32e00000 'C:\WINDOWS\system32\rsaenh.dll'
2223748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe33b50000 'C:\WINDOWS\System32\crypt32.dll'
2224748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\windows.storage.dll'
2225748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe32e00000 'C:\WINDOWS\system32\rsaenh.dll'
2226748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe33b50000 'C:\WINDOWS\System32\crypt32.dll'
2227748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\kernel.appcore.dll'
2228748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe32e00000 'C:\WINDOWS\system32\rsaenh.dll'
2229748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe33b50000 'C:\WINDOWS\System32\crypt32.dll'
2230748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\shlwapi.dll'
2231748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe32e00000 'C:\WINDOWS\system32\rsaenh.dll'
2232748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe33b50000 'C:\WINDOWS\System32\crypt32.dll'
2233748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\powrprof.dll'
2234748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe32e00000 'C:\WINDOWS\system32\rsaenh.dll'
2235748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe33b50000 'C:\WINDOWS\System32\crypt32.dll'
2236748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\umpdc.dll'
2237748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe32e00000 'C:\WINDOWS\system32\rsaenh.dll'
2238748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe33b50000 'C:\WINDOWS\System32\crypt32.dll'
2239748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\SHCore.dll'
2240748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe32e00000 'C:\WINDOWS\system32\rsaenh.dll'
2241748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe33b50000 'C:\WINDOWS\System32\crypt32.dll'
2242748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\cfgmgr32.dll'
2243748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe32e00000 'C:\WINDOWS\system32\rsaenh.dll'
2244748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe33b50000 'C:\WINDOWS\System32\crypt32.dll'
2245748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\gdi32full.dll'
2246748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe32e00000 'C:\WINDOWS\system32\rsaenh.dll'
2247748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe33b50000 'C:\WINDOWS\System32\crypt32.dll'
2248748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\DXCore.dll'
2249748.eb8: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000514 pwszName=\Device\HarddiskVolume2\Windows\System32\glu32.dll
2250748.eb8: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000001295d20
2251748.eb8: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000001295d20
2252748.eb8: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=F356C86D0A2DBA0570D09B39D4AF818DFCB17010
2253748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe32e00000 'C:\WINDOWS\system32\rsaenh.dll'
2254748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe33b50000 'C:\WINDOWS\System32\crypt32.dll'
2255748.eb8: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0212~31bf3856ad364e35~amd64~~10.0.18362.752.cat'; file='\Device\HarddiskVolume2\Windows\System32\glu32.dll'
2256748.eb8: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
2257748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\glu32.dll'
2258748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe32e00000 'C:\WINDOWS\system32\rsaenh.dll'
2259748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe33b50000 'C:\WINDOWS\System32\crypt32.dll'
2260748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\mpr.dll'
2261748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe32e00000 'C:\WINDOWS\system32\rsaenh.dll'
2262748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe33b50000 'C:\WINDOWS\System32\crypt32.dll'
2263748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\shell32.dll'
2264748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe32e00000 'C:\WINDOWS\system32\rsaenh.dll'
2265748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 24202) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'
2266748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe32e00000 'C:\WINDOWS\system32\rsaenh.dll'
2267748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe33b50000 'C:\WINDOWS\System32\crypt32.dll'
2268748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\win32u.dll'
2269748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe32e00000 'C:\WINDOWS\system32\rsaenh.dll'
2270748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe33b50000 'C:\WINDOWS\System32\crypt32.dll'
2271748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\gdi32.dll'
2272748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe32e00000 'C:\WINDOWS\system32\rsaenh.dll'
2273748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe33b50000 'C:\WINDOWS\System32\crypt32.dll'
2274748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\user32.dll'
2275748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe32e00000 'C:\WINDOWS\system32\rsaenh.dll'
2276748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe33b50000 'C:\WINDOWS\System32\crypt32.dll'
2277748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\msvcp_win.dll'
2278748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe32e00000 'C:\WINDOWS\system32\rsaenh.dll'
2279748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe33b50000 'C:\WINDOWS\System32\crypt32.dll'
2280748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\combase.dll'
2281748.eb8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rsaenh.dll
2282748.eb8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
2283748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe32e00000 'C:\WINDOWS\system32\rsaenh.dll'
2284748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe33b50000 'C:\WINDOWS\System32\crypt32.dll'
2285748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\winmmbase.dll'
2286748.eb8: SUPR3HardenedMain: Calling TrustedMain (00007ffdf6b716c0)...
2287748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe32e00000 'C:\WINDOWS\system32\rsaenh.dll'
2288748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'gdi32.dll'.
2289748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'ole32.dll'.
2290748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'user32.dll'.
2291748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'imm32.dll'.
2292748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'winmm.dll'.
2293748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'oleaut32.dll'.
2294748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'shell32.dll'.
2295748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'advapi32.dll'.
2296748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'qt5guivbox.dll'.
2297748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'qt5corevbox.dll'.
2298748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'msvcr100.dll'.
2299748.eb8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\platforms\qwindows.dll) WinVerifyTrust
2300748.eb8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\platforms\qwindows.dll
2301748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
2302748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
2303748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
2304748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
2305748.eb8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll
2306748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
2307748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
2308748.eb8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll
2309748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
2310748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
2311748.eb8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll
2312748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
2313748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume2\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
2314748.eb8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\shell32.dll
2315748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
2316748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume2\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
2317748.eb8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\oleaut32.dll
2318748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
2319748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume2\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008]
2320748.eb8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\winmm.dll
2321748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'imm32.dll'...
2322748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'imm32.dll' -> '\Device\HarddiskVolume2\Windows\System32\imm32.dll' [rcNtRedir=0xc0150008]
2323748.eb8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\imm32.dll
2324748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
2325748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
2326748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
2327748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
2328748.eb8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ole32.dll
2329748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
2330748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
2331748.eb8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\platforms\qwindows.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
2332748.eb8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\platforms\qwindows.dll
2333748.eb8: supR3HardenedDllNotificationCallback: load 00007ffdffc60000 LB 0x0012e000 C:\Program Files\Oracle\VirtualBox\platforms\qwindows.dll [fFlags=0x0]
2334748.eb8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\platforms\qwindows.dll
2335748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdffc60000 'C:\Program Files\Oracle\VirtualBox\platforms\qwindows.dll'
2336748.eb8: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000000000004a0 pwszName=\Device\HarddiskVolume2\Windows\System32\uxtheme.dll
2337748.eb8: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000001295d20
2338748.eb8: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000001295d20
2339748.eb8: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=286AD1CEC16EFDCA5718925D19E68A486A5851A0
2340748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe32e00000 'C:\WINDOWS\system32\rsaenh.dll'
2341748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe33b50000 'C:\WINDOWS\System32\crypt32.dll'
2342748.eb8: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.18362.720.cat'; file='\Device\HarddiskVolume2\Windows\System32\uxtheme.dll'
2343748.eb8: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
2344748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
2345748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #33 'gdi32.dll'.
2346748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #34 'user32.dll'.
