VirtualBox

Ticket #20474: Ubuntu 20_04-2021-07-24-13-28-37-hardening.log

File Ubuntu 20_04-2021-07-24-13-28-37-hardening.log, 461.0 KB (added by tysonite, 3 years ago)
Line 
13954.4340: Log file opened: 6.1.24r145767 g_hStartupLog=0000000000000074 g_uNtVerCombined=0xa04a6300
23954.4340: \SystemRoot\System32\ntdll.dll:
33954.4340: CreationTime: 2021-07-16T19:57:59.442029900Z
43954.4340: LastWriteTime: 2021-07-16T19:57:59.488907200Z
53954.4340: ChangeTime: 2021-07-16T20:05:27.370785300Z
63954.4340: FileAttributes: 0x20
73954.4340: Size: 0x1ee508
83954.4340: NT Headers: 0xe8
93954.4340: Timestamp: 0xe7a22463
103954.4340: Machine: 0x8664 - amd64
113954.4340: Timestamp: 0xe7a22463
123954.4340: Image Version: 10.0
133954.4340: SizeOfImage: 0x1f5000 (2052096)
143954.4340: Resource Dir: 0x184000 LB 0x6fdc8
153954.4340: [Version info resource found at 0xd8! (ID/Name: 0x1; SubID/SubName: 0x409)]
163954.4340: [Raw version resource data: 0x1840f0 LB 0x380, codepage 0x0 (reserved 0x0)]
173954.4340: ProductName: Microsoft® Windows® Operating System
183954.4340: ProductVersion: 10.0.19041.1110
193954.4340: FileVersion: 10.0.19041.1110 (WinBuild.160101.0800)
203954.4340: FileDescription: NT Layer DLL
213954.4340: \SystemRoot\System32\kernel32.dll:
223954.4340: CreationTime: 2021-05-29T14:11:08.052431500Z
233954.4340: LastWriteTime: 2021-05-29T14:11:08.068094300Z
243954.4340: ChangeTime: 2021-07-16T20:05:27.167080400Z
253954.4340: FileAttributes: 0x20
263954.4340: Size: 0xbac20
273954.4340: NT Headers: 0xe8
283954.4340: Timestamp: 0x92f57b1a
293954.4340: Machine: 0x8664 - amd64
303954.4340: Timestamp: 0x92f57b1a
313954.4340: Image Version: 10.0
323954.4340: SizeOfImage: 0xbd000 (774144)
333954.4340: Resource Dir: 0xbb000 LB 0x520
343954.4340: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
353954.4340: [Raw version resource data: 0xbb0b0 LB 0x3a4, codepage 0x0 (reserved 0x0)]
363954.4340: ProductName: Microsoft® Windows® Operating System
373954.4340: ProductVersion: 10.0.19041.1023
383954.4340: FileVersion: 10.0.19041.1023 (WinBuild.160101.0800)
393954.4340: FileDescription: Windows NT BASE API Client DLL
403954.4340: \SystemRoot\System32\KernelBase.dll:
413954.4340: CreationTime: 2021-07-16T19:58:00.223418100Z
423954.4340: LastWriteTime: 2021-07-16T19:58:00.317173000Z
433954.4340: ChangeTime: 2021-07-16T20:05:27.417660500Z
443954.4340: FileAttributes: 0x20
453954.4340: Size: 0x2c9b88
463954.4340: NT Headers: 0xf8
473954.4340: Timestamp: 0x4809adf2
483954.4340: Machine: 0x8664 - amd64
493954.4340: Timestamp: 0x4809adf2
503954.4340: Image Version: 10.0
513954.4340: SizeOfImage: 0x2c9000 (2920448)
523954.4340: Resource Dir: 0x2a0000 LB 0x548
533954.4340: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
543954.4340: [Raw version resource data: 0x2a00b0 LB 0x3bc, codepage 0x0 (reserved 0x0)]
553954.4340: ProductName: Microsoft® Windows® Operating System
563954.4340: ProductVersion: 10.0.19041.1110
573954.4340: FileVersion: 10.0.19041.1110 (WinBuild.160101.0800)
583954.4340: FileDescription: Windows NT BASE API Client DLL
593954.4340: \SystemRoot\System32\apisetschema.dll:
603954.4340: CreationTime: 2019-12-07T09:08:13.518339400Z
613954.4340: LastWriteTime: 2019-12-07T09:08:13.518339400Z
623954.4340: ChangeTime: 2021-07-16T19:58:32.017539700Z
633954.4340: FileAttributes: 0x20
643954.4340: Size: 0x1f538
653954.4340: NT Headers: 0xd0
663954.4340: Timestamp: 0x31288ce0
673954.4340: Machine: 0x8664 - amd64
683954.4340: Timestamp: 0x31288ce0
693954.4340: Image Version: 10.0
703954.4340: SizeOfImage: 0x20000 (131072)
713954.4340: Resource Dir: 0x1f000 LB 0x408
723954.4340: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
733954.4340: [Raw version resource data: 0x1f060 LB 0x3a8, codepage 0x0 (reserved 0x0)]
743954.4340: ProductName: Microsoft® Windows® Operating System
753954.4340: ProductVersion: 10.0.19041.1
763954.4340: FileVersion: 10.0.19041.1 (WinBuild.160101.0800)
773954.4340: FileDescription: ApiSet Schema DLL
783954.4340: NtOpenDirectoryObject failed on \Driver: 0xc0000022
793954.4340: supR3HardenedWinFindAdversaries: 0x0
803954.4340: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox'
813954.4340: Calling main()
823954.4340: SUPR3HardenedMain: pszProgName=VirtualBoxVM fFlags=0x2
833954.4340: supR3HardenedWinInitAppBin(0x2): '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox'
843954.4340: SUPR3HardenedMain: Respawn #1
853954.4340: System32: \Device\HarddiskVolume3\Windows\System32
863954.4340: WinSxS: \Device\HarddiskVolume3\Windows\WinSxS
873954.4340: KnownDllPath: C:\WINDOWS\System32
883954.4340: supR3HardenedWinInit: Performing a limited self purification...
893954.4340: supHardNtVpScanVirtualMemory: enmKind=SELF_PURIFICATION
903954.4340: *0000000000000000-0000000000c7ffff 0x0001/0x0000 0x0000000
913954.4340: *0000000000c80000-0000000000c8ffff 0x0004/0x0004 0x0040000
923954.4340: 0000000000c90000-0000000000c9ffff 0x0001/0x0000 0x0000000
933954.4340: *0000000000ca0000-0000000000cbcfff 0x0002/0x0002 0x0040000
943954.4340: 0000000000cbd000-0000000000cbffff 0x0001/0x0000 0x0000000
953954.4340: *0000000000cc0000-0000000000d78fff 0x0000/0x0004 0x0020000
963954.4340: 0000000000d79000-0000000000d7bfff 0x0104/0x0004 0x0020000
973954.4340: 0000000000d7c000-0000000000dbffff 0x0004/0x0004 0x0020000
983954.4340: *0000000000dc0000-0000000000dc3fff 0x0002/0x0002 0x0040000
993954.4340: 0000000000dc4000-0000000000dcffff 0x0001/0x0000 0x0000000
1003954.4340: *0000000000dd0000-0000000000dd1fff 0x0004/0x0004 0x0020000
1013954.4340: 0000000000dd2000-0000000000dfffff 0x0001/0x0000 0x0000000
1023954.4340: *0000000000e00000-0000000000f9cfff 0x0000/0x0004 0x0020000
1033954.4340: 0000000000f9d000-0000000000f9ffff 0x0004/0x0004 0x0020000
1043954.4340: 0000000000fa0000-0000000000ffffff 0x0000/0x0004 0x0020000
1053954.4340: *0000000001000000-00000000010c8fff 0x0002/0x0002 0x0040000
1063954.4340: 00000000010c9000-00000000010cffff 0x0001/0x0000 0x0000000
1073954.4340: *00000000010d0000-00000000010d1fff 0x0004/0x0004 0x0020000
1083954.4340: 00000000010d2000-0000000001101fff 0x0000/0x0004 0x0020000
1093954.4340: 0000000001102000-00000000011bffff 0x0001/0x0000 0x0000000
1103954.4340: *00000000011c0000-00000000011cefff 0x0004/0x0004 0x0020000
1113954.4340: 00000000011cf000-00000000011cffff 0x0000/0x0004 0x0020000
1123954.4340: *00000000011d0000-00000000011d5fff 0x0004/0x0004 0x0020000
1133954.4340: 00000000011d6000-00000000012cffff 0x0000/0x0004 0x0020000
1143954.4340: *00000000012d0000-00000000012d0fff 0x0000/0x0004 0x0020000
1153954.4340: 00000000012d1000-00000000014c6fff 0x0004/0x0004 0x0020000
1163954.4340: 00000000014c7000-00000000014c7fff 0x0000/0x0004 0x0020000
1173954.4340: 00000000014c8000-00000000014cffff 0x0001/0x0000 0x0000000
1183954.4340: *00000000014d0000-00000000014f4fff 0x0004/0x0004 0x0020000
1193954.4340: 00000000014f5000-00000000015cffff 0x0000/0x0004 0x0020000
1203954.4340: 00000000015d0000-000000007ffdffff 0x0001/0x0000 0x0000000
1213954.4340: *000000007ffe0000-000000007ffe0fff 0x0002/0x0002 0x0020000
1223954.4340: 000000007ffe1000-000000007ffeafff 0x0001/0x0000 0x0000000
1233954.4340: *000000007ffeb000-000000007ffebfff 0x0002/0x0002 0x0020000
1243954.4340: 000000007ffec000-00007ff44a7affff 0x0001/0x0000 0x0000000
1253954.4340: *00007ff44a7b0000-00007ff44a7b4fff 0x0002/0x0002 0x0040000
1263954.4340: 00007ff44a7b5000-00007ff44a8affff 0x0000/0x0002 0x0040000
1273954.4340: *00007ff44a8b0000-00007ff54a8cffff 0x0000/0x0004 0x0020000
1283954.4340: *00007ff54a8d0000-00007ff54c8cffff 0x0000/0x0004 0x0020000
1293954.4340: 00007ff54c8d0000-00007ff54c8d0fff 0x0004/0x0004 0x0020000
1303954.4340: 00007ff54c8d1000-00007ff54c8dffff 0x0001/0x0000 0x0000000
1313954.4340: *00007ff54c8e0000-00007ff54c8e0fff 0x0002/0x0002 0x0040000
1323954.4340: 00007ff54c8e1000-00007ff54c8effff 0x0001/0x0000 0x0000000
1333954.4340: *00007ff54c8f0000-00007ff54c912fff 0x0002/0x0002 0x0040000
1343954.4340: 00007ff54c913000-00007ff74482ffff 0x0001/0x0000 0x0000000
1353954.4340: *00007ff744830000-00007ff744830fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
1363954.4340: 00007ff744831000-00007ff7448a7fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
1373954.4340: 00007ff7448a8000-00007ff7448a8fff 0x0080/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
1383954.4340: 00007ff7448a9000-00007ff7448f1fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
1393954.4340: 00007ff7448f2000-00007ff7448f4fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
1403954.4340: 00007ff7448f5000-00007ff7448f7fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
1413954.4340: 00007ff7448f8000-00007ff7448fafff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
1423954.4340: 00007ff7448fb000-00007ff7448fbfff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
1433954.4340: 00007ff7448fc000-00007ff7448fdfff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
1443954.4340: 00007ff7448fe000-00007ff7448fefff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
1453954.4340: 00007ff7448ff000-00007ff744947fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
1463954.4340: 00007ff744948000-00007ffcf554ffff 0x0001/0x0000 0x0000000
1473954.4340: *00007ffcf5550000-00007ffcf5550fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\KernelBase.dll
1483954.4340: 00007ffcf5551000-00007ffcf5662fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\KernelBase.dll
1493954.4340: 00007ffcf5663000-00007ffcf57dafff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\KernelBase.dll
1503954.4340: 00007ffcf57db000-00007ffcf57defff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\KernelBase.dll
1513954.4340: 00007ffcf57df000-00007ffcf57dffff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\KernelBase.dll
1523954.4340: 00007ffcf57e0000-00007ffcf5818fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\KernelBase.dll
1533954.4340: 00007ffcf5819000-00007ffcf75affff 0x0001/0x0000 0x0000000
1543954.4340: *00007ffcf75b0000-00007ffcf75b0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\kernel32.dll
1553954.4340: 00007ffcf75b1000-00007ffcf762efff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\kernel32.dll
1563954.4340: 00007ffcf762f000-00007ffcf7661fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\kernel32.dll
1573954.4340: 00007ffcf7662000-00007ffcf7662fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\kernel32.dll
1583954.4340: 00007ffcf7663000-00007ffcf7663fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\kernel32.dll
1593954.4340: 00007ffcf7664000-00007ffcf766cfff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\kernel32.dll
1603954.4340: 00007ffcf766d000-00007ffcf7aeffff 0x0001/0x0000 0x0000000
1613954.4340: *00007ffcf7af0000-00007ffcf7af0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
1623954.4340: 00007ffcf7af1000-00007ffcf7c0bfff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
1633954.4340: 00007ffcf7c0c000-00007ffcf7c53fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
1643954.4340: 00007ffcf7c54000-00007ffcf7c54fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
1653954.4340: 00007ffcf7c55000-00007ffcf7c56fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
1663954.4340: 00007ffcf7c57000-00007ffcf7c5ffff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
1673954.4340: 00007ffcf7c60000-00007ffcf7ce4fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
1683954.4340: 00007ffcf7ce5000-00007ffffffeffff 0x0001/0x0000 0x0000000
1693954.4340: kernel32.dll: timestamp 0x92f57b1a (rc=VINF_SUCCESS)
1703954.4340: kernelbase.dll: timestamp 0x4809adf2 (rc=VINF_SUCCESS)
1713954.4340: VirtualBoxVM.exe: timestamp 0x60f172fc (rc=VINF_SUCCESS)
1723954.4340: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe: Signature #1/2: info status: 24202
1733954.4340: '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe' has no imports
1743954.4340: '\Device\HarddiskVolume3\Windows\System32\ntdll.dll' has no imports
1753954.4340: supR3HardenedWinInit: SUPHARDNTVPKIND_SELF_PURIFICATION_LIMITED -> VINF_SUCCESS, cFixes=0
1763954.4340: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe: Signature #1/2: info status: 24202
1773954.4340: '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe' has no imports
1783954.4340: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe)
1793954.4340: supR3HardNtEnableThreadCreationEx:
1803954.4340: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007ffcf7b64b10 pvNtTerminateThread=00007ffcf7b8d870
1813954.4340: supR3HardenedWinDoReSpawn(1): New child 4cd4.46a8 [kernel32].
1823954.4340: supR3HardNtChildGatherData: PebBaseAddress=0000000000e0d000 cbPeb=0x388
1833954.4340: supR3HardNtPuChFindNtdll: uNtDllParentAddr=00007ffcf7af0000 uNtDllChildAddr=00007ffcf7af0000
1843954.4340: supR3HardenedWinSetupChildInit: uLdrInitThunk=00007ffcf7b64b10
1853954.4340: supR3HardenedWinSetupChildInit: Initial context:
186 rax=0000000000000000 rbx=0000000000000000 rcx=00007ff744837900 rdx=0000000000e0d000
187 rsi=0000000000000000 rdi=0000000000000000 r8 =0000000000000000 r9 =0000000000000000
188 r10=0000000000000000 r11=0000000000000000 r12=0000000000000000 r13=0000000000000000
189 r14=0000000000000000 r15=0000000000000000 P1=0000000000000000 P2=0000000000000000
190 rip=00007ffcf7b42630 rsp=0000000000d7ff28 rbp=0000000000000000 ctxflags=0010001b
191 cs=0033 ss=002b ds=0000 es=0000 fs=0000 gs=0000 eflags=00000200 mxcrx=00001f80
192 P3=0000000000000000 P4=0000000000000000 P5=0000000000000000 P6=0000000000000000
193 dr0=0000000000000000 dr1=0000000000000000 dr2=0000000000000000 dr3=0000000000000000
194 dr6=0000000000000000 dr7=0000000000000000 vcr=0000000000000000 dcr=0000000000000000
195 lbt=0000000000000000 lbf=0000000000000000 lxt=0000000000000000 lxf=0000000000000000
1963954.4340: supR3HardenedWinSetupChildInit: Start child.
1973954.4340: supR3HardNtChildWaitFor: Found expected request 0 (PurifyChildAndCloseHandles) after 0 ms.
1983954.4340: supR3HardNtChildPurify: Startup delay kludge #1/0: 261 ms, 17 sleeps
1993954.4340: supHardNtVpScanVirtualMemory: enmKind=CHILD_PURIFICATION
2003954.4340: *0000000000000000-0000000000c3ffff 0x0001/0x0000 0x0000000
2013954.4340: *0000000000c40000-0000000000c5ffff 0x0004/0x0004 0x0020000
2023954.4340: *0000000000c60000-0000000000c7cfff 0x0002/0x0002 0x0040000
2033954.4340: 0000000000c7d000-0000000000c7ffff 0x0001/0x0000 0x0000000
2043954.4340: *0000000000c80000-0000000000d7afff 0x0000/0x0004 0x0020000
2053954.4340: 0000000000d7b000-0000000000d7dfff 0x0104/0x0004 0x0020000
2063954.4340: 0000000000d7e000-0000000000d7ffff 0x0004/0x0004 0x0020000
2073954.4340: *0000000000d80000-0000000000d83fff 0x0002/0x0002 0x0040000
2083954.4340: 0000000000d84000-0000000000d8ffff 0x0001/0x0000 0x0000000
2093954.4340: *0000000000d90000-0000000000d91fff 0x0004/0x0004 0x0020000
2103954.4340: 0000000000d92000-0000000000dfffff 0x0001/0x0000 0x0000000
2113954.4340: *0000000000e00000-0000000000e0cfff 0x0000/0x0004 0x0020000
2123954.4340: 0000000000e0d000-0000000000e0ffff 0x0004/0x0004 0x0020000
2133954.4340: 0000000000e10000-0000000000ffffff 0x0000/0x0004 0x0020000
2143954.4340: 0000000001000000-000000007ffdffff 0x0001/0x0000 0x0000000
2153954.4340: *000000007ffe0000-000000007ffe0fff 0x0002/0x0002 0x0020000
2163954.4340: 000000007ffe1000-000000007ffeafff 0x0001/0x0000 0x0000000
2173954.4340: *000000007ffeb000-000000007ffebfff 0x0002/0x0002 0x0020000
2183954.4340: 000000007ffec000-00007ff5b0c5ffff 0x0001/0x0000 0x0000000
2193954.4340: *00007ff5b0c60000-00007ff5b0c60fff 0x0002/0x0002 0x0040000
2203954.4340: 00007ff5b0c61000-00007ff5b0c6ffff 0x0001/0x0000 0x0000000
2213954.4340: *00007ff5b0c70000-00007ff5b0c92fff 0x0002/0x0002 0x0040000
2223954.4340: 00007ff5b0c93000-00007ff74482ffff 0x0001/0x0000 0x0000000
2233954.4340: *00007ff744830000-00007ff744830fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
2243954.4340: 00007ff744831000-00007ff7448a7fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
2253954.4340: 00007ff7448a8000-00007ff7448a8fff 0x0080/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
2263954.4340: 00007ff7448a9000-00007ff7448f1fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
2273954.4340: 00007ff7448f2000-00007ff7448f2fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
2283954.4340: 00007ff7448f3000-00007ff7448f3fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
2293954.4340: 00007ff7448f4000-00007ff7448f8fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
2303954.4340: 00007ff7448f9000-00007ff7448f9fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
2313954.4340: 00007ff7448fa000-00007ff7448fafff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
2323954.4340: 00007ff7448fb000-00007ff7448fefff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
2333954.4340: 00007ff7448ff000-00007ff744947fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
2343954.4340: 00007ff744948000-00007ffcf7aeffff 0x0001/0x0000 0x0000000
2353954.4340: *00007ffcf7af0000-00007ffcf7af0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
2363954.4340: 00007ffcf7af1000-00007ffcf7c0bfff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
2373954.4340: 00007ffcf7c0c000-00007ffcf7c53fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
2383954.4340: 00007ffcf7c54000-00007ffcf7c5ffff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
2393954.4340: 00007ffcf7c60000-00007ffcf7c6efff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
2403954.4340: 00007ffcf7c6f000-00007ffcf7c6ffff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
2413954.4340: 00007ffcf7c70000-00007ffcf7c72fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
2423954.4340: 00007ffcf7c73000-00007ffcf7ce4fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
2433954.4340: 00007ffcf7ce5000-00007ffffffeffff 0x0001/0x0000 0x0000000
2443954.4340: supR3HardNtChildPurify: Done after 264 ms and 0 fixes (loop #0).