2347748.eb8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\uxtheme.dll) WinVerifyTrust
2348748.eb8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\uxtheme.dll
2349748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
2350748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
2351748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
2352748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
2353748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
2354748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
2355748.eb8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\uxtheme.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
2356748.eb8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\uxtheme.dll
2357748.eb8: supR3HardenedDllNotificationCallback: load 00007ffe31d20000 LB 0x00099000 C:\WINDOWS\system32\uxtheme.dll [fFlags=0x0]
2358748.eb8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\uxtheme.dll
2359748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe31d20000 'C:\WINDOWS\system32\uxtheme.dll'
2360748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe34fd0000 'C:\WINDOWS\system32\user32.dll'
2361748.eb8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\shell32.dll
2362748.eb8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\shell32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
2363748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe362d0000 'C:\WINDOWS\system32\shell32.dll'
2364748.eb8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\SHCore.dll
2365748.eb8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\SHCore.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
2366748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe35b00000 'C:\WINDOWS\system32\SHCore.dll'
2367748.eb8: supR3HardenedMonitor_LdrLoadDll: error opening 'C:\WINDOWS\system32\wintab32.dll': 0 (NtPath=\??\C:\WINDOWS\system32\wintab32.dll; Input=C:\WINDOWS\system32\wintab32.dll; rcNtGetDll=0x0
2368748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0xc0000034 'C:\WINDOWS\system32\wintab32.dll'
2369748.eb8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\winmm.dll
2370748.eb8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\winmm.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
2371748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe314e0000 'C:\WINDOWS\system32\winmm.dll'
2372748.eb8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\winmm.dll
2373748.eb8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\winmm.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
2374748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe314e0000 'C:\WINDOWS\system32\winmm.dll'
2375748.eb8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\shell32.dll
2376748.eb8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\shell32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
2377748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe362d0000 'C:\WINDOWS\system32\shell32.dll'
2378748.eb8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\uxtheme.dll
2379748.eb8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\uxtheme.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
2380748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe31d20000 'C:\WINDOWS\system32\uxtheme.dll'
2381748.eb8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll
2382748.eb8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\advapi32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
2383748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe36030000 'C:\WINDOWS\system32\advapi32.dll'
2384748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe32e00000 'C:\WINDOWS\system32\rsaenh.dll'
2385748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe33b50000 'C:\WINDOWS\System32\crypt32.dll'
2386748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #13 'rpcrt4.dll'.
2387748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #30 'profapi.dll'.
2388748.eb8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\userenv.dll) WinVerifyTrust
2389748.eb8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\userenv.dll
2390748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'profapi.dll'...
2391748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'profapi.dll' -> '\Device\HarddiskVolume2\Windows\System32\profapi.dll' [rcNtRedir=0xc0150008]
2392748.eb8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\profapi.dll
2393748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
2394748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
2395748.eb8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\userenv.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
2396748.eb8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\userenv.dll
2397748.eb8: supR3HardenedDllNotificationCallback: load 00007ffe339a0000 LB 0x00025000 C:\WINDOWS\system32\userenv.dll [fFlags=0x0]
2398748.eb8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\userenv.dll
2399748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe339a0000 'C:\WINDOWS\system32\userenv.dll'
2400748.eb8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\kernel32.dll
2401748.eb8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\kernel32.dll (Input=kernel32, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
2402748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe34c70000 'C:\WINDOWS\System32\kernel32.dll'
2403748.eb8: supR3HardenedDllNotificationCallback: load 00007ffe355f0000 LB 0x000a2000 C:\WINDOWS\System32\clbcatq.dll [fFlags=0x0]
2404748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
2405748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #30 'rpcrt4.dll'.
2406748.eb8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\clbcatq.dll)
2407748.eb8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\clbcatq.dll
2408748.2938: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
2409748.2938: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
2410748.2938: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
2411748.2938: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
2412748.2938: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe32e00000 'C:\WINDOWS\system32\rsaenh.dll'
2413748.2938: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe33b50000 'C:\WINDOWS\System32\crypt32.dll'
2414748.2938: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\clbcatq.dll'
2415748.2938: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe32e00000 'C:\WINDOWS\system32\rsaenh.dll'
2416748.2938: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
2417748.2938: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp100.dll'.
2418748.2938: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxrt.dll'.
2419748.2938: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'advapi32.dll'.
2420748.2938: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'ole32.dll'.
2421748.2938: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'oleaut32.dll'.
2422748.2938: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxC.dll) WinVerifyTrust
2423748.2938: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxC.dll
2424748.2938: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
2425748.2938: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume2\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
2426748.2938: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\oleaut32.dll
2427748.2938: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
2428748.2938: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
2429748.2938: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ole32.dll
2430748.2938: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
2431748.2938: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
2432748.2938: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll
2433748.2938: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
2434748.2938: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
2435748.2938: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
2436748.2938: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
2437748.2938: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll
2438748.2938: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
2439748.2938: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
2440748.2938: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxC.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
2441748.2938: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxC.dll
2442748.2938: supR3HardenedDllNotificationCallback: load 00007ffdfdd40000 LB 0x003a4000 C:\Program Files\Oracle\VirtualBox\VBoxC.dll [fFlags=0x0]
2443748.2938: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxC.dll
2444748.2938: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdfdd40000 'C:\Program Files\Oracle\VirtualBox\VBoxC.dll'
2445748.2938: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe32e00000 'C:\WINDOWS\system32\rsaenh.dll'
2446748.2938: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
2447748.2938: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
2448748.2938: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'advapi32.dll'.
2449748.2938: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'shlwapi.dll'.
2450748.2938: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'ole32.dll'.
2451748.2938: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'oleaut32.dll'.
2452748.2938: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'rpcrt4.dll'.
2453748.2938: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxProxyStub.dll) WinVerifyTrust
2454748.2938: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxProxyStub.dll
2455748.2938: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
2456748.2938: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
2457748.2938: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
2458748.2938: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume2\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
2459748.2938: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\oleaut32.dll
2460748.2938: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
2461748.2938: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
2462748.2938: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ole32.dll
2463748.2938: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shlwapi.dll'...