2454cd4.46a8: Log file opened: 6.1.24r145767 g_hStartupLog=0000000000000004 g_uNtVerCombined=0xa04a6300
2464cd4.46a8: supR3HardenedVmProcessInit: uNtDllAddr=00007ffcf7af0000 g_uNtVerCombined=0xa04a6300 (stack ~0000000000d7f9b8)
2474cd4.46a8: ntdll.dll: timestamp 0xe7a22463 (rc=VINF_SUCCESS)
2484cd4.46a8: New simple heap: #1 0000000001100000 LB 0x400000 (for 2052096 allocation)
2493954.4340: supR3HardNtEnableThreadCreationEx:
2504cd4.46a8: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox'
2514cd4.46a8: System32: \Device\HarddiskVolume3\Windows\System32
2524cd4.46a8: WinSxS: \Device\HarddiskVolume3\Windows\WinSxS
2534cd4.46a8: KnownDllPath: C:\WINDOWS\System32
2544cd4.46a8: supR3HardenedVmProcessInit: Opening vboxdrv stub...
2554cd4.46a8: supR3HardenedVmProcessInit: Restoring LdrInitializeThunk...
2564cd4.46a8: supR3HardenedVmProcessInit: Returning to LdrInitializeThunk...
2574cd4.46a8: Registered Dll notification callback with NTDLL.
2584cd4.46a8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\kernel32.dll)
2594cd4.46a8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\kernel32.dll
2604cd4.46a8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\KERNEL32.DLL (Input=KERNEL32.DLL, rcNtResolve=0xc0150008) *pfFlags=0xffffffff pwszSearchPath=0000000000004001:<flags> [calling]
2614cd4.46a8: supR3HardenedDllNotificationCallback: load 00007ffcf5550000 LB 0x002c9000 C:\WINDOWS\System32\KERNELBASE.dll [fFlags=0x0]
2624cd4.46a8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\KernelBase.dll)
2634cd4.46a8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\KernelBase.dll
2644cd4.46a8: supR3HardenedDllNotificationCallback: load 00007ffcf75b0000 LB 0x000bd000 C:\WINDOWS\System32\KERNEL32.DLL [fFlags=0x0]
2654cd4.46a8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
2664cd4.46a8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf75b0000 'C:\WINDOWS\System32\KERNEL32.DLL'
2674cd4.46a8: supR3HardenedDllNotificationCallback: load 00007ff744830000 LB 0x00118000 C:\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe [fFlags=0x0]
2684cd4.46a8: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe: Signature #1/2: info status: 24202
2694cd4.46a8: '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe' has no imports
2704cd4.46a8: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe)
2714cd4.46a8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
2724cd4.46a8: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007ffcf7b64b10 pvNtTerminateThread=00007ffcf7b8d870
2733954.4340: supR3HardNtChildWaitFor: Found expected request 1 (CloseEvents) after 105 ms.
2744cd4.46a8: \SystemRoot\System32\ntdll.dll:
2754cd4.46a8: CreationTime: 2021-07-16T19:57:59.442029900Z
2764cd4.46a8: LastWriteTime: 2021-07-16T19:57:59.488907200Z
2774cd4.46a8: ChangeTime: 2021-07-16T20:05:27.370785300Z
2784cd4.46a8: FileAttributes: 0x20
2794cd4.46a8: Size: 0x1ee508
2804cd4.46a8: NT Headers: 0xe8
2814cd4.46a8: Timestamp: 0xe7a22463
2824cd4.46a8: Machine: 0x8664 - amd64
2834cd4.46a8: Timestamp: 0xe7a22463
2844cd4.46a8: Image Version: 10.0
2854cd4.46a8: SizeOfImage: 0x1f5000 (2052096)
2864cd4.46a8: Resource Dir: 0x184000 LB 0x6fdc8
2874cd4.46a8: [Version info resource found at 0xd8! (ID/Name: 0x1; SubID/SubName: 0x409)]
2884cd4.46a8: [Raw version resource data: 0x1840f0 LB 0x380, codepage 0x0 (reserved 0x0)]
2894cd4.46a8: ProductName: Microsoft® Windows® Operating System
2904cd4.46a8: ProductVersion: 10.0.19041.1110
2914cd4.46a8: FileVersion: 10.0.19041.1110 (WinBuild.160101.0800)
2924cd4.46a8: FileDescription: NT Layer DLL
2934cd4.46a8: \SystemRoot\System32\kernel32.dll:
2944cd4.46a8: CreationTime: 2021-05-29T14:11:08.052431500Z
2954cd4.46a8: LastWriteTime: 2021-05-29T14:11:08.068094300Z
2964cd4.46a8: ChangeTime: 2021-07-16T20:05:27.167080400Z
2974cd4.46a8: FileAttributes: 0x20
2984cd4.46a8: Size: 0xbac20
2994cd4.46a8: NT Headers: 0xe8
3004cd4.46a8: Timestamp: 0x92f57b1a
3014cd4.46a8: Machine: 0x8664 - amd64
3024cd4.46a8: Timestamp: 0x92f57b1a
3034cd4.46a8: Image Version: 10.0
3044cd4.46a8: SizeOfImage: 0xbd000 (774144)
3054cd4.46a8: Resource Dir: 0xbb000 LB 0x520
3064cd4.46a8: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
3074cd4.46a8: [Raw version resource data: 0xbb0b0 LB 0x3a4, codepage 0x0 (reserved 0x0)]
3084cd4.46a8: ProductName: Microsoft® Windows® Operating System
3094cd4.46a8: ProductVersion: 10.0.19041.1023
3104cd4.46a8: FileVersion: 10.0.19041.1023 (WinBuild.160101.0800)
3114cd4.46a8: FileDescription: Windows NT BASE API Client DLL
3124cd4.46a8: \SystemRoot\System32\KernelBase.dll:
3134cd4.46a8: CreationTime: 2021-07-16T19:58:00.223418100Z
3144cd4.46a8: LastWriteTime: 2021-07-16T19:58:00.317173000Z
3154cd4.46a8: ChangeTime: 2021-07-16T20:05:27.417660500Z
3164cd4.46a8: FileAttributes: 0x20
3174cd4.46a8: Size: 0x2c9b88
3184cd4.46a8: NT Headers: 0xf8
3194cd4.46a8: Timestamp: 0x4809adf2
3204cd4.46a8: Machine: 0x8664 - amd64
3214cd4.46a8: Timestamp: 0x4809adf2
3224cd4.46a8: Image Version: 10.0
3234cd4.46a8: SizeOfImage: 0x2c9000 (2920448)
3244cd4.46a8: Resource Dir: 0x2a0000 LB 0x548
3254cd4.46a8: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
3264cd4.46a8: [Raw version resource data: 0x2a00b0 LB 0x3bc, codepage 0x0 (reserved 0x0)]
3274cd4.46a8: ProductName: Microsoft® Windows® Operating System
3284cd4.46a8: ProductVersion: 10.0.19041.1110
3294cd4.46a8: FileVersion: 10.0.19041.1110 (WinBuild.160101.0800)
3304cd4.46a8: FileDescription: Windows NT BASE API Client DLL
3314cd4.46a8: \SystemRoot\System32\apisetschema.dll:
3324cd4.46a8: CreationTime: 2019-12-07T09:08:13.518339400Z
3334cd4.46a8: LastWriteTime: 2019-12-07T09:08:13.518339400Z
3344cd4.46a8: ChangeTime: 2021-07-16T19:58:32.017539700Z
3354cd4.46a8: FileAttributes: 0x20
3364cd4.46a8: Size: 0x1f538
3374cd4.46a8: NT Headers: 0xd0
3384cd4.46a8: Timestamp: 0x31288ce0
3394cd4.46a8: Machine: 0x8664 - amd64
3404cd4.46a8: Timestamp: 0x31288ce0
3414cd4.46a8: Image Version: 10.0
3424cd4.46a8: SizeOfImage: 0x20000 (131072)
3434cd4.46a8: Resource Dir: 0x1f000 LB 0x408
3444cd4.46a8: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
3454cd4.46a8: [Raw version resource data: 0x1f060 LB 0x3a8, codepage 0x0 (reserved 0x0)]
3464cd4.46a8: ProductName: Microsoft® Windows® Operating System
3474cd4.46a8: ProductVersion: 10.0.19041.1
3484cd4.46a8: FileVersion: 10.0.19041.1 (WinBuild.160101.0800)
3494cd4.46a8: FileDescription: ApiSet Schema DLL
3504cd4.46a8: NtOpenDirectoryObject failed on \Driver: 0xc0000022
3514cd4.46a8: supR3HardenedWinFindAdversaries: 0x0
3524cd4.46a8: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox'
3534cd4.46a8: Calling main()
3544cd4.46a8: SUPR3HardenedMain: pszProgName=VirtualBoxVM fFlags=0x2
3554cd4.46a8: supR3HardenedWinInitAppBin(0x2): '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox'
3564cd4.46a8: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe: Signature #1/2: info status: 24202
3574cd4.46a8: '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe' has no imports
3584cd4.46a8: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe)
3594cd4.46a8: SUPR3HardenedMain: Respawn #2
3604cd4.46a8: supR3HardNtEnableThreadCreationEx:
3614cd4.46a8: supR3HardenedDllNotificationCallback: load 00007ffcf6750000 LB 0x0012a000 C:\WINDOWS\System32\RPCRT4.dll [fFlags=0x0]
3624cd4.46a8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll)
3634cd4.46a8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll
3644cd4.46a8: supR3HardenedDllNotificationCallback: load 00007ffcf7740000 LB 0x0009b000 C:\WINDOWS\System32\sechost.dll [fFlags=0x0]
3654cd4.46a8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'rpcrt4.dll'.
3664cd4.46a8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\sechost.dll)
3674cd4.46a8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\sechost.dll
3684cd4.46a8: '\Device\HarddiskVolume3\Windows\System32\ntdll.dll' has no imports
3694cd4.46a8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\ntdll.dll)
3704cd4.46a8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\ntdll.dll
3714cd4.46a8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
3724cd4.46a8: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
3734cd4.46a8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
3744cd4.46a8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\ntdll.dll (Input=ntdll.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
3754cd4.46a8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf7af0000 'C:\WINDOWS\System32\ntdll.dll'
3764cd4.46a8: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007ffcf7b64b10 pvNtTerminateThread=00007ffcf7b8d870
3774cd4.46a8: supR3HardenedWinDoReSpawn(2): New child 4394.3d90 [kernel32].
3784cd4.46a8: supR3HardenedWinReSpawn: NtSetInformationThread/ThreadHideFromDebugger failed: 0xc0000022 (harmless)
3794cd4.46a8: supR3HardNtChildGatherData: PebBaseAddress=00000000011b9000 cbPeb=0x388
3804cd4.46a8: supR3HardNtPuChFindNtdll: uNtDllParentAddr=00007ffcf7af0000 uNtDllChildAddr=00007ffcf7af0000
3814cd4.46a8: supR3HardenedWinSetupChildInit: uLdrInitThunk=00007ffcf7b64b10
3824cd4.46a8: supR3HardenedWinSetupChildInit: Initial context:
383 rax=0000000000000000 rbx=0000000000000000 rcx=00007ff744837900 rdx=00000000011b9000
384 rsi=0000000000000000 rdi=0000000000000000 r8 =0000000000000000 r9 =0000000000000000
385 r10=0000000000000000 r11=0000000000000000 r12=0000000000000000 r13=0000000000000000
386 r14=0000000000000000 r15=0000000000000000 P1=0000000000000000 P2=0000000000000000
387 rip=00007ffcf7b42630 rsp=00000000012fff78 rbp=0000000000000000 ctxflags=0010001b
388 cs=0033 ss=002b ds=0000 es=0000 fs=0000 gs=0000 eflags=00000200 mxcrx=00001f80
389 P3=0000000000000000 P4=0000000000000000 P5=0000000000000000 P6=0000000000000000
390 dr0=0000000000000000 dr1=0000000000000000 dr2=0000000000000000 dr3=0000000000000000
391 dr6=0000000000000000 dr7=0000000000000000 vcr=0000000000000000 dcr=0000000000000000
392 lbt=0000000000000000 lbf=0000000000000000 lxt=0000000000000000 lxf=0000000000000000
3934cd4.46a8: kernel32.dll: timestamp 0x92f57b1a (rc=VINF_SUCCESS)
3944cd4.46a8: supR3HardenedWinSetupChildInit: Start child.
3954cd4.46a8: supR3HardNtChildWaitFor: Found expected request 0 (PurifyChildAndCloseHandles) after 1 ms.
3964cd4.46a8: supR3HardNtChildPurify: Startup delay kludge #1/0: 260 ms, 17 sleeps
3974cd4.46a8: supHardNtVpScanVirtualMemory: enmKind=CHILD_PURIFICATION
3984cd4.46a8: *0000000000000000-0000000000f3ffff 0x0001/0x0000 0x0000000
3994cd4.46a8: *0000000000f40000-0000000000f5ffff 0x0004/0x0004 0x0020000
4004cd4.46a8: *0000000000f60000-0000000000f7cfff 0x0002/0x0002 0x0040000
4014cd4.46a8: 0000000000f7d000-0000000000f7ffff 0x0001/0x0000 0x0000000
4024cd4.46a8: *0000000000f80000-0000000000f83fff 0x0002/0x0002 0x0040000
4034cd4.46a8: 0000000000f84000-0000000000f8ffff 0x0001/0x0000 0x0000000
4044cd4.46a8: *0000000000f90000-0000000000f91fff 0x0004/0x0004 0x0020000
4054cd4.46a8: 0000000000f92000-0000000000ffffff 0x0001/0x0000 0x0000000
4064cd4.46a8: *0000000001000000-00000000011b8fff 0x0000/0x0004 0x0020000
4074cd4.46a8: 00000000011b9000-00000000011bbfff 0x0004/0x0004 0x0020000
4084cd4.46a8: 00000000011bc000-00000000011fffff 0x0000/0x0004 0x0020000
4094cd4.46a8: *0000000001200000-00000000012fafff 0x0000/0x0004 0x0020000
4104cd4.46a8: 00000000012fb000-00000000012fdfff 0x0104/0x0004 0x0020000
4114cd4.46a8: 00000000012fe000-00000000012fffff 0x0004/0x0004 0x0020000
4124cd4.46a8: 0000000001300000-000000007ffdffff 0x0001/0x0000 0x0000000
4134cd4.46a8: *000000007ffe0000-000000007ffe0fff 0x0002/0x0002 0x0020000
4144cd4.46a8: 000000007ffe1000-000000007ffeafff 0x0001/0x0000 0x0000000
4154cd4.46a8: *000000007ffeb000-000000007ffebfff 0x0002/0x0002 0x0020000
4164cd4.46a8: 000000007ffec000-00007ff5546bffff 0x0001/0x0000 0x0000000
4174cd4.46a8: *00007ff5546c0000-00007ff5546c0fff 0x0002/0x0002 0x0040000
4184cd4.46a8: 00007ff5546c1000-00007ff5546cffff 0x0001/0x0000 0x0000000
4194cd4.46a8: *00007ff5546d0000-00007ff5546f2fff 0x0002/0x0002 0x0040000
4204cd4.46a8: 00007ff5546f3000-00007ff74482ffff 0x0001/0x0000 0x0000000
4214cd4.46a8: *00007ff744830000-00007ff744830fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
4224cd4.46a8: 00007ff744831000-00007ff7448a7fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
4234cd4.46a8: 00007ff7448a8000-00007ff7448a8fff 0x0080/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
4244cd4.46a8: 00007ff7448a9000-00007ff7448f1fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
4254cd4.46a8: 00007ff7448f2000-00007ff7448f2fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
4264cd4.46a8: 00007ff7448f3000-00007ff7448f3fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
4274cd4.46a8: 00007ff7448f4000-00007ff7448f8fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
4284cd4.46a8: 00007ff7448f9000-00007ff7448f9fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
4294cd4.46a8: 00007ff7448fa000-00007ff7448fafff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
4304cd4.46a8: 00007ff7448fb000-00007ff7448fefff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
4314cd4.46a8: 00007ff7448ff000-00007ff744947fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
4324cd4.46a8: 00007ff744948000-00007ffcf7aeffff 0x0001/0x0000 0x0000000
4334cd4.46a8: *00007ffcf7af0000-00007ffcf7af0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
4344cd4.46a8: 00007ffcf7af1000-00007ffcf7c0bfff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
4354cd4.46a8: 00007ffcf7c0c000-00007ffcf7c53fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
4364cd4.46a8: 00007ffcf7c54000-00007ffcf7c5ffff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
4374cd4.46a8: 00007ffcf7c60000-00007ffcf7c6efff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
4384cd4.46a8: 00007ffcf7c6f000-00007ffcf7c6ffff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
4394cd4.46a8: 00007ffcf7c70000-00007ffcf7c72fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
4404cd4.46a8: 00007ffcf7c73000-00007ffcf7ce4fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
4414cd4.46a8: 00007ffcf7ce5000-00007ffffffeffff 0x0001/0x0000 0x0000000
4424cd4.46a8: VirtualBoxVM.exe: timestamp 0x60f172fc (rc=VINF_SUCCESS)
4434cd4.46a8: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe: Signature #1/2: info status: 24202
4444cd4.46a8: '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe' has no imports
4454cd4.46a8: '\Device\HarddiskVolume3\Windows\System32\ntdll.dll' has no imports
4464cd4.46a8: supR3HardNtChildPurify: Done after 304 ms and 0 fixes (loop #0).
4474394.3d90: Log file opened: 6.1.24r145767 g_hStartupLog=0000000000000004 g_uNtVerCombined=0xa04a6300
4484394.3d90: supR3HardenedVmProcessInit: uNtDllAddr=00007ffcf7af0000 g_uNtVerCombined=0xa04a6300 (stack ~00000000012ffa08)
4494cd4.46a8: supR3HardenedEarlyCompact: Removed heap 1 (0x00000001100000 LB 0x400000)
4504394.3d90: ntdll.dll: timestamp 0xe7a22463 (rc=VINF_SUCCESS)
4514394.3d90: New simple heap: #1 0000000001400000 LB 0x400000 (for 2052096 allocation)
4524cd4.46a8: supR3HardNtEnableThreadCreationEx:
4534394.3d90: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox'
4544394.3d90: System32: \Device\HarddiskVolume3\Windows\System32
4554394.3d90: WinSxS: \Device\HarddiskVolume3\Windows\WinSxS
4564394.3d90: KnownDllPath: C:\WINDOWS\System32
4574394.3d90: supR3HardenedVmProcessInit: Opening vboxdrv...
4584394.3d90: supR3HardenedVmProcessInit: Restoring LdrInitializeThunk...
4594394.3d90: supR3HardenedVmProcessInit: Returning to LdrInitializeThunk...
4604394.3d90: Registered Dll notification callback with NTDLL.
4614394.3d90: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\kernel32.dll)
4624394.3d90: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\kernel32.dll
4634394.3d90: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\KERNEL32.DLL (Input=KERNEL32.DLL, rcNtResolve=0xc0150008) *pfFlags=0xffffffff pwszSearchPath=0000000000004001:<flags> [calling]
4644394.3d90: supR3HardenedDllNotificationCallback: load 00007ffcf5550000 LB 0x002c9000 C:\WINDOWS\System32\KERNELBASE.dll [fFlags=0x0]
4654394.3d90: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\KernelBase.dll)
4664394.3d90: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\KernelBase.dll
4674394.3d90: supR3HardenedDllNotificationCallback: load 00007ffcf75b0000 LB 0x000bd000 C:\WINDOWS\System32\KERNEL32.DLL [fFlags=0x0]
4684394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
4694394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf75b0000 'C:\WINDOWS\System32\KERNEL32.DLL'
4704394.3d90: supR3HardenedDllNotificationCallback: load 00007ff744830000 LB 0x00118000 C:\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe [fFlags=0x0]
4714394.3d90: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe: Signature #1/2: info status: 24202
4724394.3d90: '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe' has no imports
4734394.3d90: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe)
4744394.3d90: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
4754394.3d90: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007ffcf7b64b10 pvNtTerminateThread=00007ffcf7b8d870
4764cd4.46a8: supR3HardNtChildWaitFor: Found expected request 1 (CloseEvents) after 122 ms.
4774394.3d90: \SystemRoot\System32\ntdll.dll:
4784394.3d90: CreationTime: 2021-07-16T19:57:59.442029900Z
4794394.3d90: LastWriteTime: 2021-07-16T19:57:59.488907200Z
4804394.3d90: ChangeTime: 2021-07-16T20:05:27.370785300Z
4814394.3d90: FileAttributes: 0x20
4824394.3d90: Size: 0x1ee508
4834394.3d90: NT Headers: 0xe8
4844394.3d90: Timestamp: 0xe7a22463
4854394.3d90: Machine: 0x8664 - amd64
4864394.3d90: Timestamp: 0xe7a22463
4874394.3d90: Image Version: 10.0
4884394.3d90: SizeOfImage: 0x1f5000 (2052096)
4894394.3d90: Resource Dir: 0x184000 LB 0x6fdc8
4904394.3d90: [Version info resource found at 0xd8! (ID/Name: 0x1; SubID/SubName: 0x409)]
4914394.3d90: [Raw version resource data: 0x1840f0 LB 0x380, codepage 0x0 (reserved 0x0)]
4924394.3d90: ProductName: Microsoft® Windows® Operating System
4934394.3d90: ProductVersion: 10.0.19041.1110
4944394.3d90: FileVersion: 10.0.19041.1110 (WinBuild.160101.0800)
4954394.3d90: FileDescription: NT Layer DLL
4964394.3d90: \SystemRoot\System32\kernel32.dll:
4974394.3d90: CreationTime: 2021-05-29T14:11:08.052431500Z
4984394.3d90: LastWriteTime: 2021-05-29T14:11:08.068094300Z
4994394.3d90: ChangeTime: 2021-07-16T20:05:27.167080400Z
5004394.3d90: FileAttributes: 0x20
5014394.3d90: Size: 0xbac20
5024394.3d90: NT Headers: 0xe8
5034394.3d90: Timestamp: 0x92f57b1a
5044394.3d90: Machine: 0x8664 - amd64
5054394.3d90: Timestamp: 0x92f57b1a
5064394.3d90: Image Version: 10.0
5074394.3d90: SizeOfImage: 0xbd000 (774144)
5084394.3d90: Resource Dir: 0xbb000 LB 0x520
5094394.3d90: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
5104394.3d90: [Raw version resource data: 0xbb0b0 LB 0x3a4, codepage 0x0 (reserved 0x0)]
5114394.3d90: ProductName: Microsoft® Windows® Operating System
5124394.3d90: ProductVersion: 10.0.19041.1023
5134394.3d90: FileVersion: 10.0.19041.1023 (WinBuild.160101.0800)
5144394.3d90: FileDescription: Windows NT BASE API Client DLL
5154394.3d90: \SystemRoot\System32\KernelBase.dll:
5164394.3d90: CreationTime: 2021-07-16T19:58:00.223418100Z
5174394.3d90: LastWriteTime: 2021-07-16T19:58:00.317173000Z
5184394.3d90: ChangeTime: 2021-07-16T20:05:27.417660500Z
5194394.3d90: FileAttributes: 0x20
5204394.3d90: Size: 0x2c9b88
5214394.3d90: NT Headers: 0xf8
5224394.3d90: Timestamp: 0x4809adf2
5234394.3d90: Machine: 0x8664 - amd64
5244394.3d90: Timestamp: 0x4809adf2
5254394.3d90: Image Version: 10.0
5264394.3d90: SizeOfImage: 0x2c9000 (2920448)
5274394.3d90: Resource Dir: 0x2a0000 LB 0x548
5284394.3d90: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
5294394.3d90: [Raw version resource data: 0x2a00b0 LB 0x3bc, codepage 0x0 (reserved 0x0)]
5304394.3d90: ProductName: Microsoft® Windows® Operating System
5314394.3d90: ProductVersion: 10.0.19041.1110
5324394.3d90: FileVersion: 10.0.19041.1110 (WinBuild.160101.0800)
5334394.3d90: FileDescription: Windows NT BASE API Client DLL
5344394.3d90: \SystemRoot\System32\apisetschema.dll:
5354394.3d90: CreationTime: 2019-12-07T09:08:13.518339400Z
5364394.3d90: LastWriteTime: 2019-12-07T09:08:13.518339400Z
5374394.3d90: ChangeTime: 2021-07-16T19:58:32.017539700Z
5384394.3d90: FileAttributes: 0x20
5394394.3d90: Size: 0x1f538
5404394.3d90: NT Headers: 0xd0
5414394.3d90: Timestamp: 0x31288ce0
5424394.3d90: Machine: 0x8664 - amd64
5434394.3d90: Timestamp: 0x31288ce0
5444394.3d90: Image Version: 10.0
5454394.3d90: SizeOfImage: 0x20000 (131072)
5464394.3d90: Resource Dir: 0x1f000 LB 0x408
5474394.3d90: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
5484394.3d90: [Raw version resource data: 0x1f060 LB 0x3a8, codepage 0x0 (reserved 0x0)]
5494394.3d90: ProductName: Microsoft® Windows® Operating System
5504394.3d90: ProductVersion: 10.0.19041.1
5514394.3d90: FileVersion: 10.0.19041.1 (WinBuild.160101.0800)
5524394.3d90: FileDescription: ApiSet Schema DLL
5534394.3d90: NtOpenDirectoryObject failed on \Driver: 0xc0000022
5544394.3d90: supR3HardenedWinFindAdversaries: 0x0
5554394.3d90: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox'
5564394.3d90: Calling main()
5574394.3d90: SUPR3HardenedMain: pszProgName=VirtualBoxVM fFlags=0x2
5584394.3d90: supR3HardenedWinInitAppBin(0x2): '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox'
5594394.3d90: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe: Signature #1/2: info status: 24202
5604394.3d90: '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe' has no imports
5614394.3d90: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe)
5624394.3d90: SUPR3HardenedMain: Final process, opening VBoxDrv...
5634394.3d90: supR3HardenedEarlyCompact: Removed heap 1 (0x00000001400000 LB 0x400000)
5644394.3d90: supR3HardNtEnableThreadCreationEx:
5654394.3d90: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxSupLib.dll: Signature #1/2: info status: 24202
5664394.3d90: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxSupLib.dll)
5674394.3d90: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxSupLib.dll
5684394.3d90: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
5694394.3d90: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxSupLib.dll [lacks WinVerifyTrust]
5704394.3d90: supR3HardenedDllNotificationCallback: load 00007ffcf0f10000 LB 0x00005000 C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL [fFlags=0x0]
5714394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxSupLib.dll [lacks WinVerifyTrust]
5724394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxSupLib.dll [lacks WinVerifyTrust]
5734394.3d90: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
5744394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf0f10000 'C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL'
5754394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxSupLib.dll [lacks WinVerifyTrust]
5764394.3d90: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
5774394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf0f10000 'C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL'
5784394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf0f10000 'C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL'
5794394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
5804394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #26 'rpcrt4.dll'.
5814394.3d90: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\wintrust.dll)
5824394.3d90: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\wintrust.dll
5834394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
5844394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
5854394.3d90: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll)
5864394.3d90: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll
5874394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
5884394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
5894394.3d90: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\msvcrt.dll)
5904394.3d90: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\msvcrt.dll
5914394.3d90: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\Wintrust.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
5924394.3d90: supR3HardenedDllNotificationCallback: load 00007ffcf6dd0000 LB 0x0009e000 C:\WINDOWS\System32\msvcrt.dll [fFlags=0x0]
5934394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
5944394.3d90: supR3HardenedDllNotificationCallback: load 00007ffcf6750000 LB 0x0012a000 C:\WINDOWS\System32\RPCRT4.dll [fFlags=0x0]
5954394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
5964394.3d90: supR3HardenedDllNotificationCallback: load 00007ffcf5390000 LB 0x00060000 C:\WINDOWS\System32\Wintrust.dll [fFlags=0x0]
5974394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
5984394.3d90: supR3HardenedDllNotificationCallback: load 00007ffcf59e0000 LB 0x00100000 C:\WINDOWS\System32\ucrtbase.dll [fFlags=0x0]
5994394.3d90: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\ucrtbase.dll)
6004394.3d90: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll
6014394.3d90: supR3HardenedDllNotificationCallback: load 00007ffcf53f0000 LB 0x0015f000 C:\WINDOWS\System32\CRYPT32.dll [fFlags=0x0]
6024394.3d90: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\crypt32.dll)
6034394.3d90: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\crypt32.dll
6044394.3d90: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-synch-l1-2-0) -> 0x0, fPresent=1
6054394.3d90: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-synch-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
6064394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf5550000 'api-ms-win-core-synch-l1-2-0'
6074394.3d90: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-fibers-l1-1-1) -> 0x0, fPresent=1
6084394.3d90: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-fibers-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
6094394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf5550000 'api-ms-win-core-fibers-l1-1-1'
6104394.3d90: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-fibers-l1-1-1) -> 0x0, fPresent=1
6114394.3d90: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-fibers-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
6124394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf5550000 'api-ms-win-core-fibers-l1-1-1'
6134394.3d90: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-synch-l1-2-0) -> 0x0, fPresent=1
6144394.3d90: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-synch-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
6154394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf5550000 'api-ms-win-core-synch-l1-2-0'
6164394.3d90: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-localization-l1-2-1) -> 0x0, fPresent=1
6174394.3d90: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-l1-2-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
6184394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf5550000 'api-ms-win-core-localization-l1-2-1'
6194394.3d90: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\msasn1.dll)
6204394.3d90: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\msasn1.dll
6214394.3d90: supR3HardenedDllNotificationCallback: load 00007ffcf4e20000 LB 0x00012000 C:\WINDOWS\SYSTEM32\MSASN1.dll [fFlags=0x0]
6224394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msasn1.dll [lacks WinVerifyTrust]
6234394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf5390000 'C:\WINDOWS\system32\Wintrust.dll'
6244394.3d90: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\bcrypt.dll)
6254394.3d90: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\bcrypt.dll
6264394.3d90: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\bcrypt.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
6274394.3d90: supR3HardenedDllNotificationCallback: load 00007ffcf5b30000 LB 0x00027000 C:\WINDOWS\System32\bcrypt.dll [fFlags=0x0]
6284394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\bcrypt.dll [lacks WinVerifyTrust]
6294394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf5b30000 'C:\WINDOWS\system32\bcrypt.dll'
6304394.3d90: bcrypt.dll loaded at 00007ffcf5b30000, BCryptOpenAlgorithmProvider at 00007ffcf5b351e0, preloading providers:
6314394.3d90: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll)
6324394.3d90: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll
6334394.3d90: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\bcryptprimitives.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
6344394.3d90: supR3HardenedDllNotificationCallback: load 00007ffcf5260000 LB 0x00083000 C:\WINDOWS\System32\bcryptprimitives.dll [fFlags=0x0]
6354394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll [lacks WinVerifyTrust]
6364394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf5260000 'C:\WINDOWS\system32\bcryptprimitives.dll'
6374394.3d90: BCryptOpenAlgorithmProvider(,'MD2',0,0) -> 0x0 (hAlgo=0000000001980ff0)
6384394.3d90: BCryptOpenAlgorithmProvider(,'MD4',0,0) -> 0x0 (hAlgo=0000000001981560)
6394394.3d90: BCryptOpenAlgorithmProvider(,'MD5',0,0) -> 0x0 (hAlgo=0000000001981880)
6404394.3d90: BCryptOpenAlgorithmProvider(,'SHA1',0,0) -> 0x0 (hAlgo=0000000001981ba0)
6414394.3d90: BCryptOpenAlgorithmProvider(,'SHA256',0,0) -> 0x0 (hAlgo=0000000001981ec0)
6424394.3d90: BCryptOpenAlgorithmProvider(,'SHA512',0,0) -> 0x0 (hAlgo=00000000019821e0)
6434394.3d90: BCryptOpenAlgorithmProvider(,'RSA',0,0) -> 0x0 (hAlgo=0000000001982500)
6444394.3d90: BCryptOpenAlgorithmProvider(,'DSA',0,0) -> 0x0 (hAlgo=0000000001983900)
6454394.3d90: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\cryptsp.dll)
6464394.3d90: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\cryptsp.dll
6474394.3d90: supR3HardenedDllNotificationCallback: load 00007ffcf4c00000 LB 0x00018000 C:\WINDOWS\SYSTEM32\CRYPTSP.dll [fFlags=0x0]
6484394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\cryptsp.dll [lacks WinVerifyTrust]
6494394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #18 'bcrypt.dll'.
6504394.3d90: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\rsaenh.dll)
6514394.3d90: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
6524394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcrypt.dll'...
6534394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcrypt.dll' -> '\Device\HarddiskVolume3\Windows\System32\bcrypt.dll' [rcNtRedir=0xc0150008]
6544394.3d90: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\bcrypt.dll [lacks WinVerifyTrust]
6554394.3d90: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
6564394.3d90: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
6574394.3d90: supR3HardenedDllNotificationCallback: load 00007ffcf42f0000 LB 0x00034000 C:\WINDOWS\system32\rsaenh.dll [fFlags=0x0]
6584394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
6594394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf42f0000 'C:\WINDOWS\system32\rsaenh.dll'
6604394.3d90: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\cryptbase.dll)
6614394.3d90: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\cryptbase.dll
6624394.3d90: supR3HardenedDllNotificationCallback: load 00007ffcf4b20000 LB 0x0000c000 C:\WINDOWS\SYSTEM32\CRYPTBASE.dll [fFlags=0x0]
6634394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\cryptbase.dll [lacks WinVerifyTrust]
6644394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
6654394.3d90: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\kernel32.dll (Input=kernel32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
6664394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf75b0000 'C:\WINDOWS\System32\kernel32.dll'
6674394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
6684394.3d90: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\WINTRUST.DLL (Input=WINTRUST.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
6694394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf5390000 'C:\WINDOWS\System32\WINTRUST.DLL'
6704394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll [lacks WinVerifyTrust]
6714394.3d90: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\CRYPT32.dll (rcNtResolve=0xc0150008) *pfFlags=0x2 pwszSearchPath=0000000000000001:<flags> [calling]
6724394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf53f0000 'C:\WINDOWS\System32\CRYPT32.dll'
6734394.3d90: supR3HardenedDllNotificationCallback: load 00007ffcf6730000 LB 0x0001d000 C:\WINDOWS\System32\imagehlp.dll [fFlags=0x0]
6744394.3d90: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\imagehlp.dll)
6754394.3d90: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\imagehlp.dll
6764394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
6774394.3d90: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
6784394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf42f0000 'C:\WINDOWS\system32\rsaenh.dll'
6794394.3d90: supR3HardenedDllNotificationCallback: load 00007ffcf7740000 LB 0x0009b000 C:\WINDOWS\System32\sechost.dll [fFlags=0x0]
6804394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'rpcrt4.dll'.
6814394.3d90: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\sechost.dll)
6824394.3d90: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\sechost.dll
6834394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
6844394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'rpcrt4.dll'.
6854394.3d90: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\gpapi.dll)
6864394.3d90: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\gpapi.dll
6874394.3d90: supR3HardenedDllNotificationCallback: load 00007ffcf3a90000 LB 0x00023000 C:\WINDOWS\SYSTEM32\gpapi.dll [fFlags=0x0]
6884394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gpapi.dll [lacks WinVerifyTrust]
6894394.3d90: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\profapi.dll)
6904394.3d90: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\profapi.dll
6914394.3d90: supR3HardenedDllNotificationCallback: load 00007ffcf5170000 LB 0x0001f000 C:\WINDOWS\SYSTEM32\profapi.dll [fFlags=0x0]
6924394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\profapi.dll [lacks WinVerifyTrust]
6934394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
6944394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'crypt32.dll'.
6954394.3d90: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\cryptnet.dll)
6964394.3d90: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\cryptnet.dll
6974394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'crypt32.dll'...
6984394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'crypt32.dll' -> '\Device\HarddiskVolume3\Windows\System32\crypt32.dll' [rcNtRedir=0xc0150008]
6994394.3d90: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll [lacks WinVerifyTrust]
7004394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
7014394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
7024394.3d90: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
7034394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
7044394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
7054394.3d90: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
7064394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
7074394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
7084394.3d90: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
7094394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
7104394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
7114394.3d90: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
7124394.3d90: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\cryptnet.dll (Input=cryptnet.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
7134394.3d90: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
7144394.3d90: supR3HardenedDllNotificationCallback: load 00007ffceba20000 LB 0x00031000 C:\WINDOWS\System32\cryptnet.dll [fFlags=0x0]
7154394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
7164394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
7174394.3d90: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x2 pwszSearchPath=0000000000000001:<flags> [calling]
7184394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffceba20000 'C:\WINDOWS\System32\cryptnet.dll'
7194394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
7204394.3d90: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x2 pwszSearchPath=0000000000000001:<flags> [calling]
7214394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffceba20000 'C:\WINDOWS\System32\cryptnet.dll'
7224394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
7234394.3d90: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x2 pwszSearchPath=0000000000000001:<flags> [calling]
7244394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffceba20000 'C:\WINDOWS\System32\cryptnet.dll'
7254394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
7264394.3d90: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x2 pwszSearchPath=0000000000000001:<flags> [calling]
7274394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffceba20000 'C:\WINDOWS\System32\cryptnet.dll'
7284394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
7294394.3d90: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x2 pwszSearchPath=0000000000000001:<flags> [calling]
7304394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffceba20000 'C:\WINDOWS\System32\cryptnet.dll'
7314394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
7324394.3d90: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x2 pwszSearchPath=0000000000000001:<flags> [calling]
7334394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffceba20000 'C:\WINDOWS\System32\cryptnet.dll'
7344394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
7354394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffceba20000 'C:\WINDOWS\System32\cryptnet.dll'
7364394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
7374394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffceba20000 'C:\WINDOWS\System32\cryptnet.dll'
7384394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
7394394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffceba20000 'C:\WINDOWS\System32\cryptnet.dll'
7404394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
7414394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffceba20000 'C:\WINDOWS\System32\cryptnet.dll'
7424394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
7434394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffceba20000 'C:\WINDOWS\System32\cryptnet.dll'
7444394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffceba20000 'C:\WINDOWS\System32\cryptnet.dll'
7454394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
7464394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffceba20000 'C:\Windows\System32\cryptnet.dll'
7474394.3d90: supR3HardenedDllNotificationCallback: load 00007ffcf64e0000 LB 0x000ac000 C:\WINDOWS\System32\advapi32.dll [fFlags=0x0]
7484394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
7494394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'sechost.dll'.