2464748.2938: supR3HardenedWinVerifyCacheProcessImportTodos: 'shlwapi.dll' -> '\Device\HarddiskVolume2\Windows\System32\shlwapi.dll' [rcNtRedir=0xc0150008]
2465748.2938: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\shlwapi.dll
2466748.2938: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
2467748.2938: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
2468748.2938: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll
2469748.2938: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
2470748.2938: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
2471748.2938: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
2472748.2938: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
2473748.2938: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxProxyStub.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
2474748.2938: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxProxyStub.dll
2475748.2938: supR3HardenedDllNotificationCallback: load 00007ffe002c0000 LB 0x000d5000 C:\Program Files\Oracle\VirtualBox\VBoxProxyStub.dll [fFlags=0x0]
2476748.2938: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxProxyStub.dll
2477748.2938: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe002c0000 'C:\Program Files\Oracle\VirtualBox\VBoxProxyStub.dll'
2478748.2938: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\oleaut32.dll
2479748.2938: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\oleaut32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
2480748.2938: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe360e0000 'C:\Windows\System32\oleaut32.dll'
2481748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe361c0000 'C:\WINDOWS\system32\gdi32.dll'
2482748.318: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe32e00000 'C:\WINDOWS\system32\rsaenh.dll'
2483748.318: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe32e00000 'C:\WINDOWS\system32\rsaenh.dll'
2484748.318: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe32e00000 'C:\WINDOWS\system32\rsaenh.dll'
2485748.318: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
2486748.318: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
2487748.318: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxPuelMainVM.dll) WinVerifyTrust
2488748.318: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxPuelMainVM.dll
2489748.318: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
2490748.318: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
2491748.318: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
2492748.318: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
2493748.318: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxPuelMainVM.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
2494748.318: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxPuelMainVM.dll
2495748.318: supR3HardenedDllNotificationCallback: load 00007ffe1fab0000 LB 0x0000e000 C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxPuelMainVM.DLL [fFlags=0x0]
2496748.318: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxPuelMainVM.dll
2497748.318: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe1fab0000 'C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxPuelMainVM.DLL'
2498748.eb8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\shell32.dll
2499748.eb8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\shell32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
2500748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe362d0000 'C:\WINDOWS\system32\shell32.dll'
2501748.eb8: supR3HardenedDllNotificationCallback: load 00007ffe34e90000 LB 0x00136000 C:\WINDOWS\System32\MSCTF.dll [fFlags=0x0]
2502748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
2503748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'oleaut32.dll'.
2504748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #38 'user32.dll'.
2505748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #39 'gdi32.dll'.
2506748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #40 'imm32.dll'.
2507748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #41 'advapi32.dll'.
2508748.eb8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\msctf.dll)
2509748.eb8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\msctf.dll
2510748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
2511748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
2512748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'imm32.dll'...
2513748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'imm32.dll' -> '\Device\HarddiskVolume2\Windows\System32\imm32.dll' [rcNtRedir=0xc0150008]
2514748.eb8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\imm32.dll
2515748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
2516748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
2517748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
2518748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
2519748.eb8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll
2520748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
2521748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume2\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
2522748.eb8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\oleaut32.dll
2523748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
2524748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
2525748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe32e00000 'C:\WINDOWS\system32\rsaenh.dll'
2526748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe33b50000 'C:\WINDOWS\System32\crypt32.dll'
2527748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\msctf.dll'
2528748.eb8: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000a20 pwszName=\Device\HarddiskVolume2\Windows\System32\DataExchange.dll
2529748.eb8: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000001295d20
2530748.eb8: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000001295d20
2531748.eb8: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=3632E0380EF7C400BBC7C4B0B9ED8D9F9860503B
2532748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe32e00000 'C:\WINDOWS\system32\rsaenh.dll'
2533748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe33b50000 'C:\WINDOWS\System32\crypt32.dll'
2534748.eb8: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.18362.778.cat'; file='\Device\HarddiskVolume2\Windows\System32\DataExchange.dll'
2535748.eb8: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
2536748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
2537748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'shcore.dll'.
2538748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #29 'combase.dll'.
2539748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #34 'd3d11.dll'.
2540748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #35 'dcomp.dll'.
2541748.eb8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\DataExchange.dll) WinVerifyTrust
2542748.eb8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\DataExchange.dll
2543748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'dcomp.dll'...
2544748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'dcomp.dll' -> '\Device\HarddiskVolume2\Windows\System32\dcomp.dll' [rcNtRedir=0xc0150008]
2545748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe32e00000 'C:\WINDOWS\system32\rsaenh.dll'
2546748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe33b50000 'C:\WINDOWS\System32\crypt32.dll'
2547748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'win32u.dll'.
2548748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp_win.dll'.
2549748.eb8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\dcomp.dll) WinVerifyTrust
2550748.eb8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\dcomp.dll
2551748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'd3d11.dll'...
2552748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'd3d11.dll' -> '\Device\HarddiskVolume2\Windows\System32\d3d11.dll' [rcNtRedir=0xc0150008]
2553748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
2554748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
2555748.eb8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcp_win.dll
2556748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
2557748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume2\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
2558748.eb8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\win32u.dll
2559748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe32e00000 'C:\WINDOWS\system32\rsaenh.dll'
2560748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe33b50000 'C:\WINDOWS\System32\crypt32.dll'
2561748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
2562748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #24 'dxgi.dll'.
2563748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #27 'win32u.dll'.
2564748.eb8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\d3d11.dll) WinVerifyTrust
2565748.eb8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\d3d11.dll
2566748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
2567748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume2\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
2568748.eb8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\combase.dll
2569748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shcore.dll'...
2570748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'shcore.dll' -> '\Device\HarddiskVolume2\Windows\System32\shcore.dll' [rcNtRedir=0xc0150008]
2571748.eb8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\SHCore.dll
2572748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
2573748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
2574748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
2575748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume2\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
2576748.eb8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\win32u.dll
2577748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'dxgi.dll'...
2578748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'dxgi.dll' -> '\Device\HarddiskVolume2\Windows\System32\dxgi.dll' [rcNtRedir=0xc0150008]
2579748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe32e00000 'C:\WINDOWS\system32\rsaenh.dll'
2580748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe33b50000 'C:\WINDOWS\System32\crypt32.dll'
2581748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
2582748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'win32u.dll'.
2583748.eb8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\dxgi.dll) WinVerifyTrust
2584748.eb8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\dxgi.dll
2585748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
2586748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
2587748.eb8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll
2588748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
2589748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume2\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
2590748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
2591748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
2592748.eb8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\dataexchange.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
2593748.eb8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\DataExchange.dll
2594748.eb8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\d3d11.dll
2595748.eb8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\dcomp.dll
2596748.eb8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\dxgi.dll
2597748.eb8: supR3HardenedDllNotificationCallback: load 00007ffe32780000 LB 0x000eb000 C:\WINDOWS\system32\dxgi.dll [fFlags=0x0]
2598748.eb8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\dxgi.dll
2599748.eb8: supR3HardenedDllNotificationCallback: load 00007ffe30df0000 LB 0x0025b000 C:\WINDOWS\system32\d3d11.dll [fFlags=0x0]
2600748.eb8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\d3d11.dll
2601748.eb8: supR3HardenedDllNotificationCallback: load 00007ffe30c10000 LB 0x001dc000 C:\WINDOWS\system32\dcomp.dll [fFlags=0x0]
2602748.eb8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\dcomp.dll
2603748.eb8: supR3HardenedDllNotificationCallback: load 00007ffe13000000 LB 0x0003a000 C:\WINDOWS\system32\dataexchange.dll [fFlags=0x0]
2604748.eb8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\DataExchange.dll
2605748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe361c0000 'C:\WINDOWS\System32\gdi32.dll'
2606748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe13000000 'C:\WINDOWS\system32\dataexchange.dll'
2607748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'rmclient.dll'.
2608748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #31 'rpcrt4.dll'.
2609748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #47 'combase.dll'.
2610748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #50 'msvcp_win.dll'.
2611748.eb8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\twinapi.appcore.dll)
2612748.eb8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\twinapi.appcore.dll
2613748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
2614748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'rpcrt4.dll'.
2615748.eb8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\rmclient.dll)
2616748.eb8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\rmclient.dll
2617748.eb8: supR3HardenedDllNotificationCallback: load 00007ffe32240000 LB 0x00029000 C:\WINDOWS\system32\RMCLIENT.dll [fFlags=0x0]
2618748.eb8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rmclient.dll [avoiding WinVerifyTrust]
2619748.eb8: supR3HardenedDllNotificationCallback: load 00007ffe31e10000 LB 0x0025a000 C:\WINDOWS\system32\twinapi.appcore.dll [fFlags=0x0]
2620748.eb8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\twinapi.appcore.dll [avoiding WinVerifyTrust]
2621748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
2622748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
2623748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
2624748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
2625748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
2626748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
2627748.eb8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcp_win.dll
2628748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
2629748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume2\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
2630748.eb8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\combase.dll
2631748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
2632748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
2633748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rmclient.dll'...
2634748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'rmclient.dll' -> '\Device\HarddiskVolume2\Windows\System32\rmclient.dll' [rcNtRedir=0xc0150008]
2635748.eb8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rmclient.dll [lacks WinVerifyTrust]
2636748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe32e00000 'C:\WINDOWS\system32\rsaenh.dll'
2637748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe33b50000 'C:\WINDOWS\System32\crypt32.dll'
2638748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\rmclient.dll'
2639748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe32e00000 'C:\WINDOWS\system32\rsaenh.dll'
2640748.eb8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\crypt32.dll
2641748.eb8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\crypt32.dll (Input=crypt32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
2642748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe33b50000 'C:\WINDOWS\System32\crypt32.dll'
2643748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\twinapi.appcore.dll'
2644748.eb8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\SHCore.dll
2645748.eb8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\Shcore.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
2646748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe35b00000 'C:\WINDOWS\system32\Shcore.dll'
2647748.eb8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\shell32.dll
2648748.eb8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\shell32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
2649748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe362d0000 'C:\WINDOWS\system32\shell32.dll'
2650748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe362d0000 'C:\WINDOWS\system32\shell32.dll'
2651748.eb8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ole32.dll
2652748.eb8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\ole32.dll (Input=ole32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
2653748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe34d30000 'C:\WINDOWS\System32\ole32.dll'
2654748.eb8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\oleaut32.dll
2655748.eb8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\OLEAUT32.dll (Input=OLEAUT32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
2656748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe360e0000 'C:\WINDOWS\System32\OLEAUT32.dll'
2657748.eb8: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000a9c pwszName=\Device\HarddiskVolume2\Windows\System32\wbem\wbemprox.dll
2658748.eb8: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000001295d20
2659748.eb8: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000001295d20
2660748.eb8: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=DB1AA7E2E4704C908EC9382E1F9E64808B9E5E1D
2661748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe32e00000 'C:\WINDOWS\system32\rsaenh.dll'
2662748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe33b50000 'C:\WINDOWS\System32\crypt32.dll'
2663748.eb8: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package03~31bf3856ad364e35~amd64~~10.0.18362.778.cat'; file='\Device\HarddiskVolume2\Windows\System32\wbem\wbemprox.dll'
2664748.eb8: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
2665748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
2666748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'ws2_32.dll'.
2667748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #18 'wbemcomn.dll'.
2668748.eb8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\wbem\wbemprox.dll) WinVerifyTrust
2669748.eb8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\wbem\wbemprox.dll
2670748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'wbemcomn.dll'...
2671748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'wbemcomn.dll' -> '\Device\HarddiskVolume2\Windows\System32\wbemcomn.dll' [rcNtRedir=0xc0150008]
2672748.eb8: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000acc pwszName=\Device\HarddiskVolume2\Windows\System32\wbemcomn.dll
2673748.eb8: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000001295d20
2674748.eb8: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000001295d20
2675748.eb8: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=22EAF38FA276D7A374D3945ACD556FA0953D3440
2676748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe32e00000 'C:\WINDOWS\system32\rsaenh.dll'
2677748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe33b50000 'C:\WINDOWS\System32\crypt32.dll'
2678748.eb8: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package03~31bf3856ad364e35~amd64~~10.0.18362.778.cat'; file='\Device\HarddiskVolume2\Windows\System32\wbemcomn.dll'
2679748.eb8: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
2680748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
2681748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #14 'bcrypt.dll'.
2682748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #18 'ws2_32.dll'.
2683748.eb8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\wbemcomn.dll) WinVerifyTrust
2684748.eb8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\wbemcomn.dll
2685748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
2686748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
2687748.eb8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ws2_32.dll
2688748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
2689748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
2690748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
2691748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
2692748.eb8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ws2_32.dll
2693748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcrypt.dll'...
2694748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcrypt.dll' -> '\Device\HarddiskVolume2\Windows\System32\bcrypt.dll' [rcNtRedir=0xc0150008]
2695748.eb8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\bcrypt.dll
2696748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
2697748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
2698748.eb8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\wbem\wbemprox.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
2699748.eb8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\wbem\wbemprox.dll
2700748.eb8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\wbemcomn.dll
2701748.eb8: supR3HardenedDllNotificationCallback: load 00007ffe2b700000 LB 0x00084000 C:\WINDOWS\SYSTEM32\wbemcomn.dll [fFlags=0x0]
2702748.eb8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\wbemcomn.dll
2703748.eb8: supR3HardenedDllNotificationCallback: load 00007ffe2b790000 LB 0x00011000 C:\WINDOWS\system32\wbem\wbemprox.dll [fFlags=0x0]
2704748.eb8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\wbem\wbemprox.dll
2705748.eb8: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(API-MS-Win-Core-LocalRegistry-L1-1-0.dll) -> 0x0, fPresent=1
2706748.eb8: supR3HardenedMonitor_LdrLoadDll: pName=API-MS-Win-Core-LocalRegistry-L1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
2707748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe346c0000 'API-MS-Win-Core-LocalRegistry-L1-1-0.dll'
2708748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe2b790000 'C:\WINDOWS\system32\wbem\wbemprox.dll'
2709748.eb8: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000a34 pwszName=\Device\HarddiskVolume2\Windows\System32\wbem\wbemsvc.dll
2710748.eb8: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000001295d20
2711748.eb8: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000001295d20
2712748.eb8: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=00C864D7F76A7AD25E7D0DA164B0B66188F5B7FF
2713748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe32e00000 'C:\WINDOWS\system32\rsaenh.dll'
2714748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe33b50000 'C:\WINDOWS\System32\crypt32.dll'
2715748.eb8: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package03~31bf3856ad364e35~amd64~~10.0.18362.778.cat'; file='\Device\HarddiskVolume2\Windows\System32\wbem\wbemsvc.dll'
2716748.eb8: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
2717748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
2718748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'rpcrt4.dll'.