7504394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #27 'rpcrt4.dll'.
7514394.3d90: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\advapi32.dll)
7524394.3d90: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\advapi32.dll
7534394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
7544394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
7554394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
7564394.3d90: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
7574394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'sechost.dll'...
7584394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'sechost.dll' -> '\Device\HarddiskVolume3\Windows\System32\sechost.dll' [rcNtRedir=0xc0150008]
7594394.3d90: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\sechost.dll [lacks WinVerifyTrust]
7604394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
7614394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
7624394.3d90: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
7634394.3d90: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
7644394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf42f0000 'C:\WINDOWS\system32\rsaenh.dll'
7654394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll [lacks WinVerifyTrust]
7664394.3d90: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\crypt32.dll (Input=crypt32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
7674394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf53f0000 'C:\WINDOWS\System32\crypt32.dll'
7684394.3d90: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000000 pwszName=\SystemRoot\System32\ntdll.dll
7694394.3d90: supR3HardNtViCallWinVerifyTrustCatFile: New context 0000000001a32940
7704394.3d90: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000001a32940
7714394.3d90: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=1EF05E82E192022E0A58F0B07902B00640F16720
7724394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
7734394.3d90: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\rpcrt4.dll (Input=rpcrt4.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
7744394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6750000 'C:\WINDOWS\System32\rpcrt4.dll'
7754394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
7764394.3d90: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
7774394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf42f0000 'C:\WINDOWS\system32\rsaenh.dll'
7784394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll [lacks WinVerifyTrust]
7794394.3d90: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\crypt32.dll (Input=crypt32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
7804394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf53f0000 'C:\WINDOWS\System32\crypt32.dll'
7814394.3d90: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.19041.1110.cat'; file='\SystemRoot\System32\ntdll.dll'
7824394.3d90: g_pfnWinVerifyTrust=00007ffcf5391da0
7834394.3d90: supR3HardenedScreenImage/preload: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll [redoing WinVerifyTrust]
7844394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
7854394.3d90: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
7864394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf42f0000 'C:\WINDOWS\system32\rsaenh.dll'
7874394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll [lacks WinVerifyTrust]
7884394.3d90: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\crypt32.dll (Input=crypt32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
7894394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf53f0000 'C:\WINDOWS\System32\crypt32.dll'
7904394.3d90: supR3HardenedScreenImage/preload: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\crypt32.dll'
7914394.3d90: supR3HardenedScreenImage/preload: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wintrust.dll [redoing WinVerifyTrust]
7924394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
7934394.3d90: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
7944394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf42f0000 'C:\WINDOWS\system32\rsaenh.dll'
7954394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll
7964394.3d90: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\crypt32.dll (Input=crypt32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
7974394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf53f0000 'C:\WINDOWS\System32\crypt32.dll'
7984394.3d90: supR3HardenedScreenImage/preload: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\wintrust.dll'
7994394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
8004394.3d90: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
8014394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf42f0000 'C:\WINDOWS\system32\rsaenh.dll'
8024394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll
8034394.3d90: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\crypt32.dll (Input=crypt32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
8044394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf53f0000 'C:\WINDOWS\System32\crypt32.dll'
8054394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\advapi32.dll'
8064394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
8074394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf42f0000 'C:\WINDOWS\system32\rsaenh.dll'
8084394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf53f0000 'C:\WINDOWS\System32\crypt32.dll'
8094394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\cryptnet.dll'
8104394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
8114394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf42f0000 'C:\WINDOWS\system32\rsaenh.dll'
8124394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf53f0000 'C:\WINDOWS\System32\crypt32.dll'
8134394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\profapi.dll'
8144394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
8154394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf42f0000 'C:\WINDOWS\system32\rsaenh.dll'
8164394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf53f0000 'C:\WINDOWS\System32\crypt32.dll'
8174394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\gpapi.dll'
8184394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
8194394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf42f0000 'C:\WINDOWS\system32\rsaenh.dll'
8204394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf53f0000 'C:\WINDOWS\System32\crypt32.dll'
8214394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\sechost.dll'
8224394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
8234394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf42f0000 'C:\WINDOWS\system32\rsaenh.dll'
8244394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf53f0000 'C:\WINDOWS\System32\crypt32.dll'
8254394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\imagehlp.dll'
8264394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
8274394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf42f0000 'C:\WINDOWS\system32\rsaenh.dll'
8284394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf53f0000 'C:\WINDOWS\System32\crypt32.dll'
8294394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\cryptbase.dll'
8304394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
8314394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf42f0000 'C:\WINDOWS\system32\rsaenh.dll'
8324394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf53f0000 'C:\WINDOWS\System32\crypt32.dll'
8334394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\rsaenh.dll'
8344394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
8354394.3d90: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
8364394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf42f0000 'C:\WINDOWS\system32\rsaenh.dll'
8374394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll
8384394.3d90: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\crypt32.dll (Input=crypt32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
8394394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf53f0000 'C:\WINDOWS\System32\crypt32.dll'
8404394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\cryptsp.dll'
8414394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf42f0000 'C:\WINDOWS\system32\rsaenh.dll'
8424394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf53f0000 'C:\WINDOWS\System32\crypt32.dll'
8434394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll'
8444394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf42f0000 'C:\WINDOWS\system32\rsaenh.dll'
8454394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf53f0000 'C:\WINDOWS\System32\crypt32.dll'
8464394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\bcrypt.dll'
8474394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf42f0000 'C:\WINDOWS\system32\rsaenh.dll'
8484394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf53f0000 'C:\WINDOWS\System32\crypt32.dll'
8494394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\msasn1.dll'
8504394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf42f0000 'C:\WINDOWS\system32\rsaenh.dll'
8514394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf53f0000 'C:\WINDOWS\System32\crypt32.dll'
8524394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\ucrtbase.dll'
8534394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf42f0000 'C:\WINDOWS\system32\rsaenh.dll'
8544394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf53f0000 'C:\WINDOWS\System32\crypt32.dll'
8554394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll'
8564394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf42f0000 'C:\WINDOWS\system32\rsaenh.dll'
8574394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf53f0000 'C:\WINDOWS\System32\crypt32.dll'
8584394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll'
8594394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf42f0000 'C:\WINDOWS\system32\rsaenh.dll'
8604394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 24202) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxSupLib.dll'
8614394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf42f0000 'C:\WINDOWS\system32\rsaenh.dll'
8624394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 24202) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe'
8634394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf42f0000 'C:\WINDOWS\system32\rsaenh.dll'
8644394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf53f0000 'C:\WINDOWS\System32\crypt32.dll'
8654394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\KernelBase.dll'
8664394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf42f0000 'C:\WINDOWS\system32\rsaenh.dll'
8674394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf53f0000 'C:\WINDOWS\System32\crypt32.dll'
8684394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\kernel32.dll'
8694394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf53f0000 'C:\WINDOWS\system32\crypt32.dll'
8704394.3d90: supR3HardenedWinIsDesiredRootCA: Adding 0xba02d0ab12c5ed00 CN=XBL Client IPsec Issuing CA
8714394.3d90: supR3HardenedWinIsDesiredRootCA: Adding 0x956bf510b241fa00 CN=tysonite-msi
8724394.3d90: supR3HardenedWinIsDesiredRootCA: Adding 0x5ad46780fa5df300 DC=com, DC=microsoft, CN=Microsoft Root Certificate Authority
8734394.3d90: supR3HardenedWinIsDesiredRootCA: Adding 0xea5386456178582b C=ZA, ST=Western Cape, L=Durbanville, O=Thawte, OU=Thawte Certification, CN=Thawte Timestamping CA
8744394.3d90: supR3HardenedWinIsDesiredRootCA: Adding 0xc7c90c8896615d22 CN=tysonite-msi
8754394.3d90: supR3HardenedWinIsDesiredRootCA: Adding 0x65ddb554e09de319 CN=tysonite-msi
8764394.3d90: supR3HardenedWinIsDesiredRootCA: Adding 0xc0c7664932324abe CN=tysonite-msi
8774394.3d90: supR3HardenedWinIsDesiredRootCA: Adding 0x3be670c1bd02a900 OU=Copyright (c) 1997 Microsoft Corp., OU=Microsoft Corporation, CN=Microsoft Root Authority
8784394.3d90: supR3HardenedWinIsDesiredRootCA: Adding 0xe991ee72b03db500 C=US, O=Symantec Corporation, CN=Symantec Enterprise Mobile Root for Microsoft
8794394.3d90: supR3HardenedWinIsDesiredRootCA: Adding 0x4d3835aa4180b200 C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Root Certificate Authority 2011
8804394.3d90: supR3HardenedWinIsDesiredRootCA: Adding 0x646e3fe3ba08df00 C=US, O=MSFT, CN=Microsoft Authenticode(tm) Root Authority
8814394.3d90: supR3HardenedWinIsDesiredRootCA: Adding 0x9546d06a8d70b800 CN=XBL Server IPsec Issuing CA
8824394.3d90: supR3HardenedWinIsDesiredRootCA: Adding 0xece4e4289e08b900 C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Root Certificate Authority 2010
8834394.3d90: supR3HardenedWinIsDesiredRootCA: Adding 0xf3bb4d7e894b420 C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft ECC TS Root Certificate Authority 2018
8844394.3d90: supR3HardenedWinIsDesiredRootCA: Adding 0x43a9cc371ff5385a O=Microsoft Trust Network, OU=Microsoft Corporation, OU=Microsoft Time Stamping Service Root, OU=Copyright (c) 1997 Microsoft Corp.
8854394.3d90: supR3HardenedWinIsDesiredRootCA: Adding 0x2e2d2c7c68f0202e O=VeriSign Trust Network, OU=VeriSign, Inc., OU=VeriSign Time Stamping Service Root, OU=NO LIABILITY ACCEPTED, (c)97 VeriSign, Inc.
8864394.3d90: supR3HardenedWinIsDesiredRootCA: Adding 0xcec3d46562b9be8e C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft ECC Product Root Certificate Authority 2018
8874394.3d90: supR3HardenedWinIsDesiredRootCA: Adding 0xca58a05dd401ae00 C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Time Stamp Root Certificate Authority 2014
8884394.3d90: supR3HardenedWinIsDesiredRootCA: Adding 0x2ca429a5c4c6a700 C=IT, L=Milan, O=Actalis S.p.A./03358520967, CN=Actalis Authentication Root CA
8894394.3d90: supR3HardenedWinIsDesiredRootCA: Adding 0xd8dbfb2c27bfb200 C=US, O=thawte, Inc., OU=Certification Services Division, OU=(c) 2008 thawte, Inc. - For authorized use only, CN=thawte Primary Root CA - G3
8904394.3d90: supR3HardenedWinIsDesiredRootCA: Adding 0x61a3a33f81aace00 C=US, ST=UT, L=Salt Lake City, O=The USERTRUST Network, OU=http://www.usertrust.com, CN=UTN-USERFirst-Object
8914394.3d90: supR3HardenedWinIsDesiredRootCA: Adding 0x3d993fde1950a700 C=US, O=IdenTrust, CN=IdenTrust Commercial Root CA 1
8924394.3d90: supR3HardenedWinIsDesiredRootCA: Adding 0x6b7bdc34cd37bb00 C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root G2
8934394.3d90: supR3HardenedWinIsDesiredRootCA: Adding 0x57ba5395b561bf00 C=BM, O=QuoVadis Limited, OU=Root Certification Authority, CN=QuoVadis Root Certification Authority
8944394.3d90: supR3HardenedWinIsDesiredRootCA: Adding 0xf4fd306318ccda00 C=US, O=GeoTrust Inc., CN=GeoTrust Global CA
8954394.3d90: supR3HardenedWinIsDesiredRootCA: Adding 0x83085097e9afdf00 O=Digital Signature Trust Co., CN=DST Root CA X3
8964394.3d90: supR3HardenedWinIsDesiredRootCA: Adding 0xe248b7eeee4af00 C=CH, O=SwissSign AG, CN=SwissSign Gold CA - G2
8974394.3d90: supR3HardenedWinIsDesiredRootCA: Adding 0x780679907625cc00 OU=GlobalSign Root CA - R3, O=GlobalSign, CN=GlobalSign
8984394.3d90: supR3HardenedWinIsDesiredRootCA: Adding 0x3d98ab22bb04a300 C=IE, O=Baltimore, OU=CyberTrust, CN=Baltimore CyberTrust Root
8994394.3d90: supR3HardenedWinIsDesiredRootCA: Adding 0xa0ee62086758b15d C=US, O=Equifax, OU=Equifax Secure Certificate Authority
9004394.3d90: supR3HardenedWinIsDesiredRootCA: Adding 0xeae16ef49d40be00 C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services
9014394.3d90: supR3HardenedWinIsDesiredRootCA: Adding 0xc6536f24d57ae723 C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust ECC Certification Authority
9024394.3d90: supR3HardenedWinIsDesiredRootCA: Adding 0x3714f47324e8ad00 C=US, O=Internet Security Research Group, CN=ISRG Root X1
9034394.3d90: supR3HardenedWinIsDesiredRootCA: Adding 0xd944bca189a00 C=BM, O=QuoVadis Limited, CN=QuoVadis Root CA 2
9044394.3d90: supR3HardenedWinIsDesiredRootCA: Adding 0x8ff6fc03c1edbd00 C=US, ST=Arizona, L=Scottsdale, O=Starfield Technologies, Inc., CN=Starfield Root Certificate Authority - G2
9054394.3d90: supR3HardenedWinIsDesiredRootCA: Adding 0xc6fa4243b695b600 C=US, O=Entrust, Inc., OU=www.entrust.net/CPS is incorporated by reference, OU=(c) 2006 Entrust, Inc., CN=Entrust Root Certification Authority
9064394.3d90: supR3HardenedWinIsDesiredRootCA: Adding 0xa3ce8d99e60eda00 C=BE, O=GlobalSign nv-sa, OU=Root CA, CN=GlobalSign Root CA
9074394.3d90: supR3HardenedWinIsDesiredRootCA: Adding 0x560ad29254e89100 C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO RSA Certification Authority
9084394.3d90: supR3HardenedWinIsDesiredRootCA: Adding 0xa671e9fec832b700 C=US, O=Starfield Technologies, Inc., OU=Starfield Class 2 Certification Authority
9094394.3d90: supR3HardenedWinIsDesiredRootCA: Adding 0xa8de7211e13be200 C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root CA
9104394.3d90: supR3HardenedWinIsDesiredRootCA: Adding 0x7ae89c50f0b6a00f C=US, O=GTE Corporation, OU=GTE CyberTrust Solutions, Inc., CN=GTE CyberTrust Global Root
9114394.3d90: supR3HardenedWinIsDesiredRootCA: Adding 0xd45980fbf0a0ac00 C=US, O=thawte, Inc., OU=Certification Services Division, OU=(c) 2006 thawte, Inc. - For authorized use only, CN=thawte Primary Root CA
9124394.3d90: supR3HardenedWinIsDesiredRootCA: Adding 0xef62113787ebace5 C=US, O=GeoTrust Inc., OU=(c) 2007 GeoTrust Inc. - For authorized use only, CN=GeoTrust Primary Certification Authority - G2
9134394.3d90: supR3HardenedWinIsDesiredRootCA: Adding 0xc9edb72b684ba00 C=US, O=Entrust, Inc., OU=See www.entrust.net/legal-terms, OU=(c) 2009 Entrust, Inc. - for authorized use only, CN=Entrust Root Certification Authority - G2
9144394.3d90: supR3HardenedWinIsDesiredRootCA: Adding 0xf5cd95e581a4ab00 C=US, O=SecureTrust Corporation, CN=SecureTrust CA
9154394.3d90: supR3HardenedWinIsDesiredRootCA: Adding 0x6f2ebe0e24cfa600 OU=GlobalSign Root CA - R2, O=GlobalSign, CN=GlobalSign
9164394.3d90: supR3HardenedWinIsDesiredRootCA: Adding 0x14018a1bf29e595c C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification Authority
9174394.3d90: supR3HardenedWinIsDesiredRootCA: Adding 0x9e5bc2d78b6a3636 C=ZA, ST=Western Cape, L=Cape Town, O=Thawte Consulting cc, OU=Certification Services Division, CN=Thawte Premium Server CA, Email=premium-server@thawte.com
9184394.3d90: supR3HardenedWinIsDesiredRootCA: Adding 0x7c4fd32ec1b1ce00 C=PL, O=Unizeto Sp. z o.o., CN=Certum CA
9194394.3d90: supR3HardenedWinIsDesiredRootCA: Adding 0xd4fbe673e5ccc600 C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert High Assurance EV Root CA
9204394.3d90: supR3HardenedWinIsDesiredRootCA: Adding 0xb352b1523915d000 C=JP, O=SECOM Trust Systems CO.,LTD., OU=Security Communication RootCA2
9214394.3d90: supR3HardenedWinIsDesiredRootCA: Adding 0x16e64d2a56ccf200 C=US, ST=Arizona, L=Scottsdale, O=Starfield Technologies, Inc., OU=http://certificates.starfieldtech.com/repository/, CN=Starfield Services Root Certificate Authority
9224394.3d90: supR3HardenedWinIsDesiredRootCA: Adding 0x363d9b00b34fcb00 C=CH, O=WISeKey, OU=Copyright (c) 2005, OU=OISTE Foundation Endorsed, CN=OISTE WISeKey Global Root GA CA
9234394.3d90: supR3HardenedWinIsDesiredRootCA: Adding 0x73e85f1bda5faa00 C=DE, O=T-Systems Enterprise Services GmbH, OU=T-Systems Trust Center, CN=T-TeleSec GlobalRoot Class 2
9244394.3d90: supR3HardenedWinIsDesiredRootCA: Adding 0xef477acf4ab2d300 C=DE, O=D-Trust GmbH, CN=D-TRUST Root Class 3 CA 2 2009
9254394.3d90: supR3HardenedWinIsDesiredRootCA: Adding 0x1b8578514b74ac00 C=US, O=WFA Hotspot 2.0, CN=Hotspot 2.0 Trust Root CA - 03
9264394.3d90: supR3HardenedWinIsDesiredRootCA: Adding 0xb28612a94b4dad00 O=Entrust.net, OU=www.entrust.net/CPS_2048 incorp. by ref. (limits liab.), OU=(c) 1999 Entrust.net Limited, CN=Entrust.net Certification Authority (2048)
9274394.3d90: supR3HardenedWinIsDesiredRootCA: Adding 0x357a29080824af00 C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. - For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority - G5
9284394.3d90: supR3HardenedWinIsDesiredRootCA: Adding 0x59faf1086271bf00 C=US, ST=Arizona, L=Scottsdale, O=GoDaddy.com, Inc., CN=Go Daddy Root Certificate Authority - G2
9294394.3d90: supR3HardenedWinIsDesiredRootCA: Adding 0x466cbc09db88c100 C=IL, O=StartCom Ltd., OU=Secure Digital Certificate Signing, CN=StartCom Certification Authority
9304394.3d90: supR3HardenedWinIsDesiredRootCA: Adding 0xb16dd37ffeb3b300 C=JP, O=SECOM Trust.net, OU=Security Communication RootCA1
9314394.3d90: supR3HardenedWinIsDesiredRootCA: Adding 0x3401b15e3761c700 C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2008 VeriSign, Inc. - For authorized use only, CN=VeriSign Universal Root Certification Authority
9324394.3d90: supR3HardenedWinIsDesiredRootCA: Adding 0x7cd4ff7b15b8be00 C=US, O=GeoTrust Inc., CN=GeoTrust Primary Certification Authority
9334394.3d90: supR3HardenedWinIsDesiredRootCA: Adding 0xc30e361765128000 C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority
9344394.3d90: supR3HardenedWinIsDesiredRootCA: Adding 0x491857ead79dde00 C=US, O=The Go Daddy Group, Inc., OU=Go Daddy Class 2 Certification Authority
9354394.3d90: supR3HardenedWinIsDesiredRootCA: Adding 0xb9ff821d139e9bf OU=GlobalSign ECC Root CA - R5, O=GlobalSign, CN=GlobalSign
9364394.3d90: supR3HardenedWinIsDesiredRootCA: Adding 0x1f78fc529cbacb00 C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 1999 VeriSign, Inc. - For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority - G3
9374394.3d90: supR3HardenedWinIsDesiredRootCA: Adding 0xdc1801b225aea100 C=BM, O=QuoVadis Limited, CN=QuoVadis Root CA 2 G3
9384394.3d90: supR3HardenedWinIsDesiredRootCA: Adding 0xc2ba72a37dfbe300 C=PL, O=Unizeto Technologies S.A., OU=Certum Certification Authority, CN=Certum Trusted Network CA
9394394.3d90: supR3HardenedWinIsDesiredRootCA: Adding 0x8043e4ce150ead00 C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Assured ID Root CA
9404394.3d90: supR3HardenedWinIsDesiredRootCA: Adding 0x331d58625ee2dc00 C=US, O=GeoTrust Inc., OU=(c) 2008 GeoTrust Inc. - For authorized use only, CN=GeoTrust Primary Certification Authority - G3
9414394.3d90: supR3HardenedWinIsDesiredRootCA: Adding 0xf2e6331af7b700 C=SE, O=AddTrust AB, OU=AddTrust External TTP Network, CN=AddTrust External CA Root
9424394.3d90: supR3HardenedWinRetrieveTrustedRootCAs: cAdded=72
9434394.3d90: SUPR3HardenedMain: Load Runtime...
9444394.3d90: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll: Signature #1/2: info status: 24202
9454394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf42f0000 'C:\WINDOWS\system32\rsaenh.dll'
9464394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
9474394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp100.dll'.
9484394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'rpcrt4.dll'.
9494394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'ws2_32.dll'.
9504394.3d90: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll) WinVerifyTrust
9514394.3d90: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll
9524394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
9534394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
9544394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf42f0000 'C:\WINDOWS\system32\rsaenh.dll'
9554394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf53f0000 'C:\WINDOWS\System32\crypt32.dll'
9564394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #26 'rpcrt4.dll'.
9574394.3d90: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\ws2_32.dll) WinVerifyTrust
9584394.3d90: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\ws2_32.dll
9594394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
9604394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
9614394.3d90: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll
9624394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
9634394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
9644394.3d90: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll: Signature #1/2: info status: 24202
9654394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
9664394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
9674394.3d90: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll
9684394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf42f0000 'C:\WINDOWS\system32\rsaenh.dll'
9694394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
9704394.3d90: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll) WinVerifyTrust
9714394.3d90: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll
9724394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
9734394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
9744394.3d90: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll: Signature #1/2: info status: 24202
9754394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
9764394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
9774394.3d90: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll: Signature #1/2: info status: 24202
9784394.3d90: Detected WinVerifyTrust recursion: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
9794394.3d90: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll)
9804394.3d90: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll
9814394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf42f0000 'C:\WINDOWS\system32\rsaenh.dll'
9824394.3d90: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll) WinVerifyTrust
9834394.3d90: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000a01:<flags> [calling]
9844394.3d90: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll
9854394.3d90: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [avoiding WinVerifyTrust]
9864394.3d90: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll
9874394.3d90: supR3HardenedDllNotificationCallback: load 0000000061ac0000 LB 0x000d2000 C:\Program Files\Oracle\VirtualBox\MSVCR100.dll [fFlags=0x0]
9884394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [avoiding WinVerifyTrust]
9894394.3d90: supR3HardenedDllNotificationCallback: load 00000000614b0000 LB 0x00098000 C:\Program Files\Oracle\VirtualBox\MSVCP100.dll [fFlags=0x0]
9904394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll
9914394.3d90: supR3HardenedDllNotificationCallback: load 00007ffcf7670000 LB 0x0006b000 C:\WINDOWS\System32\WS2_32.dll [fFlags=0x0]
9924394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ws2_32.dll
9934394.3d90: supR3HardenedDllNotificationCallback: load 00007ffc9bbd0000 LB 0x005e0000 C:\Program Files\Oracle\VirtualBox\VBoxRT.dll [fFlags=0x0]
9944394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll
9954394.3d90: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
9964394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
9974394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll
9984394.3d90: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
9994394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc9bbd0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10004394.3d90: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10014394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10024394.3d90: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10034394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10044394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll
10054394.3d90: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
10064394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc9bbd0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10074394.3d90: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10084394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10094394.3d90: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10104394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10114394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll
10124394.3d90: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
10134394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc9bbd0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10144394.3d90: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10154394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10164394.3d90: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10174394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10184394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll
10194394.3d90: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
10204394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc9bbd0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10214394.3d90: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10224394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10234394.3d90: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10244394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10254394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll
10264394.3d90: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
10274394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc9bbd0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10284394.3d90: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10294394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10304394.3d90: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10314394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10324394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll
10334394.3d90: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
10344394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc9bbd0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10354394.3d90: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10364394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10374394.3d90: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10384394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10394394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc9bbd0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10404394.3d90: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10414394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10424394.3d90: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10434394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10444394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc9bbd0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10454394.3d90: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10464394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10474394.3d90: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10484394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10494394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc9bbd0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10504394.3d90: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10514394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10524394.3d90: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10534394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10544394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc9bbd0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10554394.3d90: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10564394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10574394.3d90: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10584394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10594394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc9bbd0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10604394.3d90: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10614394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10624394.3d90: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10634394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10644394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc9bbd0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10654394.3d90: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10664394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10674394.3d90: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10684394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10694394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc9bbd0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10704394.3d90: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10714394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10724394.3d90: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10734394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10744394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll
10754394.3d90: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
10764394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc9bbd0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10774394.3d90: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10784394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10794394.3d90: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10804394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10814394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc9bbd0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10824394.3d90: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10834394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10844394.3d90: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10854394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10864394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc9bbd0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10874394.3d90: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10884394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10894394.3d90: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10904394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10914394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc9bbd0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10924394.3d90: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10934394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10944394.3d90: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10954394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10964394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc9bbd0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10974394.3d90: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10984394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10994394.3d90: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11004394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11014394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc9bbd0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11024394.3d90: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11034394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11044394.3d90: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11054394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11064394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc9bbd0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11074394.3d90: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11084394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11094394.3d90: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11104394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11114394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc9bbd0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11124394.3d90: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11134394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11144394.3d90: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11154394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11164394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc9bbd0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11174394.3d90: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11184394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11194394.3d90: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11204394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11214394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc9bbd0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11224394.3d90: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11234394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11244394.3d90: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11254394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11264394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc9bbd0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11274394.3d90: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11284394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11294394.3d90: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11304394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11314394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc9bbd0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11324394.3d90: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11334394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11344394.3d90: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11354394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11364394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc9bbd0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11374394.3d90: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11384394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11394394.3d90: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11404394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11414394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc9bbd0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11424394.3d90: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11434394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11444394.3d90: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11454394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11464394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc9bbd0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11474394.3d90: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11484394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11494394.3d90: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11504394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11514394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc9bbd0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11524394.3d90: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11534394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11544394.3d90: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11554394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11564394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll
11574394.3d90: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
11584394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc9bbd0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11594394.3d90: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11604394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11614394.3d90: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11624394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11634394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc9bbd0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11644394.3d90: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11654394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11664394.3d90: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11674394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11684394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc9bbd0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11694394.3d90: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11704394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11714394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc9bbd0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11724394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf42f0000 'C:\WINDOWS\system32\rsaenh.dll'
11734394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 24202) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'
11744394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wintrust.dll
11754394.3d90: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\Wintrust.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
11764394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf5390000 'C:\WINDOWS\system32\Wintrust.dll'
11774394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
11784394.3d90: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
11794394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf42f0000 'C:\WINDOWS\system32\rsaenh.dll'
11804394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf53f0000 'C:\WINDOWS\System32\crypt32.dll'
11814394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf42f0000 'C:\WINDOWS\system32\rsaenh.dll'
11824394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf53f0000 'C:\WINDOWS\System32\crypt32.dll'
11834394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf53f0000 'C:\WINDOWS\system32\crypt32.dll'
11844394.3d90: SUPR3HardenedMain: Load TrustedMain...
11854394.3d90: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll: Signature #1/2: info status: 24202
11864394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf42f0000 'C:\WINDOWS\system32\rsaenh.dll'
11874394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'opengl32.dll'.
11884394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'uicommon.dll'.
11894394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxrt.dll'.
11904394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'msvcp100.dll'.
11914394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'msvcr100.dll'.
11924394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'qt5corevbox.dll'.
11934394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'qt5guivbox.dll'.
11944394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'qt5widgetsvbox.dll'.
11954394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'qt5openglvbox.dll'.
11964394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'user32.dll'.
11974394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'ole32.dll'.
11984394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'oleaut32.dll'.
11994394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #13 'winmm.dll'.
12004394.3d90: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll) WinVerifyTrust
12014394.3d90: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll
12024394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
12034394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume3\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008]
12044394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf42f0000 'C:\WINDOWS\system32\rsaenh.dll'
12054394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf53f0000 'C:\WINDOWS\System32\crypt32.dll'
12064394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcrt.dll'.
12074394.3d90: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\winmm.dll) WinVerifyTrust
12084394.3d90: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\winmm.dll
12094394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
12104394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
12114394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
12124394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
12134394.3d90: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll
12144394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf42f0000 'C:\WINDOWS\system32\rsaenh.dll'
12154394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf53f0000 'C:\WINDOWS\System32\crypt32.dll'
12164394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcp_win.dll'.
12174394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'combase.dll'.
12184394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #21 'rpcrt4.dll'.
12194394.3d90: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\oleaut32.dll) WinVerifyTrust
12204394.3d90: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\oleaut32.dll
12214394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
12224394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
12234394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
12244394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
12254394.3d90: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll
12264394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
12274394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
12284394.3d90: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\combase.dll'.
12294394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'rpcrt4.dll'.
12304394.3d90: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\combase.dll)
12314394.3d90: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\combase.dll
12324394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
12334394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
12344394.3d90: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll'.
12354394.3d90: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll)
12364394.3d90: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll
12374394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
12384394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
12394394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf42f0000 'C:\WINDOWS\system32\rsaenh.dll'
12404394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll
12414394.3d90: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\crypt32.dll (Input=crypt32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
12424394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf53f0000 'C:\WINDOWS\System32\crypt32.dll'
12434394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #21 'rpcrt4.dll'.
12444394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #49 'gdi32.dll'.
12454394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #50 'user32.dll'.
12464394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #51 'combase.dll'.
12474394.3d90: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\ole32.dll) WinVerifyTrust
12484394.3d90: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\ole32.dll
12494394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
12504394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
12514394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
12524394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
12534394.3d90: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\combase.dll [lacks WinVerifyTrust]
12544394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
12554394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
12564394.3d90: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\user32.dll'.
12574394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'win32u.dll'.
12584394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #37 'gdi32.dll'.
12594394.3d90: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\user32.dll)
12604394.3d90: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\user32.dll
12614394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
12624394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
12634394.3d90: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\gdi32.dll'.
12644394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'win32u.dll'.
12654394.3d90: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\gdi32.dll)
12664394.3d90: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\gdi32.dll
12674394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
12684394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
12694394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
12704394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
12714394.3d90: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\win32u.dll'.
12724394.3d90: '\Device\HarddiskVolume3\Windows\System32\win32u.dll' has no imports
12734394.3d90: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\win32u.dll)
12744394.3d90: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\win32u.dll
12754394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
12764394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
12774394.3d90: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
12784394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
12794394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
12804394.3d90: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\win32u.dll [lacks WinVerifyTrust]
12814394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf42f0000 'C:\WINDOWS\system32\rsaenh.dll'
12824394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf53f0000 'C:\WINDOWS\System32\crypt32.dll'
12834394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'win32u.dll'.
12844394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #37 'gdi32.dll'.
12854394.3d90: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\user32.dll) WinVerifyTrust
12864394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5openglvbox.dll'...
12874394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5openglvbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5openglvbox.dll' [rcNtRedir=0xc0150008]
12884394.3d90: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll: Signature #1/2: info status: 24202
12894394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
12904394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
12914394.3d90: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
12924394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
12934394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
12944394.3d90: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\win32u.dll [lacks WinVerifyTrust]
12954394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf42f0000 'C:\WINDOWS\system32\rsaenh.dll'
12964394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'qt5widgetsvbox.dll'.
12974394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'qt5guivbox.dll'.
12984394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5corevbox.dll'.
12994394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'msvcr100.dll'.
13004394.3d90: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll) WinVerifyTrust
13014394.3d90: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll
13024394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5widgetsvbox.dll'...
13034394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5widgetsvbox.dll' [rcNtRedir=0xc0150008]
13044394.3d90: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll: Signature #1/2: info status: 24202
13054394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
13064394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
13074394.3d90: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll
13084394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
13094394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
13104394.3d90: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll: Signature #1/2: info status: 24202
13114394.3d90: Detected WinVerifyTrust recursion: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll'.
13124394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'.
13134394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'shell32.dll'.
13144394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'ole32.dll'.
13154394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'advapi32.dll'.
13164394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'ws2_32.dll'.
13174394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'mpr.dll'.
13184394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'msvcp100.dll'.
13194394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'msvcr100.dll'.
13204394.3d90: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll)
13214394.3d90: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll
13224394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
13234394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
13244394.3d90: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll: Signature #1/2: info status: 24202
13254394.3d90: Detected WinVerifyTrust recursion: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll'.
13264394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'ole32.dll'.
13274394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'opengl32.dll'.
13284394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'gdi32.dll'.
13294394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
13304394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'qt5corevbox.dll'.
13314394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'msvcp100.dll'.
13324394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msvcr100.dll'.
13334394.3d90: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll)
13344394.3d90: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll
13354394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5widgetsvbox.dll'...
13364394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5widgetsvbox.dll' [rcNtRedir=0xc0150008]
13374394.3d90: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll: Signature #1/2: info status: 24202
13384394.3d90: Detected WinVerifyTrust recursion: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'.
13394394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'gdi32.dll'.
13404394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'.
13414394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5guivbox.dll'.
13424394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'qt5corevbox.dll'.
13434394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'shell32.dll'.
13444394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'msvcp100.dll'.
13454394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msvcr100.dll'.
13464394.3d90: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll)
13474394.3d90: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll
13484394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
13494394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
13504394.3d90: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll
13514394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
13524394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
13534394.3d90: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll
13544394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
13554394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume3\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
13564394.3d90: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\shell32.dll'.
13574394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcp_win.dll'.
13584394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #72 'user32.dll'.
13594394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #74 'gdi32.dll'.
13604394.3d90: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\shell32.dll)
13614394.3d90: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\shell32.dll
13624394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
13634394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
13644394.3d90: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
13654394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
13664394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
13674394.3d90: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
13684394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
13694394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
13704394.3d90: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
13714394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
13724394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
13734394.3d90: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
13744394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
13754394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
13764394.3d90: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll
13774394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
13784394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
13794394.3d90: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll
13804394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
13814394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
13824394.3d90: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
13834394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
13844394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
13854394.3d90: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
13864394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
13874394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
13884394.3d90: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
13894394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
13904394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume3\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008]
13914394.3d90: Detected WinVerifyTrust recursion: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume3\Windows\System32\opengl32.dll'.
13924394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
13934394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'advapi32.dll'.
13944394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
13954394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'gdi32.dll'.
13964394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'glu32.dll'.
13974394.3d90: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\opengl32.dll)
13984394.3d90: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\opengl32.dll
13994394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
14004394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
14014394.3d90: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ole32.dll
14024394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
14034394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
14044394.3d90: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll
14054394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
14064394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
14074394.3d90: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll
14084394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mpr.dll'...
14094394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'mpr.dll' -> '\Device\HarddiskVolume3\Windows\System32\mpr.dll' [rcNtRedir=0xc0150008]
14104394.3d90: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\mpr.dll'.
14114394.3d90: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\mpr.dll)
14124394.3d90: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\mpr.dll
14134394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
14144394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
14154394.3d90: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ws2_32.dll
14164394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
14174394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
14184394.3d90: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll
14194394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
14204394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
14214394.3d90: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ole32.dll
14224394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
14234394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume3\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
14244394.3d90: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll [lacks WinVerifyTrust]
14254394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
14264394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
14274394.3d90: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
14284394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'glu32.dll'...
14294394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'glu32.dll' -> '\Device\HarddiskVolume3\Windows\System32\glu32.dll' [rcNtRedir=0xc0150008]
14304394.3d90: Detected WinVerifyTrust recursion: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume3\Windows\System32\glu32.dll'.
14314394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
14324394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'user32.dll'.
14334394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'opengl32.dll'.
14344394.3d90: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\glu32.dll)
14354394.3d90: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\glu32.dll
14364394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
14374394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
14384394.3d90: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
14394394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
14404394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
14414394.3d90: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
14424394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
14434394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
14444394.3d90: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll
14454394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
14464394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
14474394.3d90: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll
14484394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
14494394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
14504394.3d90: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
14514394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
14524394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
14534394.3d90: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
14544394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
14554394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
14564394.3d90: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll [lacks WinVerifyTrust]
14574394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
14584394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume3\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008]
14594394.3d90: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\opengl32.dll [lacks WinVerifyTrust]
14604394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
14614394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
14624394.3d90: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
14634394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
14644394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
14654394.3d90: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll
14664394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf42f0000 'C:\WINDOWS\system32\rsaenh.dll'
14674394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'gdi32.dll'.
14684394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'.
14694394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5guivbox.dll'.
14704394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'qt5corevbox.dll'.
14714394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'shell32.dll'.
14724394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'msvcp100.dll'.
14734394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msvcr100.dll'.