2719748.eb8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\wbem\wbemsvc.dll) WinVerifyTrust
2720748.eb8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\wbem\wbemsvc.dll
2721748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
2722748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
2723748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
2724748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
2725748.eb8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\wbem\wbemsvc.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
2726748.eb8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\wbem\wbemsvc.dll
2727748.eb8: supR3HardenedDllNotificationCallback: load 00007ffe2aaa0000 LB 0x00014000 C:\WINDOWS\system32\wbem\wbemsvc.dll [fFlags=0x0]
2728748.eb8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\wbem\wbemsvc.dll
2729748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe2aaa0000 'C:\WINDOWS\system32\wbem\wbemsvc.dll'
2730748.eb8: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-localization-l1-2-0.dll) -> 0x0, fPresent=1
2731748.eb8: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-l1-2-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
2732748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe346c0000 'api-ms-win-core-localization-l1-2-0.dll'
2733748.eb8: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-localization-obsolete-l1-1-0.dll) -> 0x0, fPresent=1
2734748.eb8: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-obsolete-l1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
2735748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe346c0000 'api-ms-win-core-localization-obsolete-l1-1-0.dll'
2736748.eb8: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000a98 pwszName=\Device\HarddiskVolume2\Windows\System32\wbem\fastprox.dll
2737748.eb8: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000001295d20
2738748.eb8: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000001295d20
2739748.eb8: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=0708A64F48237CD4D5092546CE9C373F20B30CA1
2740748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe32e00000 'C:\WINDOWS\system32\rsaenh.dll'
2741748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe33b50000 'C:\WINDOWS\System32\crypt32.dll'
2742748.eb8: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package03~31bf3856ad364e35~amd64~~10.0.18362.778.cat'; file='\Device\HarddiskVolume2\Windows\System32\wbem\fastprox.dll'
2743748.eb8: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
2744748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
2745748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #20 'wbemcomn.dll'.
2746748.eb8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\wbem\fastprox.dll) WinVerifyTrust
2747748.eb8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\wbem\fastprox.dll
2748748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'wbemcomn.dll'...
2749748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'wbemcomn.dll' -> '\Device\HarddiskVolume2\Windows\System32\wbemcomn.dll' [rcNtRedir=0xc0150008]
2750748.eb8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\wbemcomn.dll
2751748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
2752748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
2753748.eb8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\wbem\fastprox.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
2754748.eb8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\wbem\fastprox.dll
2755748.eb8: supR3HardenedDllNotificationCallback: load 00007ffe2ab50000 LB 0x00101000 C:\WINDOWS\system32\wbem\fastprox.dll [fFlags=0x0]
2756748.eb8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\wbem\fastprox.dll
2757748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe2ab50000 'C:\WINDOWS\system32\wbem\fastprox.dll'
2758748.eb8: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000a60 pwszName=\Device\HarddiskVolume2\Windows\System32\amsi.dll
2759748.eb8: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000001295d20
2760748.eb8: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000001295d20
2761748.eb8: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=B5D4D58A583ACAD5AA76D7DD0F2DB8ADE903942B
2762748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe32e00000 'C:\WINDOWS\system32\rsaenh.dll'
2763748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe33b50000 'C:\WINDOWS\System32\crypt32.dll'
2764748.eb8: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package04~31bf3856ad364e35~amd64~~10.0.18362.720.cat'; file='\Device\HarddiskVolume2\Windows\System32\amsi.dll'
2765748.eb8: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
2766748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
2767748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #14 'rpcrt4.dll'.
2768748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #16 'userenv.dll'.
2769748.eb8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\amsi.dll) WinVerifyTrust
2770748.eb8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\amsi.dll
2771748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'userenv.dll'...
2772748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'userenv.dll' -> '\Device\HarddiskVolume2\Windows\System32\userenv.dll' [rcNtRedir=0xc0150008]
2773748.eb8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\userenv.dll
2774748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
2775748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
2776748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
2777748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
2778748.eb8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\amsi.dll (Input=amsi.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
2779748.eb8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\amsi.dll
2780748.eb8: supR3HardenedDllNotificationCallback: load 00007ffe163c0000 LB 0x00015000 C:\WINDOWS\System32\amsi.dll [fFlags=0x0]
2781748.eb8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\amsi.dll
2782748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe163c0000 'C:\WINDOWS\System32\amsi.dll'
2783748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe32e00000 'C:\WINDOWS\system32\rsaenh.dll'
2784748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe33b50000 'C:\WINDOWS\System32\crypt32.dll'
2785748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'advapi32.dll'.
2786748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'ole32.dll'.
2787748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'oleaut32.dll'.
2788748.eb8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\ProgramData\Microsoft\Windows Defender\Platform\4.18.2004.6-0\MpOAV.dll) WinVerifyTrust
2789748.eb8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\ProgramData\Microsoft\Windows Defender\Platform\4.18.2004.6-0\MpOAV.dll
2790748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
2791748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume2\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
2792748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
2793748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
2794748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
2795748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
2796748.eb8: supR3HardenedMonitor_LdrLoadDll: pName=C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2004.6-0\MpOav.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
2797748.eb8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\ProgramData\Microsoft\Windows Defender\Platform\4.18.2004.6-0\MpOAV.dll
2798748.eb8: supR3HardenedDllNotificationCallback: load 00007ffe13670000 LB 0x00046000 C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2004.6-0\MpOav.dll [fFlags=0x0]
2799748.eb8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\ProgramData\Microsoft\Windows Defender\Platform\4.18.2004.6-0\MpOAV.dll
2800748.eb8: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-synch-l1-2-0) -> 0x0, fPresent=1
2801748.eb8: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-synch-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
2802748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe346c0000 'api-ms-win-core-synch-l1-2-0'
2803748.eb8: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-fibers-l1-1-1) -> 0x0, fPresent=1
2804748.eb8: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-fibers-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
2805748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe346c0000 'api-ms-win-core-fibers-l1-1-1'
2806748.eb8: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-synch-l1-2-0) -> 0x0, fPresent=1
2807748.eb8: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-synch-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
2808748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe346c0000 'api-ms-win-core-synch-l1-2-0'
2809748.eb8: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-fibers-l1-1-1) -> 0x0, fPresent=1
2810748.eb8: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-fibers-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
2811748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe346c0000 'api-ms-win-core-fibers-l1-1-1'
2812748.eb8: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-localization-l1-2-1) -> 0x0, fPresent=1
2813748.eb8: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-l1-2-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
2814748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe346c0000 'api-ms-win-core-localization-l1-2-1'
2815748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\version.dll'.
2816748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
2817748.eb8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\version.dll)
2818748.eb8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\version.dll
2819748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
2820748.eb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
2821748.eb8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\version.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
2822748.eb8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\version.dll [avoiding WinVerifyTrust]
2823748.eb8: supR3HardenedDllNotificationCallback: load 00007ffe26710000 LB 0x0000a000 C:\WINDOWS\system32\version.dll [fFlags=0x0]
2824748.eb8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\version.dll [avoiding WinVerifyTrust]
2825748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe26710000 'C:\WINDOWS\system32\version.dll'
2826748.eb8: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\version.dll'.
2827748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\version.dll' [rescheduled]
2828748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe13670000 'C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2004.6-0\MpOav.dll'
2829748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe32e00000 'C:\WINDOWS\system32\rsaenh.dll'
2830748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe33b50000 'C:\WINDOWS\System32\crypt32.dll'
2831748.eb8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\version.dll'
2832748.2b08: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe32e00000 'C:\WINDOWS\system32\rsaenh.dll'
2833748.2b08: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
2834748.2b08: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrem.dll'.
2835748.2b08: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxrt.dll'.