14744394.3d90: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll) WinVerifyTrust
14754394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
14764394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
14774394.3d90: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [redoing WinVerifyTrust]
14784394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
14794394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
14804394.3d90: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll
14814394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
14824394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
14834394.3d90: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll
14844394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
14854394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume3\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
14864394.3d90: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll [lacks WinVerifyTrust]
14874394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
14884394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
14894394.3d90: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
14904394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
14914394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
14924394.3d90: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
14934394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
14944394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
14954394.3d90: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
14964394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
14974394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
14984394.3d90: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
14994394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf42f0000 'C:\WINDOWS\system32\rsaenh.dll'
15004394.3d90: supR3HardenedScreenImage/Imports: 0 (was 24202) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll'
15014394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
15024394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
15034394.3d90: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [redoing WinVerifyTrust]
15044394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf42f0000 'C:\WINDOWS\system32\rsaenh.dll'
15054394.3d90: supR3HardenedScreenImage/Imports: 0 (was 24202) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll'
15064394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
15074394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
15084394.3d90: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll
15094394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
15104394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
15114394.3d90: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll
15124394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
15134394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
15144394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'uicommon.dll'...
15154394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'uicommon.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\uicommon.dll' [rcNtRedir=0xc0150008]
15164394.3d90: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\UICommon.dll: Signature #1/2: info status: 24202
15174394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf42f0000 'C:\WINDOWS\system32\rsaenh.dll'
15184394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'vboxrt.dll'.
15194394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcr100.dll'.
15204394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5corevbox.dll'.
15214394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'qt5guivbox.dll'.
15224394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'qt5widgetsvbox.dll'.
15234394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'user32.dll'.
15244394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'advapi32.dll'.
15254394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'ole32.dll'.
15264394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'oleaut32.dll'.
15274394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'rpcrt4.dll'.
15284394.3d90: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\UICommon.dll) WinVerifyTrust
15294394.3d90: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\UICommon.dll
15304394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
15314394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume3\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008]
15324394.3d90: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\opengl32.dll [redoing WinVerifyTrust]
15334394.3d90: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000534 pwszName=\Device\HarddiskVolume3\Windows\System32\opengl32.dll
15344394.3d90: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000001a32940
15354394.3d90: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000001a32940
15364394.3d90: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=8E7659A85CD9E1DD85A2EDD240E0AFC0D2340903
15374394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
15384394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
15394394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
15404394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
15414394.3d90: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll
15424394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
15434394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
15444394.3d90: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ole32.dll
15454394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
15464394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
15474394.3d90: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll
15484394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
15494394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
15504394.3d90: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
15514394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5widgetsvbox.dll'...
15524394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5widgetsvbox.dll' [rcNtRedir=0xc0150008]
15534394.3d90: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [lacks WinVerifyTrust]
15544394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
15554394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
15564394.3d90: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll
15574394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
15584394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
15594394.3d90: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll
15604394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
15614394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
15624394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
15634394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
15644394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf42f0000 'C:\WINDOWS\system32\rsaenh.dll'
15654394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf53f0000 'C:\WINDOWS\System32\crypt32.dll'
15664394.3d90: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0212~31bf3856ad364e35~amd64~~10.0.19041.1081.cat'; file='\Device\HarddiskVolume3\Windows\System32\opengl32.dll'
15674394.3d90: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
15684394.3d90: supR3HardenedScreenImage/Imports: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\opengl32.dll'
15694394.3d90: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000a01:<flags> [calling]
15704394.3d90: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll
15714394.3d90: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\opengl32.dll
15724394.3d90: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\UICommon.dll
15734394.3d90: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll
15744394.3d90: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll
15754394.3d90: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [avoiding WinVerifyTrust]
15764394.3d90: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll
15774394.3d90: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmm.dll
15784394.3d90: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\glu32.dll [avoiding WinVerifyTrust]
15794394.3d90: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\mpr.dll [avoiding WinVerifyTrust]
15804394.3d90: supR3HardenedDllNotificationCallback: load 00007ffcf5230000 LB 0x00022000 C:\WINDOWS\System32\win32u.dll [fFlags=0x0]
15814394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\win32u.dll [avoiding WinVerifyTrust]
15824394.3d90: supR3HardenedDllNotificationCallback: load 00007ffcf52f0000 LB 0x0009d000 C:\WINDOWS\System32\msvcp_win.dll [fFlags=0x0]
15834394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll [avoiding WinVerifyTrust]
15844394.3d90: supR3HardenedDllNotificationCallback: load 00007ffcf58d0000 LB 0x0010b000 C:\WINDOWS\System32\gdi32full.dll [fFlags=0x0]
15854394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcp_win.dll'.
15864394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #33 'gdi32.dll'.
15874394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #35 'user32.dll'.
15884394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #36 'win32u.dll'.
15894394.3d90: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\gdi32full.dll)
15904394.3d90: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\gdi32full.dll
15914394.3d90: supR3HardenedDllNotificationCallback: load 00007ffcf6c60000 LB 0x0002a000 C:\WINDOWS\System32\GDI32.dll [fFlags=0x0]
15924394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [avoiding WinVerifyTrust]
15934394.3d90: supR3HardenedDllNotificationCallback: load 00007ffcf5b60000 LB 0x001a0000 C:\WINDOWS\System32\USER32.dll [fFlags=0x0]
15944394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [avoiding WinVerifyTrust]
15954394.3d90: supR3HardenedDllNotificationCallback: load 00007ffcf6880000 LB 0x00355000 C:\WINDOWS\System32\combase.dll [fFlags=0x0]
15964394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\combase.dll [avoiding WinVerifyTrust]
15974394.3d90: supR3HardenedDllNotificationCallback: load 00007ffcedbc0000 LB 0x0002c000 C:\WINDOWS\SYSTEM32\GLU32.dll [fFlags=0x0]
15984394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\glu32.dll [avoiding WinVerifyTrust]
15994394.3d90: supR3HardenedDllNotificationCallback: load 00007ffce0ab0000 LB 0x00125000 C:\WINDOWS\SYSTEM32\OPENGL32.dll [fFlags=0x0]
16004394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\opengl32.dll
16014394.3d90: supR3HardenedDllNotificationCallback: load 00007ffcf6e70000 LB 0x0073f000 C:\WINDOWS\System32\SHELL32.dll [fFlags=0x0]
16024394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll [avoiding WinVerifyTrust]
16034394.3d90: supR3HardenedDllNotificationCallback: load 00007ffcf5d00000 LB 0x0012a000 C:\WINDOWS\System32\ole32.dll [fFlags=0x0]
16044394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ole32.dll
16054394.3d90: supR3HardenedDllNotificationCallback: load 00007ffced930000 LB 0x0001d000 C:\WINDOWS\SYSTEM32\MPR.dll [fFlags=0x0]
16064394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\mpr.dll [avoiding WinVerifyTrust]
16074394.3d90: supR3HardenedDllNotificationCallback: load 0000000060f40000 LB 0x00565000 C:\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [fFlags=0x0]
16084394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll
16094394.3d90: supR3HardenedDllNotificationCallback: load 00007ffc90bf0000 LB 0x005f7000 C:\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [fFlags=0x0]
16104394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll
16114394.3d90: supR3HardenedDllNotificationCallback: load 0000000061550000 LB 0x00561000 C:\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [fFlags=0x0]
16124394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [avoiding WinVerifyTrust]
16134394.3d90: supR3HardenedDllNotificationCallback: load 00007ffcf65a0000 LB 0x000cd000 C:\WINDOWS\System32\OLEAUT32.dll [fFlags=0x0]
16144394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll
16154394.3d90: supR3HardenedDllNotificationCallback: load 00007ffc8c140000 LB 0x02316000 C:\Program Files\Oracle\VirtualBox\UICommon.dll [fFlags=0x0]
16164394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\UICommon.dll
16174394.3d90: supR3HardenedDllNotificationCallback: load 0000000060ee0000 LB 0x00054000 C:\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll [fFlags=0x0]
16184394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll
16194394.3d90: supR3HardenedDllNotificationCallback: load 00007ffcdc950000 LB 0x00027000 C:\WINDOWS\SYSTEM32\WINMM.dll [fFlags=0x0]
16204394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmm.dll
16214394.3d90: supR3HardenedDllNotificationCallback: load 00007ffccebf0000 LB 0x001c8000 C:\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll [fFlags=0x0]
16224394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll
16234394.3d90: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\gdi32full.dll'.
16244394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\gdi32full.dll' [rescheduled]
16254394.3d90: Detected loader lock ownership: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume3\Windows\System32\glu32.dll'.
16264394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 22900 (was 22900) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\glu32.dll' [rescheduled]
16274394.3d90: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\mpr.dll'.
16284394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\mpr.dll' [rescheduled]
16294394.3d90: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\shell32.dll'.
16304394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\shell32.dll' [rescheduled]
16314394.3d90: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'.
16324394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll' [rescheduled]
16334394.3d90: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\win32u.dll'.
16344394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rescheduled]
16354394.3d90: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\gdi32.dll'.
16364394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rescheduled]
16374394.3d90: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\user32.dll'.
16384394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rescheduled]
16394394.3d90: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll'.
16404394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rescheduled]
16414394.3d90: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\combase.dll'.
16424394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rescheduled]
16434394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\kernel32.dll
16444394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
16454394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
16464394.3d90: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\win32u.dll [redoing WinVerifyTrust]
16474394.3d90: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\win32u.dll'.
16484394.3d90: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume3\Windows\System32\win32u.dll
16494394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
16504394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
16514394.3d90: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [redoing WinVerifyTrust]
16524394.3d90: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\user32.dll'.
16534394.3d90: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume3\Windows\System32\user32.dll
16544394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
16554394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
16564394.3d90: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [redoing WinVerifyTrust]
16574394.3d90: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\gdi32.dll'.
16584394.3d90: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume3\Windows\System32\gdi32.dll
16594394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
16604394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
16614394.3d90: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll [redoing WinVerifyTrust]
16624394.3d90: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll'.
16634394.3d90: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll
16644394.3d90: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\kernel32.dll (Input=kernel32, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
16654394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf75b0000 'C:\WINDOWS\System32\kernel32.dll'
16664394.3d90: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\gdi32full.dll'.
16674394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\gdi32full.dll' [rescheduled]
16684394.3d90: Detected loader lock ownership: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume3\Windows\System32\glu32.dll'.
16694394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 22900 (was 22900) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\glu32.dll' [rescheduled]
16704394.3d90: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\mpr.dll'.
16714394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\mpr.dll' [rescheduled]
16724394.3d90: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\shell32.dll'.
16734394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\shell32.dll' [rescheduled]
16744394.3d90: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'.
16754394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll' [rescheduled]
16764394.3d90: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\win32u.dll'.
16774394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rescheduled]
16784394.3d90: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\gdi32.dll'.
16794394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rescheduled]
16804394.3d90: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\user32.dll'.
16814394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rescheduled]
16824394.3d90: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll'.
16834394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rescheduled]
16844394.3d90: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\combase.dll'.
16854394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rescheduled]
16864394.3d90: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\gdi32full.dll'.
16874394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\gdi32full.dll' [rescheduled]
16884394.3d90: Detected loader lock ownership: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume3\Windows\System32\glu32.dll'.
16894394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 22900 (was 22900) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\glu32.dll' [rescheduled]
16904394.3d90: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\mpr.dll'.
16914394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\mpr.dll' [rescheduled]
16924394.3d90: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\shell32.dll'.
16934394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\shell32.dll' [rescheduled]
16944394.3d90: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'.
16954394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll' [rescheduled]
16964394.3d90: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\win32u.dll'.
16974394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rescheduled]
16984394.3d90: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\gdi32.dll'.
16994394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rescheduled]
17004394.3d90: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\user32.dll'.
17014394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rescheduled]
17024394.3d90: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll'.
17034394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rescheduled]
17044394.3d90: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\combase.dll'.
17054394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rescheduled]
17064394.3d90: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-string-l1-1-0) -> 0x0, fPresent=1
17074394.3d90: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-string-l1-1-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
17084394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf5550000 'api-ms-win-core-string-l1-1-0'
17094394.3d90: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\gdi32full.dll'.
17104394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\gdi32full.dll' [rescheduled]
17114394.3d90: Detected loader lock ownership: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume3\Windows\System32\glu32.dll'.
17124394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 22900 (was 22900) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\glu32.dll' [rescheduled]
17134394.3d90: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\mpr.dll'.
17144394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\mpr.dll' [rescheduled]
17154394.3d90: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\shell32.dll'.
17164394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\shell32.dll' [rescheduled]
17174394.3d90: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'.
17184394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll' [rescheduled]
17194394.3d90: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\win32u.dll'.
17204394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rescheduled]
17214394.3d90: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\gdi32.dll'.
17224394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rescheduled]
17234394.3d90: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\user32.dll'.
17244394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rescheduled]
17254394.3d90: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll'.
17264394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rescheduled]
17274394.3d90: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\combase.dll'.
17284394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rescheduled]
17294394.3d90: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\gdi32full.dll'.
17304394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\gdi32full.dll' [rescheduled]
17314394.3d90: Detected loader lock ownership: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume3\Windows\System32\glu32.dll'.
17324394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 22900 (was 22900) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\glu32.dll' [rescheduled]
17334394.3d90: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\mpr.dll'.
17344394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\mpr.dll' [rescheduled]
17354394.3d90: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\shell32.dll'.
17364394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\shell32.dll' [rescheduled]
17374394.3d90: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'.
17384394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll' [rescheduled]
17394394.3d90: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\win32u.dll'.
17404394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rescheduled]
17414394.3d90: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\gdi32.dll'.
17424394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rescheduled]
17434394.3d90: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\user32.dll'.
17444394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rescheduled]
17454394.3d90: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll'.
17464394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rescheduled]
17474394.3d90: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\combase.dll'.
17484394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rescheduled]
17494394.3d90: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-datetime-l1-1-1) -> 0x0, fPresent=1
17504394.3d90: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-datetime-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
17514394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf5550000 'api-ms-win-core-datetime-l1-1-1'
17524394.3d90: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\gdi32full.dll'.
17534394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\gdi32full.dll' [rescheduled]
17544394.3d90: Detected loader lock ownership: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume3\Windows\System32\glu32.dll'.
17554394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 22900 (was 22900) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\glu32.dll' [rescheduled]
17564394.3d90: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\mpr.dll'.
17574394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\mpr.dll' [rescheduled]
17584394.3d90: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\shell32.dll'.
17594394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\shell32.dll' [rescheduled]
17604394.3d90: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'.
17614394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll' [rescheduled]
17624394.3d90: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\win32u.dll'.
17634394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rescheduled]
17644394.3d90: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\gdi32.dll'.
17654394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rescheduled]
17664394.3d90: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\user32.dll'.
17674394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rescheduled]
17684394.3d90: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll'.
17694394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rescheduled]
17704394.3d90: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\combase.dll'.
17714394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rescheduled]
17724394.3d90: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\gdi32full.dll'.
17734394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\gdi32full.dll' [rescheduled]
17744394.3d90: Detected loader lock ownership: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume3\Windows\System32\glu32.dll'.
17754394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 22900 (was 22900) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\glu32.dll' [rescheduled]
17764394.3d90: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\mpr.dll'.
17774394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\mpr.dll' [rescheduled]
17784394.3d90: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\shell32.dll'.
17794394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\shell32.dll' [rescheduled]
17804394.3d90: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'.
17814394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll' [rescheduled]
17824394.3d90: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\win32u.dll'.
17834394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rescheduled]
17844394.3d90: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\gdi32.dll'.
17854394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rescheduled]
17864394.3d90: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\user32.dll'.
17874394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rescheduled]
17884394.3d90: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll'.
17894394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rescheduled]
17904394.3d90: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\combase.dll'.
17914394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rescheduled]
17924394.3d90: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-localization-obsolete-l1-2-0) -> 0x0, fPresent=1
17934394.3d90: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-obsolete-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
17944394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf5550000 'api-ms-win-core-localization-obsolete-l1-2-0'
17954394.3d90: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\gdi32full.dll'.
17964394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\gdi32full.dll' [rescheduled]
17974394.3d90: Detected loader lock ownership: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume3\Windows\System32\glu32.dll'.
17984394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 22900 (was 22900) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\glu32.dll' [rescheduled]
17994394.3d90: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\mpr.dll'.
18004394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\mpr.dll' [rescheduled]
18014394.3d90: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\shell32.dll'.
18024394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\shell32.dll' [rescheduled]
18034394.3d90: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'.
18044394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll' [rescheduled]
18054394.3d90: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\win32u.dll'.
18064394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rescheduled]
18074394.3d90: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\gdi32.dll'.
18084394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rescheduled]
18094394.3d90: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\user32.dll'.
18104394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rescheduled]
18114394.3d90: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll'.
18124394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rescheduled]
18134394.3d90: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\combase.dll'.
18144394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rescheduled]
18154394.3d90: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\gdi32full.dll'.
18164394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\gdi32full.dll' [rescheduled]
18174394.3d90: Detected loader lock ownership: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume3\Windows\System32\glu32.dll'.
18184394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 22900 (was 22900) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\glu32.dll' [rescheduled]
18194394.3d90: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\mpr.dll'.
18204394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\mpr.dll' [rescheduled]
18214394.3d90: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\shell32.dll'.
18224394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\shell32.dll' [rescheduled]
18234394.3d90: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'.
18244394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll' [rescheduled]
18254394.3d90: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\win32u.dll'.
18264394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rescheduled]
18274394.3d90: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\gdi32.dll'.
18284394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rescheduled]
18294394.3d90: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\user32.dll'.
18304394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rescheduled]
18314394.3d90: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll'.
18324394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rescheduled]
18334394.3d90: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\combase.dll'.
18344394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rescheduled]
18354394.3d90: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\imm32.dll'.
18364394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'user32.dll'.
18374394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #25 'win32u.dll'.
18384394.3d90: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\imm32.dll)
18394394.3d90: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\imm32.dll
18404394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
18414394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
18424394.3d90: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\win32u.dll [redoing WinVerifyTrust]
18434394.3d90: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\win32u.dll'.
18444394.3d90: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume3\Windows\System32\win32u.dll
18454394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
18464394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
18474394.3d90: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [redoing WinVerifyTrust]
18484394.3d90: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\user32.dll'.
18494394.3d90: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume3\Windows\System32\user32.dll
18504394.3d90: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\IMM32.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
18514394.3d90: supR3HardenedDllNotificationCallback: load 00007ffcf6670000 LB 0x00030000 C:\WINDOWS\System32\IMM32.DLL [fFlags=0x0]
18524394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\imm32.dll [avoiding WinVerifyTrust]
18534394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6670000 'C:\WINDOWS\system32\IMM32.DLL'
18544394.3d90: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\imm32.dll'.
18554394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\imm32.dll' [rescheduled]
18564394.3d90: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\gdi32full.dll'.
18574394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\gdi32full.dll' [rescheduled]
18584394.3d90: Detected loader lock ownership: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume3\Windows\System32\glu32.dll'.
18594394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 22900 (was 22900) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\glu32.dll' [rescheduled]
18604394.3d90: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\mpr.dll'.
18614394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\mpr.dll' [rescheduled]
18624394.3d90: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\shell32.dll'.
18634394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\shell32.dll' [rescheduled]
18644394.3d90: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'.
18654394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll' [rescheduled]
18664394.3d90: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\win32u.dll'.
18674394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rescheduled]
18684394.3d90: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\gdi32.dll'.
18694394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rescheduled]
18704394.3d90: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\user32.dll'.
18714394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rescheduled]
18724394.3d90: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll'.
18734394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rescheduled]
18744394.3d90: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\combase.dll'.
18754394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rescheduled]
18764394.3d90: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\imm32.dll'.
18774394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\imm32.dll' [rescheduled]
18784394.3d90: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\gdi32full.dll'.
18794394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\gdi32full.dll' [rescheduled]
18804394.3d90: Detected loader lock ownership: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume3\Windows\System32\glu32.dll'.
18814394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 22900 (was 22900) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\glu32.dll' [rescheduled]
18824394.3d90: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\mpr.dll'.
18834394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\mpr.dll' [rescheduled]
18844394.3d90: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\shell32.dll'.
18854394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\shell32.dll' [rescheduled]
18864394.3d90: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'.
18874394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll' [rescheduled]
18884394.3d90: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\win32u.dll'.
18894394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rescheduled]
18904394.3d90: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\gdi32.dll'.
18914394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rescheduled]
18924394.3d90: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\user32.dll'.
18934394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rescheduled]
18944394.3d90: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll'.
18954394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rescheduled]
18964394.3d90: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\combase.dll'.
18974394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rescheduled]
18984394.3d90: supR3HardenedMonitor_LdrLoadDll: error opening 'C:\WINDOWS\System32\edgegdi.dll': 0 (NtPath=\??\C:\WINDOWS\System32\edgegdi.dll; Input=edgegdi.dll; rcNtGetDll=0xc0000135
18994394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0xc0000034 'C:\WINDOWS\System32\edgegdi.dll'
19004394.3d90: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\imm32.dll'.
19014394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\imm32.dll' [rescheduled]
19024394.3d90: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\gdi32full.dll'.
19034394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\gdi32full.dll' [rescheduled]
19044394.3d90: Detected loader lock ownership: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume3\Windows\System32\glu32.dll'.
19054394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 22900 (was 22900) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\glu32.dll' [rescheduled]
19064394.3d90: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\mpr.dll'.
19074394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\mpr.dll' [rescheduled]
19084394.3d90: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\shell32.dll'.
19094394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\shell32.dll' [rescheduled]
19104394.3d90: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'.
19114394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll' [rescheduled]
19124394.3d90: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\win32u.dll'.
19134394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rescheduled]
19144394.3d90: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\gdi32.dll'.
19154394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rescheduled]
19164394.3d90: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\user32.dll'.
19174394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rescheduled]
19184394.3d90: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll'.
19194394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rescheduled]
19204394.3d90: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\combase.dll'.
19214394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rescheduled]
19224394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll
19234394.3d90: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\ADVAPI32.DLL (Input=ADVAPI32.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
19244394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf64e0000 'C:\WINDOWS\System32\ADVAPI32.DLL'
19254394.3d90: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\imm32.dll'.
19264394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\imm32.dll' [rescheduled]
19274394.3d90: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\gdi32full.dll'.
19284394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\gdi32full.dll' [rescheduled]
19294394.3d90: Detected loader lock ownership: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume3\Windows\System32\glu32.dll'.
19304394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 22900 (was 22900) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\glu32.dll' [rescheduled]
19314394.3d90: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\mpr.dll'.
19324394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\mpr.dll' [rescheduled]
19334394.3d90: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\shell32.dll'.
19344394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\shell32.dll' [rescheduled]
19354394.3d90: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'.
19364394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll' [rescheduled]
19374394.3d90: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\win32u.dll'.
19384394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rescheduled]
19394394.3d90: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\gdi32.dll'.
19404394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rescheduled]
19414394.3d90: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\user32.dll'.
19424394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rescheduled]
19434394.3d90: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll'.
19444394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rescheduled]
19454394.3d90: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\combase.dll'.
19464394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rescheduled]
19474394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffccebf0000 'C:\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll'
19484394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf42f0000 'C:\WINDOWS\system32\rsaenh.dll'
19494394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf53f0000 'C:\WINDOWS\System32\crypt32.dll'
19504394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\imm32.dll'
19514394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf42f0000 'C:\WINDOWS\system32\rsaenh.dll'
19524394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf53f0000 'C:\WINDOWS\System32\crypt32.dll'
19534394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\gdi32full.dll'
19544394.3d90: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000538 pwszName=\Device\HarddiskVolume3\Windows\System32\glu32.dll
19554394.3d90: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000001a32940
19564394.3d90: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000001a32940
19574394.3d90: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=0FEA41B8444B51E45D80438EF35CC443EA7D79A6
19584394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf42f0000 'C:\WINDOWS\system32\rsaenh.dll'
19594394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf53f0000 'C:\WINDOWS\System32\crypt32.dll'
19604394.3d90: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0212~31bf3856ad364e35~amd64~~10.0.19041.1081.cat'; file='\Device\HarddiskVolume3\Windows\System32\glu32.dll'
19614394.3d90: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
19624394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\glu32.dll'
19634394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf42f0000 'C:\WINDOWS\system32\rsaenh.dll'
19644394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf53f0000 'C:\WINDOWS\System32\crypt32.dll'
19654394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\mpr.dll'
19664394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf42f0000 'C:\WINDOWS\system32\rsaenh.dll'
19674394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf53f0000 'C:\WINDOWS\System32\crypt32.dll'
19684394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\shell32.dll'
19694394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf42f0000 'C:\WINDOWS\system32\rsaenh.dll'
19704394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 24202) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'
19714394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf42f0000 'C:\WINDOWS\system32\rsaenh.dll'
19724394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf53f0000 'C:\WINDOWS\System32\crypt32.dll'
19734394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\win32u.dll'
19744394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf42f0000 'C:\WINDOWS\system32\rsaenh.dll'
19754394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf53f0000 'C:\WINDOWS\System32\crypt32.dll'
19764394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\gdi32.dll'
19774394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf42f0000 'C:\WINDOWS\system32\rsaenh.dll'
19784394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf53f0000 'C:\WINDOWS\System32\crypt32.dll'
19794394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\user32.dll'
19804394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf42f0000 'C:\WINDOWS\system32\rsaenh.dll'
19814394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf53f0000 'C:\WINDOWS\System32\crypt32.dll'
19824394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll'
19834394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf42f0000 'C:\WINDOWS\system32\rsaenh.dll'
19844394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf53f0000 'C:\WINDOWS\System32\crypt32.dll'
19854394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\combase.dll'
19864394.3d90: SUPR3HardenedMain: Calling TrustedMain (00007ffccebf16c0)...
19874394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #31 'combase.dll'.
19884394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #32 'msvcp_win.dll'.
19894394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #34 'wldp.dll'.
19904394.3d90: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\windows.storage.dll)
19914394.3d90: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\windows.storage.dll
19924394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
19934394.3d90: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\wldp.dll)
19944394.3d90: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\wldp.dll
19954394.3d90: supR3HardenedDllNotificationCallback: load 00007ffcf4bc0000 LB 0x0002c000 C:\WINDOWS\SYSTEM32\Wldp.dll [fFlags=0x0]
19964394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wldp.dll [avoiding WinVerifyTrust]
19974394.3d90: supR3HardenedDllNotificationCallback: load 00007ffcf32c0000 LB 0x00791000 C:\WINDOWS\SYSTEM32\windows.storage.dll [fFlags=0x0]
19984394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\windows.storage.dll [avoiding WinVerifyTrust]
19994394.3d90: supR3HardenedDllNotificationCallback: load 00007ffcf6430000 LB 0x000ae000 C:\WINDOWS\System32\SHCORE.dll [fFlags=0x0]
20004394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
20014394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #42 'combase.dll'.
20024394.3d90: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\SHCore.dll)
20034394.3d90: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\SHCore.dll
20044394.3d90: supR3HardenedDllNotificationCallback: load 00007ffcf76e0000 LB 0x00055000 C:\WINDOWS\System32\shlwapi.dll [fFlags=0x0]
20054394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcrt.dll'.
20064394.3d90: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\shlwapi.dll)
20074394.3d90: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\shlwapi.dll
20084394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
20094394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
20104394.3d90: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll
20114394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
20124394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
20134394.3d90: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\combase.dll
20144394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
20154394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
20164394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
20174394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
20184394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'wldp.dll'...
20194394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'wldp.dll' -> '\Device\HarddiskVolume3\Windows\System32\wldp.dll' [rcNtRedir=0xc0150008]
20204394.3d90: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wldp.dll [lacks WinVerifyTrust]
20214394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
20224394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
20234394.3d90: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll
20244394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
20254394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
20264394.3d90: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\combase.dll
20274394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf42f0000 'C:\WINDOWS\system32\rsaenh.dll'
20284394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf53f0000 'C:\WINDOWS\System32\crypt32.dll'
20294394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\shlwapi.dll'
20304394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf42f0000 'C:\WINDOWS\system32\rsaenh.dll'
20314394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf53f0000 'C:\WINDOWS\System32\crypt32.dll'
20324394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\SHCore.dll'
20334394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf42f0000 'C:\WINDOWS\system32\rsaenh.dll'
20344394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf53f0000 'C:\WINDOWS\System32\crypt32.dll'
20354394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\wldp.dll'
20364394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf42f0000 'C:\WINDOWS\system32\rsaenh.dll'
20374394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf53f0000 'C:\WINDOWS\System32\crypt32.dll'
20384394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\windows.storage.dll'
20394394.3d90: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\platforms\qwindows.dll: Signature #1/2: info status: 24202
20404394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf42f0000 'C:\WINDOWS\system32\rsaenh.dll'
20414394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'gdi32.dll'.
20424394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'ole32.dll'.
20434394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'user32.dll'.
20444394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'imm32.dll'.
20454394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'winmm.dll'.
20464394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'oleaut32.dll'.
20474394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'shell32.dll'.
20484394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'advapi32.dll'.
20494394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'qt5guivbox.dll'.
20504394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'qt5corevbox.dll'.
20514394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'msvcr100.dll'.
20524394.3d90: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\platforms\qwindows.dll) WinVerifyTrust
20534394.3d90: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\platforms\qwindows.dll
20544394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
20554394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
20564394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
20574394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
20584394.3d90: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll
20594394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
20604394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
20614394.3d90: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll
20624394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
20634394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
20644394.3d90: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll
20654394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
20664394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume3\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
20674394.3d90: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
20684394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
20694394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
20704394.3d90: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll
20714394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
20724394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume3\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008]
20734394.3d90: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmm.dll
20744394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'imm32.dll'...
20754394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'imm32.dll' -> '\Device\HarddiskVolume3\Windows\System32\imm32.dll' [rcNtRedir=0xc0150008]
20764394.3d90: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\imm32.dll
20774394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
20784394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
20794394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
20804394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
20814394.3d90: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ole32.dll
20824394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
20834394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
20844394.3d90: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\platforms\qwindows.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
20854394.3d90: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\platforms\qwindows.dll
20864394.3d90: supR3HardenedDllNotificationCallback: load 00007ffce23c0000 LB 0x0012e000 C:\Program Files\Oracle\VirtualBox\platforms\qwindows.dll [fFlags=0x0]
20874394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\platforms\qwindows.dll
20884394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffce23c0000 'C:\Program Files\Oracle\VirtualBox\platforms\qwindows.dll'
20894394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'msvcrt.dll'.
20904394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'rpcrt4.dll'.
20914394.3d90: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll)
20924394.3d90: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll
20934394.3d90: supR3HardenedDllNotificationCallback: load 00007ffcf3ac0000 LB 0x00012000 C:\WINDOWS\SYSTEM32\kernel.appcore.dll [fFlags=0x0]
20944394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll [avoiding WinVerifyTrust]
20954394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
20964394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
20974394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
20984394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
20994394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf42f0000 'C:\WINDOWS\system32\rsaenh.dll'
21004394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf53f0000 'C:\WINDOWS\System32\crypt32.dll'
21014394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll'
21024394.3d90: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000000000006b8 pwszName=\Device\HarddiskVolume3\Windows\System32\uxtheme.dll
21034394.3d90: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000001a32940
21044394.3d90: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000001a32940
21054394.3d90: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=E8FA14805F0B9C3D46589914BC2CC7221B90A6A7
21064394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf42f0000 'C:\WINDOWS\system32\rsaenh.dll'
21074394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf53f0000 'C:\WINDOWS\System32\crypt32.dll'
21084394.3d90: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0419~31bf3856ad364e35~amd64~~10.0.19041.1083.cat'; file='\Device\HarddiskVolume3\Windows\System32\uxtheme.dll'
21094394.3d90: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
21104394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
21114394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #33 'gdi32.dll'.
21124394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #34 'user32.dll'.
21134394.3d90: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\uxtheme.dll) WinVerifyTrust
21144394.3d90: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\uxtheme.dll
21154394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
21164394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
21174394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
21184394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
21194394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
21204394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
21214394.3d90: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\uxtheme.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
21224394.3d90: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\uxtheme.dll
21234394.3d90: supR3HardenedDllNotificationCallback: load 00007ffcf2aa0000 LB 0x0009e000 C:\WINDOWS\system32\uxtheme.dll [fFlags=0x0]
21244394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\uxtheme.dll
21254394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf2aa0000 'C:\WINDOWS\system32\uxtheme.dll'
21264394.3d90: \Device\HarddiskVolume3\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2DevProps.dll: Signature #1/1: info status: 24202
21274394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf42f0000 'C:\WINDOWS\system32\rsaenh.dll'
21284394.3d90: supR3HardNtViCallWinVerifyTrust: WinVerifyTrust failed with 0x800b0101 (CERT_E_EXPIRED) on '\Device\HarddiskVolume3\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2DevProps.dll'
21294394.3d90: supHardenedWinVerifyImageByHandle: -> -22919 (\Device\HarddiskVolume3\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2DevProps.dll) WinVerifyTrust
21304394.3d90: Error (rc=0):
21314394.3d90: supR3HardenedScreenImage/LdrLoadDll: rc=Unknown Status -22919 (0xffffa679) fImage=1 fProtect=0x0 fAccess=0x0 \Device\HarddiskVolume3\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2DevProps.dll: WinVerifyTrust failed with hrc=CERT_E_EXPIRED on '\Device\HarddiskVolume3\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2DevProps.dll'
21324394.3d90: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2DevProps.dll
21334394.3d90: Error (rc=0):
21344394.3d90: supR3HardenedMonitor_LdrLoadDll: rejecting 'C:\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2DevProps.dll' (C:\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2DevProps.dll): rcNt=0xc0000190
21354394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0xc0000190 'C:\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2DevProps.dll'
21364394.3d90: \Device\HarddiskVolume3\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2OSD.dll: Signature #1/1: info status: 24202
21374394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
21384394.3d90: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
21394394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf42f0000 'C:\WINDOWS\system32\rsaenh.dll'
21404394.3d90: supR3HardNtViCallWinVerifyTrust: WinVerifyTrust failed with 0x800b0101 (CERT_E_EXPIRED) on '\Device\HarddiskVolume3\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2OSD.dll'
21414394.3d90: supHardenedWinVerifyImageByHandle: -> -22919 (\Device\HarddiskVolume3\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2OSD.dll) WinVerifyTrust
21424394.3d90: Error (rc=0):
21434394.3d90: supR3HardenedScreenImage/LdrLoadDll: rc=Unknown Status -22919 (0xffffa679) fImage=1 fProtect=0x0 fAccess=0x0 \Device\HarddiskVolume3\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2OSD.dll: WinVerifyTrust failed with hrc=CERT_E_EXPIRED on '\Device\HarddiskVolume3\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2OSD.dll'
21444394.3d90: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2OSD.dll
21454394.3d90: Error (rc=0):
21464394.3d90: supR3HardenedMonitor_LdrLoadDll: rejecting 'C:\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2OSD.dll' (C:\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2OSD.dll): rcNt=0xc0000190
21474394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0xc0000190 'C:\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2OSD.dll'
21484394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf5b60000 'C:\WINDOWS\system32\user32.dll'
21494394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
21504394.3d90: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\shell32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
21514394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6e70000 'C:\WINDOWS\system32\shell32.dll'
21524394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\SHCore.dll
21534394.3d90: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\SHCore.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
21544394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6430000 'C:\WINDOWS\system32\SHCore.dll'
21554394.3d90: supR3HardenedMonitor_LdrLoadDll: error opening 'C:\WINDOWS\system32\wintab32.dll': 0 (NtPath=\??\C:\WINDOWS\system32\wintab32.dll; Input=C:\WINDOWS\system32\wintab32.dll; rcNtGetDll=0x0
21564394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0xc0000034 'C:\WINDOWS\system32\wintab32.dll'
21574394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status -22919 (0xffffa679)) on \Device\HarddiskVolume3\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2DevProps.dll
21584394.3d90: Error (rc=0):
21594394.3d90: supR3HardenedScreenImage/LdrLoadDll: cached rc=Unknown Status -22919 (0xffffa679) fImage=1 fProtect=0x0 fAccess=0x0 cHits=1 \Device\HarddiskVolume3\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2DevProps.dll
21604394.3d90: Error (rc=0):
21614394.3d90: supR3HardenedMonitor_LdrLoadDll: rejecting 'C:\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2DevProps.dll' (C:\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2DevProps.dll): rcNt=0xc0000190
21624394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0xc0000190 'C:\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2DevProps.dll'
21634394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status -22919 (0xffffa679)) on \Device\HarddiskVolume3\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2OSD.dll
21644394.3d90: Error (rc=0):
21654394.3d90: supR3HardenedScreenImage/LdrLoadDll: cached rc=Unknown Status -22919 (0xffffa679) fImage=1 fProtect=0x0 fAccess=0x0 cHits=1 \Device\HarddiskVolume3\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2OSD.dll
21664394.3d90: Error (rc=0):
21674394.3d90: supR3HardenedMonitor_LdrLoadDll: rejecting 'C:\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2OSD.dll' (C:\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2OSD.dll): rcNt=0xc0000190
21684394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0xc0000190 'C:\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2OSD.dll'
21694394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmm.dll
21704394.3d90: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\winmm.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
21714394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcdc950000 'C:\WINDOWS\system32\winmm.dll'
21724394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmm.dll
21734394.3d90: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\winmm.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
21744394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcdc950000 'C:\WINDOWS\system32\winmm.dll'
21754394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status -22919 (0xffffa679)) on \Device\HarddiskVolume3\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2DevProps.dll
21764394.3d90: Error (rc=0):
21774394.3d90: supR3HardenedScreenImage/LdrLoadDll: cached rc=Unknown Status -22919 (0xffffa679) fImage=1 fProtect=0x0 fAccess=0x0 cHits=2 \Device\HarddiskVolume3\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2DevProps.dll
21784394.3d90: Error (rc=0):
21794394.3d90: supR3HardenedMonitor_LdrLoadDll: rejecting 'C:\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2DevProps.dll' (C:\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2DevProps.dll): rcNt=0xc0000190
21804394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0xc0000190 'C:\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2DevProps.dll'
21814394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status -22919 (0xffffa679)) on \Device\HarddiskVolume3\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2OSD.dll
21824394.3d90: Error (rc=0):
21834394.3d90: supR3HardenedScreenImage/LdrLoadDll: cached rc=Unknown Status -22919 (0xffffa679) fImage=1 fProtect=0x0 fAccess=0x0 cHits=2 \Device\HarddiskVolume3\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2OSD.dll
21844394.3d90: Error (rc=0):
21854394.3d90: supR3HardenedMonitor_LdrLoadDll: rejecting 'C:\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2OSD.dll' (C:\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2OSD.dll): rcNt=0xc0000190
21864394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0xc0000190 'C:\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2OSD.dll'
21874394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
21884394.3d90: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\shell32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
21894394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6e70000 'C:\WINDOWS\system32\shell32.dll'
21904394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\uxtheme.dll
21914394.3d90: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\uxtheme.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
21924394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf2aa0000 'C:\WINDOWS\system32\uxtheme.dll'
21934394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll
21944394.3d90: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\advapi32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
21954394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf64e0000 'C:\WINDOWS\system32\advapi32.dll'
21964394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf42f0000 'C:\WINDOWS\system32\rsaenh.dll'
21974394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf53f0000 'C:\WINDOWS\System32\crypt32.dll'
21984394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #13 'rpcrt4.dll'.