2836748.2b08: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxVMM.dll) WinVerifyTrust
2837748.2b08: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxVMM.dll
2838748.2b08: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
2839748.2b08: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
2840748.2b08: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrem.dll'...
2841748.2b08: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrem.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\vboxrem.dll' [rcNtRedir=0xc0150008]
2842748.2b08: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe32e00000 'C:\WINDOWS\system32\rsaenh.dll'
2843748.2b08: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'vboxrt.dll'.
2844748.2b08: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxvmm.dll'.
2845748.2b08: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'msvcrt.dll'.
2846748.2b08: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxREM.dll) WinVerifyTrust
2847748.2b08: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxREM.dll
2848748.2b08: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
2849748.2b08: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
2850748.2b08: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
2851748.2b08: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
2852748.2b08: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxvmm.dll'...
2853748.2b08: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxvmm.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\vboxvmm.dll' [rcNtRedir=0xc0150008]
2854748.2b08: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxVMM.dll
2855748.2b08: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
2856748.2b08: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
2857748.2b08: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxVMM.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
2858748.2b08: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxVMM.dll
2859748.2b08: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxREM.dll
2860748.2b08: supR3HardenedDllNotificationCallback: load 0000000059bd0000 LB 0x0010b000 C:\Program Files\Oracle\VirtualBox\VBoxREM.dll [fFlags=0x0]
2861748.2b08: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxREM.dll
2862748.2b08: supR3HardenedDllNotificationCallback: load 00007ffdec710000 LB 0x00331000 C:\Program Files\Oracle\VirtualBox\VBoxVMM.DLL [fFlags=0x0]
2863748.2b08: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxVMM.dll
2864748.2b08: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdec710000 'C:\Program Files\Oracle\VirtualBox\VBoxVMM.DLL'
2865748.778: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe32e00000 'C:\WINDOWS\system32\rsaenh.dll'
2866748.778: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000c84 pwszName=\Device\HarddiskVolume2\Windows\System32\NetSetupShim.dll
2867748.778: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000001295d20
2868748.778: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000001295d20
2869748.778: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=7F5B666FF2CFCD1394E450AF7141F0F82A5730F3
2870748.778: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe32e00000 'C:\WINDOWS\system32\rsaenh.dll'
2871748.778: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe33b50000 'C:\WINDOWS\System32\crypt32.dll'
2872748.778: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package04113~31bf3856ad364e35~amd64~~10.0.18362.752.cat'; file='\Device\HarddiskVolume2\Windows\System32\NetSetupShim.dll'
2873748.778: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
2874748.778: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcp_win.dll'.
2875748.778: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #31 'rpcrt4.dll'.
2876748.778: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #32 'oleaut32.dll'.
2877748.778: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #34 'ws2_32.dll'.
2878748.778: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #35 'netsetupapi.dll'.
2879748.778: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #36 'setupapi.dll'.
2880748.778: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #37 'devrtl.dll'.
2881748.778: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\NetSetupShim.dll) WinVerifyTrust
2882748.778: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\NetSetupShim.dll
2883748.778: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'devrtl.dll'...
2884748.778: supR3HardenedWinVerifyCacheProcessImportTodos: 'devrtl.dll' -> '\Device\HarddiskVolume2\Windows\System32\devrtl.dll' [rcNtRedir=0xc0150008]
2885748.778: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000c40 pwszName=\Device\HarddiskVolume2\Windows\System32\devrtl.dll
2886748.778: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000001295d20
2887748.778: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000001295d20
2888748.778: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=D2E5A6C3AFA14B1D9C532760FD646C3AC357C7AB
2889748.778: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe32e00000 'C:\WINDOWS\system32\rsaenh.dll'
2890748.778: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe33b50000 'C:\WINDOWS\System32\crypt32.dll'
2891748.778: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.18362.778.cat'; file='\Device\HarddiskVolume2\Windows\System32\devrtl.dll'
2892748.778: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
2893748.778: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\devrtl.dll) WinVerifyTrust
2894748.778: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\devrtl.dll
2895748.778: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'setupapi.dll'...
2896748.778: supR3HardenedWinVerifyCacheProcessImportTodos: 'setupapi.dll' -> '\Device\HarddiskVolume2\Windows\System32\setupapi.dll' [rcNtRedir=0xc0150008]
2897748.778: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe32e00000 'C:\WINDOWS\system32\rsaenh.dll'
2898748.778: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe33b50000 'C:\WINDOWS\System32\crypt32.dll'
2899748.778: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
2900748.778: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #29 'rpcrt4.dll'.
2901748.778: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #36 'cfgmgr32.dll'.
2902748.778: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #41 'bcrypt.dll'.
2903748.778: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\setupapi.dll) WinVerifyTrust
2904748.778: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\setupapi.dll
2905748.778: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'netsetupapi.dll'...
2906748.778: supR3HardenedWinVerifyCacheProcessImportTodos: 'netsetupapi.dll' -> '\Device\HarddiskVolume2\Windows\System32\netsetupapi.dll' [rcNtRedir=0xc0150008]
2907748.778: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcrypt.dll'...
2908748.778: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcrypt.dll' -> '\Device\HarddiskVolume2\Windows\System32\bcrypt.dll' [rcNtRedir=0xc0150008]
2909748.778: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\bcrypt.dll
2910748.778: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'cfgmgr32.dll'...
2911748.778: supR3HardenedWinVerifyCacheProcessImportTodos: 'cfgmgr32.dll' -> '\Device\HarddiskVolume2\Windows\System32\cfgmgr32.dll' [rcNtRedir=0xc0150008]
2912748.778: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\cfgmgr32.dll
2913748.778: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
2914748.778: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
2915748.778: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
2916748.778: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
2917748.778: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe32e00000 'C:\WINDOWS\system32\rsaenh.dll'
2918748.778: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe33b50000 'C:\WINDOWS\System32\crypt32.dll'
2919748.778: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
2920748.778: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #17 'rpcrt4.dll'.
2921748.778: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\NetSetupApi.dll) WinVerifyTrust
2922748.778: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\NetSetupApi.dll
2923748.778: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
2924748.778: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
2925748.778: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ws2_32.dll
2926748.778: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
2927748.778: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume2\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
2928748.778: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
2929748.778: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
2930748.778: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
2931748.778: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
2932748.778: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcp_win.dll
2933748.778: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
2934748.778: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
2935748.778: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
2936748.778: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
2937748.778: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\NetSetupShim.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
2938748.778: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\NetSetupShim.dll
2939748.778: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\NetSetupApi.dll
2940748.778: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\devrtl.dll
2941748.778: supR3HardenedDllNotificationCallback: load 00007ffe26e40000 LB 0x00025000 C:\Windows\System32\NetSetupApi.dll [fFlags=0x0]
2942748.778: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\NetSetupApi.dll
2943748.778: supR3HardenedDllNotificationCallback: load 00007ffe35180000 LB 0x00470000 C:\WINDOWS\System32\setupapi.dll [fFlags=0x0]
2944748.778: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\setupapi.dll
2945748.778: supR3HardenedDllNotificationCallback: load 00007ffe261b0000 LB 0x00013000 C:\Windows\System32\DEVRTL.dll [fFlags=0x0]
2946748.778: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\devrtl.dll
2947748.778: supR3HardenedDllNotificationCallback: load 00007ffe07720000 LB 0x00081000 C:\Windows\System32\NetSetupShim.dll [fFlags=0x0]
2948748.778: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\NetSetupShim.dll
2949748.778: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe07720000 'C:\Windows\System32\NetSetupShim.dll'
2950748.778: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe32e00000 'C:\WINDOWS\system32\rsaenh.dll'
2951748.778: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe33b50000 'C:\WINDOWS\System32\crypt32.dll'
2952748.778: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
2953748.778: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #23 'rpcrt4.dll'.
2954748.778: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #24 'nsi.dll'.
2955748.778: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #25 'winnsi.dll'.
2956748.778: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\NetSetupEngine.dll) WinVerifyTrust
2957748.778: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\NetSetupEngine.dll
2958748.778: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winnsi.dll'...
2959748.778: supR3HardenedWinVerifyCacheProcessImportTodos: 'winnsi.dll' -> '\Device\HarddiskVolume2\Windows\System32\winnsi.dll' [rcNtRedir=0xc0150008]
2960748.778: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe32e00000 'C:\WINDOWS\system32\rsaenh.dll'
2961748.778: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe33b50000 'C:\WINDOWS\System32\crypt32.dll'
2962748.778: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'rpcrt4.dll'.
2963748.778: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'nsi.dll'.
2964748.778: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\winnsi.dll) WinVerifyTrust
2965748.778: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\winnsi.dll
2966748.778: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'nsi.dll'...
2967748.778: supR3HardenedWinVerifyCacheProcessImportTodos: 'nsi.dll' -> '\Device\HarddiskVolume2\Windows\System32\nsi.dll' [rcNtRedir=0xc0150008]
2968748.778: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'nsi.dll'...
2969748.778: supR3HardenedWinVerifyCacheProcessImportTodos: 'nsi.dll' -> '\Device\HarddiskVolume2\Windows\System32\nsi.dll' [rcNtRedir=0xc0150008]
2970748.778: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\nsi.dll'.
2971748.778: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\nsi.dll)
2972748.778: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\nsi.dll
2973748.778: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
2974748.778: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
2975748.778: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe32e00000 'C:\WINDOWS\system32\rsaenh.dll'
2976748.778: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe33b50000 'C:\WINDOWS\System32\crypt32.dll'
2977748.778: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\nsi.dll) WinVerifyTrust
2978748.778: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
2979748.778: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
2980748.778: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
2981748.778: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
2982748.778: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\NetSetupEngine.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
2983748.778: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\NetSetupEngine.dll
2984748.778: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\winnsi.dll
2985748.778: supR3HardenedDllNotificationCallback: load 00007ffe35bb0000 LB 0x00008000 C:\WINDOWS\System32\NSI.dll [fFlags=0x0]
2986748.778: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\nsi.dll [avoiding WinVerifyTrust]
2987748.778: supR3HardenedDllNotificationCallback: load 00007ffe2b2a0000 LB 0x0000b000 C:\WINDOWS\SYSTEM32\WINNSI.DLL [fFlags=0x0]
2988748.778: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\winnsi.dll
2989748.778: supR3HardenedDllNotificationCallback: load 00007ffdfd8e0000 LB 0x000ce000 C:\Windows\System32\NetSetupEngine.dll [fFlags=0x0]
2990748.778: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\NetSetupEngine.dll
2991748.778: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdfd8e0000 'C:\Windows\System32\NetSetupEngine.dll'
2992748.778: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe32e00000 'C:\WINDOWS\system32\rsaenh.dll'
2993748.778: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe33b50000 'C:\WINDOWS\System32\crypt32.dll'
2994748.778: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\nsi.dll'
2995748.3628: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe32e00000 'C:\WINDOWS\system32\rsaenh.dll'
2996748.3628: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
2997748.3628: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxvmm.dll'.
2998748.3628: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxrt.dll'.
2999748.3628: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'user32.dll'.
3000748.3628: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxSharedClipboard.dll) WinVerifyTrust
3001748.3628: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxSharedClipboard.dll
3002748.3628: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
3003748.3628: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
3004748.3628: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
3005748.3628: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
3006748.3628: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxvmm.dll'...
3007748.3628: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxvmm.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\vboxvmm.dll' [rcNtRedir=0xc0150008]
3008748.3628: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxVMM.dll
3009748.3628: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
3010748.3628: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
3011748.3628: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxSharedClipboard.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
3012748.3628: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxSharedClipboard.dll
3013748.3628: supR3HardenedDllNotificationCallback: load 00007ffe1ec80000 LB 0x0000b000 C:\Program Files\Oracle\VirtualBox\VBoxSharedClipboard.DLL [fFlags=0x0]
3014748.3628: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxSharedClipboard.dll
3015748.3628: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe1ec80000 'C:\Program Files\Oracle\VirtualBox\VBoxSharedClipboard.DLL'
3016748.3628: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe34fd0000 'C:\WINDOWS\system32\User32.dll'
3017748.cf8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe32e00000 'C:\WINDOWS\system32\rsaenh.dll'
3018748.cf8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
3019748.cf8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp100.dll'.
3020748.cf8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxrt.dll'.
3021748.cf8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxDragAndDropSvc.dll) WinVerifyTrust
3022748.cf8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxDragAndDropSvc.dll
3023748.cf8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
3024748.cf8: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
3025748.cf8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
3026748.cf8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
3027748.cf8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
3028748.cf8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
3029748.cf8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll
3030748.cf8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxDragAndDropSvc.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
3031748.cf8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxDragAndDropSvc.dll
3032748.cf8: supR3HardenedDllNotificationCallback: load 00007ffe1ec70000 LB 0x0000d000 C:\Program Files\Oracle\VirtualBox\VBoxDragAndDropSvc.DLL [fFlags=0x0]
3033748.cf8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxDragAndDropSvc.dll
3034748.cf8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe1ec70000 'C:\Program Files\Oracle\VirtualBox\VBoxDragAndDropSvc.DLL'
3035748.778: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe362d0000 'C:\WINDOWS\system32\Shell32.dll'
3036748.778: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxVMM.dll
3037748.778: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxVMM.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
3038748.778: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdec710000 'C:\Program Files\Oracle\VirtualBox\VBoxVMM.DLL'
3039748.778: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe32e00000 'C:\WINDOWS\system32\rsaenh.dll'
3040748.778: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
3041748.778: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
3042748.778: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
3043748.778: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'ole32.dll'.
3044748.778: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'oleaut32.dll'.
3045748.778: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.dll) WinVerifyTrust
3046748.778: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.dll
3047748.778: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
3048748.778: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume2\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
3049748.778: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
3050748.778: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
3051748.778: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
3052748.778: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
3053748.778: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
3054748.778: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
3055748.778: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
3056748.778: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
3057748.778: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
3058748.778: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.dll
3059748.778: supR3HardenedDllNotificationCallback: load 00007ffe183e0000 LB 0x00041000 C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.DLL [fFlags=0x0]
3060748.778: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.dll
3061748.778: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe183e0000 'C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.DLL'
3062748.778: supR3HardenedDllNotificationCallback: Unload 00007ffe183e0000 LB 0x00041000 C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.DLL [flags=0x0]
3063748.cf8: supR3HardenedDllNotificationCallback: Unload 00007ffe1ec70000 LB 0x0000d000 C:\Program Files\Oracle\VirtualBox\VBoxDragAndDropSvc.DLL [flags=0x0]
3064748.3628: supR3HardenedDllNotificationCallback: Unload 00007ffe1ec80000 LB 0x0000b000 C:\Program Files\Oracle\VirtualBox\VBoxSharedClipboard.DLL [flags=0x0]
3065748.eb8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msctf.dll
3066748.eb8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\MSCTF.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
3067748.eb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffe34e90000 'C:\WINDOWS\System32\MSCTF.dll'
3068748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
3069748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #15 'rpcrt4.dll'.
3070748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #19 'coreuicomponents.dll'.
3071748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #20 'coremessaging.dll'.
3072748.eb8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\TextInputFramework.dll)
3073748.eb8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\TextInputFramework.dll
3074748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
3075748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #35 'coremessaging.dll'.
3076748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #47 'shcore.dll'.
3077748.eb8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\CoreUIComponents.dll)
3078748.eb8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\CoreUIComponents.dll
3079748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
3080748.eb8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\CoreMessaging.dll)
3081748.eb8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\CoreMessaging.dll
3082748.eb8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\ntmarta.dll)
3083748.eb8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\ntmarta.dll
3084748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'combase.dll'.
3085748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #24 'rpcrt4.dll'.
3086748.eb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #32 'bcryptprimitives.dll'.
3087748.eb8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\WinTypes.dll)
3088748.eb8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\WinTypes.dll
3089748.eb8: supR3HardenedDllNotificationCallback: load 00007ffe32ae0000 LB 0x00031000 C:\WINDOWS\SYSTEM32\ntmarta.dll [fFlags=0x0]
3090748.eb8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ntmarta.dll [avoiding WinVerifyTrust]
3091748.eb8: supR3HardenedDllNotificationCallback: load 00007ffe31880000 LB 0x000d4000 C:\WINDOWS\System32\CoreMessaging.dll [fFlags=0x0]
3092748.eb8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\CoreMessaging.dll [avoiding WinVerifyTrust]
3093748.eb8: supR3HardenedDllNotificationCallback: load 00007ffe2fab0000 LB 0x00153000 C:\WINDOWS\SYSTEM32\wintypes.dll [fFlags=0x0]
3094748.eb8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\WinTypes.dll [avoiding WinVerifyTrust]
3095748.eb8: supR3HardenedDllNotificationCallback: load 00007ffe2fc10000 LB 0x0032a000 C:\WINDOWS\System32\CoreUIComponents.dll [fFlags=0x0]
3096748.eb8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\CoreUIComponents.dll [avoiding WinVerifyTrust]
3097748.eb8: supR3HardenedDllNotificationCallback: load 00007ffe25e90000 LB 0x0009e000 C:\WINDOWS\System32\TextInputFramework.dll [fFlags=0x0]
3098748.eb8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\TextInputFramework.dll [avoiding WinVerifyTrust]
3099748.eb8: supR3HardenedDllNotificationCallback: Unload 00007ffe1fab0000 LB 0x0000e000 C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxPuelMainVM.DLL [flags=0x0]
3100748.eb8: supR3HardenedDllNotificationCallback: Unload 00007ffe2aaa0000 LB 0x00014000 C:\WINDOWS\system32\wbem\wbemsvc.dll [flags=0x0]
3101748.eb8: supR3HardenedDllNotificationCallback: Unload 00007ffe13000000 LB 0x0003a000 C:\WINDOWS\system32\dataexchange.dll [flags=0x0]
3102748.eb8: supR3HardenedDllNotificationCallback: Unload 00007ffe30df0000 LB 0x0025b000 C:\WINDOWS\system32\d3d11.dll [flags=0x0]
3103748.eb8: supR3HardenedDllNotificationCallback: Unload 00007ffe32780000 LB 0x000eb000 C:\WINDOWS\system32\dxgi.dll [flags=0x0]
3104748.eb8: supR3HardenedDllNotificationCallback: Unload 00007ffe30c10000 LB 0x001dc000 C:\WINDOWS\system32\dcomp.dll [flags=0x0]
3105748.eb8: supR3HardenedDllNotificationCallback: Unload 00007ffe31e10000 LB 0x0025a000 C:\WINDOWS\system32\twinapi.appcore.dll [flags=0x0]
3106748.eb8: supR3HardenedDllNotificationCallback: Unload 00007ffe32240000 LB 0x00029000 C:\WINDOWS\system32\RMCLIENT.dll [flags=0x0]
3107748.eb8: supR3HardenedDllNotificationCallback: Unload 00007ffe2ab50000 LB 0x00101000 C:\WINDOWS\system32\wbem\fastprox.dll [flags=0x0]
3108748.eb8: supR3HardenedDllNotificationCallback: Unload 00007ffe002c0000 LB 0x000d5000 C:\Program Files\Oracle\VirtualBox\VBoxProxyStub.dll [flags=0x0]
3109748.eb8: supR3HardenedDllNotificationCallback: Unload 00007ffe2b790000 LB 0x00011000 C:\WINDOWS\system32\wbem\wbemprox.dll [flags=0x0]
3110748.eb8: supR3HardenedDllNotificationCallback: Unload 00007ffe2b700000 LB 0x00084000 C:\WINDOWS\SYSTEM32\wbemcomn.dll [flags=0x0]
3111748.eb8: supR3HardenedDllNotificationCallback: Unload 00007ffdfdd40000 LB 0x003a4000 C:\Program Files\Oracle\VirtualBox\VBoxC.dll [flags=0x0]
3112748.eb8: supR3HardenedDllNotificationCallback: Unload 00007ffe07720000 LB 0x00081000 C:\Windows\System32\NetSetupShim.dll [flags=0x0]
3113748.eb8: supR3HardenedDllNotificationCallback: Unload 00007ffe26e40000 LB 0x00025000 C:\Windows\System32\NetSetupApi.dll [flags=0x0]
3114748.eb8: supR3HardenedDllNotificationCallback: Unload 00007ffe35180000 LB 0x00470000 C:\WINDOWS\System32\setupapi.dll [flags=0x0]
3115748.eb8: supR3HardenedDllNotificationCallback: Unload 00007ffe261b0000 LB 0x00013000 C:\Windows\System32\DEVRTL.dll [flags=0x0]
3116748.eb8: Terminating the normal way: rcExit=0
3117b04.1c78: supR3HardNtChildWaitFor[2]: Quitting: ExitCode=0x0 (rcNtWait=0x0, rcNt1=0x0, rcNt2=0x103, rcNt3=0x103, 7169 ms, the end);
311814fc.2848: supR3HardNtChildWaitFor[1]: Quitting: ExitCode=0x0 (rcNtWait=0x0, rcNt1=0x0, rcNt2=0x103, rcNt3=0x103, 7759 ms, the end);

© 2024 Oracle Support Privacy / Do Not Sell My Info Terms of Use Trademark Policy