21994394.3d90: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\userenv.dll) WinVerifyTrust
22004394.3d90: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\userenv.dll
22014394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
22024394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
22034394.3d90: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\userenv.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
22044394.3d90: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\userenv.dll
22054394.3d90: supR3HardenedDllNotificationCallback: load 00007ffcf5130000 LB 0x0002e000 C:\WINDOWS\system32\userenv.dll [fFlags=0x0]
22064394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\userenv.dll
22074394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf5130000 'C:\WINDOWS\system32\userenv.dll'
22084394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\kernel32.dll
22094394.3d90: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\kernel32.dll (Input=kernel32, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
22104394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf75b0000 'C:\WINDOWS\System32\kernel32.dll'
22114394.3d90: supR3HardenedDllNotificationCallback: load 00007ffcf77e0000 LB 0x000a9000 C:\WINDOWS\System32\clbcatq.dll [fFlags=0x0]
22124394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
22134394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #30 'rpcrt4.dll'.
22144394.3d90: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\clbcatq.dll)
22154394.3d90: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\clbcatq.dll
22164394.4dac: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
22174394.4dac: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
22184394.4dac: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
22194394.4dac: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
22204394.4dac: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf42f0000 'C:\WINDOWS\system32\rsaenh.dll'
22214394.4dac: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf53f0000 'C:\WINDOWS\System32\crypt32.dll'
22224394.4dac: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\clbcatq.dll'
22234394.4dac: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxC.dll: Signature #1/2: info status: 24202
22244394.4dac: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf42f0000 'C:\WINDOWS\system32\rsaenh.dll'
22254394.4dac: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
22264394.4dac: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp100.dll'.
22274394.4dac: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxrt.dll'.
22284394.4dac: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'advapi32.dll'.
22294394.4dac: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'ole32.dll'.
22304394.4dac: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'oleaut32.dll'.
22314394.4dac: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxC.dll) WinVerifyTrust
22324394.4dac: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxC.dll
22334394.4dac: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
22344394.4dac: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
22354394.4dac: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll
22364394.4dac: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
22374394.4dac: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
22384394.4dac: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ole32.dll
22394394.4dac: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
22404394.4dac: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
22414394.4dac: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll
22424394.4dac: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
22434394.4dac: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
22444394.4dac: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
22454394.4dac: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
22464394.4dac: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll
22474394.4dac: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
22484394.4dac: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
22494394.4dac: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxC.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
22504394.4dac: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxC.dll
22514394.4dac: supR3HardenedDllNotificationCallback: load 00007ffca5820000 LB 0x003c0000 C:\Program Files\Oracle\VirtualBox\VBoxC.dll [fFlags=0x0]
22524394.4dac: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxC.dll
22534394.4dac: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffca5820000 'C:\Program Files\Oracle\VirtualBox\VBoxC.dll'
22544394.4dac: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxProxyStub.dll: Signature #1/2: info status: 24202
22554394.4dac: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf42f0000 'C:\WINDOWS\system32\rsaenh.dll'
22564394.4dac: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
22574394.4dac: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
22584394.4dac: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'advapi32.dll'.
22594394.4dac: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'shlwapi.dll'.
22604394.4dac: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'ole32.dll'.
22614394.4dac: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'oleaut32.dll'.
22624394.4dac: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'rpcrt4.dll'.
22634394.4dac: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxProxyStub.dll) WinVerifyTrust
22644394.4dac: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxProxyStub.dll
22654394.4dac: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
22664394.4dac: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
22674394.4dac: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
22684394.4dac: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
22694394.4dac: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll
22704394.4dac: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
22714394.4dac: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
22724394.4dac: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ole32.dll
22734394.4dac: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shlwapi.dll'...
22744394.4dac: supR3HardenedWinVerifyCacheProcessImportTodos: 'shlwapi.dll' -> '\Device\HarddiskVolume3\Windows\System32\shlwapi.dll' [rcNtRedir=0xc0150008]
22754394.4dac: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shlwapi.dll
22764394.4dac: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
22774394.4dac: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
22784394.4dac: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll
22794394.4dac: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
22804394.4dac: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
22814394.4dac: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
22824394.4dac: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
22834394.4dac: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxProxyStub.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
22844394.4dac: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxProxyStub.dll
22854394.4dac: supR3HardenedDllNotificationCallback: load 00007ffcdb1e0000 LB 0x000ef000 C:\Program Files\Oracle\VirtualBox\VBoxProxyStub.dll [fFlags=0x0]
22864394.4dac: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxProxyStub.dll
22874394.4dac: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcdb1e0000 'C:\Program Files\Oracle\VirtualBox\VBoxProxyStub.dll'
22884394.4dac: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll
22894394.4dac: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\oleaut32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
22904394.4dac: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf65a0000 'C:\Windows\System32\oleaut32.dll'
22914394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6c60000 'C:\WINDOWS\system32\gdi32.dll'
22924394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
22934394.3d90: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\shell32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
22944394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6e70000 'C:\WINDOWS\system32\shell32.dll'
22954394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf42f0000 'C:\WINDOWS\system32\rsaenh.dll'
22964394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf53f0000 'C:\WINDOWS\System32\crypt32.dll'
22974394.3d90: '\Device\HarddiskVolume3\Windows\System32\ntdll.dll' has no imports
22984394.3d90: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\ntdll.dll) WinVerifyTrust
22994394.3d90: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\ntdll.dll
23004394.3d90: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\ntdll.dll (Input=ntdll.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
23014394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf7af0000 'C:\WINDOWS\System32\ntdll.dll'
23024394.3d90: supR3HardenedDllNotificationCallback: load 00007ffcf62b0000 LB 0x00115000 C:\WINDOWS\System32\MSCTF.dll [fFlags=0x0]
23034394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
23044394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'oleaut32.dll'.
23054394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #36 'user32.dll'.
23064394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #37 'gdi32.dll'.
23074394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #38 'imm32.dll'.
23084394.3d90: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\msctf.dll)
23094394.3d90: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\msctf.dll
23104394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'imm32.dll'...
23114394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'imm32.dll' -> '\Device\HarddiskVolume3\Windows\System32\imm32.dll' [rcNtRedir=0xc0150008]
23124394.3d90: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\imm32.dll
23134394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
23144394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
23154394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
23164394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
23174394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
23184394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
23194394.3d90: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll
23204394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
23214394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
23224394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf42f0000 'C:\WINDOWS\system32\rsaenh.dll'
23234394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf53f0000 'C:\WINDOWS\System32\crypt32.dll'
23244394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\msctf.dll'
23254394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status -22919 (0xffffa679)) on \Device\HarddiskVolume3\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2DevProps.dll
23264394.3d90: Error (rc=0):
23274394.3d90: supR3HardenedScreenImage/LdrLoadDll: cached rc=Unknown Status -22919 (0xffffa679) fImage=1 fProtect=0x0 fAccess=0x0 cHits=3 \Device\HarddiskVolume3\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2DevProps.dll
23284394.3d90: Error (rc=0):
23294394.3d90: supR3HardenedMonitor_LdrLoadDll: rejecting 'C:\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2DevProps.dll' (C:\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2DevProps.dll): rcNt=0xc0000190
23304394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0xc0000190 'C:\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2DevProps.dll'
23314394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status -22919 (0xffffa679)) on \Device\HarddiskVolume3\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2OSD.dll
23324394.3d90: Error (rc=0):
23334394.3d90: supR3HardenedScreenImage/LdrLoadDll: cached rc=Unknown Status -22919 (0xffffa679) fImage=1 fProtect=0x0 fAccess=0x0 cHits=3 \Device\HarddiskVolume3\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2OSD.dll
23344394.3d90: Error (rc=0):
23354394.3d90: supR3HardenedMonitor_LdrLoadDll: rejecting 'C:\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2OSD.dll' (C:\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2OSD.dll): rcNt=0xc0000190
23364394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0xc0000190 'C:\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2OSD.dll'
23374394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status -22919 (0xffffa679)) on \Device\HarddiskVolume3\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2DevProps.dll
23384394.3d90: Error (rc=0):
23394394.3d90: supR3HardenedScreenImage/LdrLoadDll: cached rc=Unknown Status -22919 (0xffffa679) fImage=1 fProtect=0x0 fAccess=0x0 cHits=4 \Device\HarddiskVolume3\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2DevProps.dll
23404394.3d90: Error (rc=0):
23414394.3d90: supR3HardenedMonitor_LdrLoadDll: rejecting 'C:\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2DevProps.dll' (C:\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2DevProps.dll): rcNt=0xc0000190
23424394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0xc0000190 'C:\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2DevProps.dll'
23434394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status -22919 (0xffffa679)) on \Device\HarddiskVolume3\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2OSD.dll
23444394.3d90: Error (rc=0):
23454394.3d90: supR3HardenedScreenImage/LdrLoadDll: cached rc=Unknown Status -22919 (0xffffa679) fImage=1 fProtect=0x0 fAccess=0x0 cHits=4 \Device\HarddiskVolume3\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2OSD.dll
23464394.3d90: Error (rc=0):
23474394.3d90: supR3HardenedMonitor_LdrLoadDll: rejecting 'C:\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2OSD.dll' (C:\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2OSD.dll): rcNt=0xc0000190
23484394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0xc0000190 'C:\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2OSD.dll'
23494394.3d90: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000000000009d4 pwszName=\Device\HarddiskVolume3\Windows\System32\DataExchange.dll
23504394.3d90: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000001a32940
23514394.3d90: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000001a32940
23524394.3d90: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=F3E635B51EBB2CF2245E98541D1AF5FE327DC975
23534394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf42f0000 'C:\WINDOWS\system32\rsaenh.dll'
23544394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf53f0000 'C:\WINDOWS\System32\crypt32.dll'
23554394.3d90: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.19041.1083.cat'; file='\Device\HarddiskVolume3\Windows\System32\DataExchange.dll'
23564394.3d90: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
23574394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
23584394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #26 'd3d11.dll'.
23594394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #27 'dcomp.dll'.
23604394.3d90: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\DataExchange.dll) WinVerifyTrust
23614394.3d90: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\DataExchange.dll
23624394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'dcomp.dll'...
23634394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'dcomp.dll' -> '\Device\HarddiskVolume3\Windows\System32\dcomp.dll' [rcNtRedir=0xc0150008]
23644394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf42f0000 'C:\WINDOWS\system32\rsaenh.dll'
23654394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf53f0000 'C:\WINDOWS\System32\crypt32.dll'
23664394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'win32u.dll'.
23674394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp_win.dll'.
23684394.3d90: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\dcomp.dll) WinVerifyTrust
23694394.3d90: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\dcomp.dll
23704394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'd3d11.dll'...
23714394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'd3d11.dll' -> '\Device\HarddiskVolume3\Windows\System32\d3d11.dll' [rcNtRedir=0xc0150008]
23724394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
23734394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
23744394.3d90: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll
23754394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
23764394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
23774394.3d90: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\win32u.dll
23784394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf42f0000 'C:\WINDOWS\system32\rsaenh.dll'
23794394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf53f0000 'C:\WINDOWS\System32\crypt32.dll'
23804394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
23814394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #26 'dxgi.dll'.
23824394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #28 'win32u.dll'.
23834394.3d90: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\d3d11.dll) WinVerifyTrust
23844394.3d90: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\d3d11.dll
23854394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
23864394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
23874394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
23884394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
23894394.3d90: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\win32u.dll
23904394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'dxgi.dll'...
23914394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'dxgi.dll' -> '\Device\HarddiskVolume3\Windows\System32\dxgi.dll' [rcNtRedir=0xc0150008]
23924394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf42f0000 'C:\WINDOWS\system32\rsaenh.dll'
23934394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf53f0000 'C:\WINDOWS\System32\crypt32.dll'
23944394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
23954394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'win32u.dll'.
23964394.3d90: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\dxgi.dll) WinVerifyTrust
23974394.3d90: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\dxgi.dll
23984394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
23994394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
24004394.3d90: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll
24014394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
24024394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
24034394.3d90: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\win32u.dll
24044394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
24054394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
24064394.3d90: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\dataexchange.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
24074394.3d90: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\DataExchange.dll
24084394.3d90: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\d3d11.dll
24094394.3d90: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\dcomp.dll
24104394.3d90: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\dxgi.dll
24114394.3d90: supR3HardenedDllNotificationCallback: load 00007ffcf3b00000 LB 0x000f4000 C:\WINDOWS\system32\dxgi.dll [fFlags=0x0]
24124394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\dxgi.dll
24134394.3d90: supR3HardenedDllNotificationCallback: load 00007ffcf1210000 LB 0x00264000 C:\WINDOWS\system32\d3d11.dll [fFlags=0x0]
24144394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\d3d11.dll
24154394.3d90: supR3HardenedDllNotificationCallback: load 00007ffcf1ea0000 LB 0x001e6000 C:\WINDOWS\system32\dcomp.dll [fFlags=0x0]
24164394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\dcomp.dll
24174394.3d90: supR3HardenedDllNotificationCallback: load 00007ffce11a0000 LB 0x0003e000 C:\WINDOWS\system32\dataexchange.dll [fFlags=0x0]
24184394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\DataExchange.dll
24194394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6c60000 'C:\WINDOWS\System32\gdi32.dll'
24204394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffce11a0000 'C:\WINDOWS\system32\dataexchange.dll'
24214394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #30 'rpcrt4.dll'.
24224394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #43 'combase.dll'.
24234394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #45 'msvcp_win.dll'.
24244394.3d90: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\twinapi.appcore.dll)
24254394.3d90: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\twinapi.appcore.dll
24264394.3d90: supR3HardenedDllNotificationCallback: load 00007ffcec9a0000 LB 0x00201000 C:\WINDOWS\system32\twinapi.appcore.dll [fFlags=0x0]
24274394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\twinapi.appcore.dll [avoiding WinVerifyTrust]
24284394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
24294394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
24304394.3d90: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll
24314394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
24324394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
24334394.3d90: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\combase.dll
24344394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
24354394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
24364394.3d90: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll
24374394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf42f0000 'C:\WINDOWS\system32\rsaenh.dll'
24384394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf53f0000 'C:\WINDOWS\System32\crypt32.dll'
24394394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\twinapi.appcore.dll'
24404394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status -22919 (0xffffa679)) on \Device\HarddiskVolume3\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2DevProps.dll
24414394.3d90: Error (rc=0):
24424394.3d90: supR3HardenedScreenImage/LdrLoadDll: cached rc=Unknown Status -22919 (0xffffa679) fImage=1 fProtect=0x0 fAccess=0x0 cHits=5 \Device\HarddiskVolume3\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2DevProps.dll
24434394.3d90: Error (rc=0):
24444394.3d90: supR3HardenedMonitor_LdrLoadDll: rejecting 'C:\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2DevProps.dll' (C:\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2DevProps.dll): rcNt=0xc0000190
24454394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0xc0000190 'C:\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2DevProps.dll'
24464394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status -22919 (0xffffa679)) on \Device\HarddiskVolume3\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2OSD.dll
24474394.3d90: Error (rc=0):
24484394.3d90: supR3HardenedScreenImage/LdrLoadDll: cached rc=Unknown Status -22919 (0xffffa679) fImage=1 fProtect=0x0 fAccess=0x0 cHits=5 \Device\HarddiskVolume3\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2OSD.dll
24494394.3d90: Error (rc=0):
24504394.3d90: supR3HardenedMonitor_LdrLoadDll: rejecting 'C:\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2OSD.dll' (C:\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2OSD.dll): rcNt=0xc0000190
24514394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0xc0000190 'C:\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2OSD.dll'
24524394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status -22919 (0xffffa679)) on \Device\HarddiskVolume3\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2DevProps.dll
24534394.3d90: Error (rc=0):
24544394.3d90: supR3HardenedScreenImage/LdrLoadDll: cached rc=Unknown Status -22919 (0xffffa679) fImage=1 fProtect=0x0 fAccess=0x0 cHits=6 \Device\HarddiskVolume3\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2DevProps.dll
24554394.3d90: Error (rc=0):
24564394.3d90: supR3HardenedMonitor_LdrLoadDll: rejecting 'C:\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2DevProps.dll' (C:\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2DevProps.dll): rcNt=0xc0000190
24574394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0xc0000190 'C:\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2DevProps.dll'
24584394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status -22919 (0xffffa679)) on \Device\HarddiskVolume3\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2OSD.dll
24594394.3d90: Error (rc=0):
24604394.3d90: supR3HardenedScreenImage/LdrLoadDll: cached rc=Unknown Status -22919 (0xffffa679) fImage=1 fProtect=0x0 fAccess=0x0 cHits=6 \Device\HarddiskVolume3\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2OSD.dll
24614394.3d90: Error (rc=0):
24624394.3d90: supR3HardenedMonitor_LdrLoadDll: rejecting 'C:\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2OSD.dll' (C:\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2OSD.dll): rcNt=0xc0000190
24634394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0xc0000190 'C:\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2OSD.dll'
24644394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status -22919 (0xffffa679)) on \Device\HarddiskVolume3\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2DevProps.dll
24654394.3d90: Error (rc=0):
24664394.3d90: supR3HardenedScreenImage/LdrLoadDll: cached rc=Unknown Status -22919 (0xffffa679) fImage=1 fProtect=0x0 fAccess=0x0 cHits=7 \Device\HarddiskVolume3\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2DevProps.dll
24674394.3d90: Error (rc=0):
24684394.3d90: supR3HardenedMonitor_LdrLoadDll: rejecting 'C:\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2DevProps.dll' (C:\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2DevProps.dll): rcNt=0xc0000190
24694394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0xc0000190 'C:\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2DevProps.dll'
24704394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status -22919 (0xffffa679)) on \Device\HarddiskVolume3\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2OSD.dll
24714394.3d90: Error (rc=0):
24724394.3d90: supR3HardenedScreenImage/LdrLoadDll: cached rc=Unknown Status -22919 (0xffffa679) fImage=1 fProtect=0x0 fAccess=0x0 cHits=7 \Device\HarddiskVolume3\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2OSD.dll
24734394.3d90: Error (rc=0):
24744394.3d90: supR3HardenedMonitor_LdrLoadDll: rejecting 'C:\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2OSD.dll' (C:\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2OSD.dll): rcNt=0xc0000190
24754394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0xc0000190 'C:\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2OSD.dll'
24764394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status -22919 (0xffffa679)) on \Device\HarddiskVolume3\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2DevProps.dll
24774394.3d90: Error (rc=0):
24784394.3d90: supR3HardenedScreenImage/LdrLoadDll: cached rc=Unknown Status -22919 (0xffffa679) fImage=1 fProtect=0x0 fAccess=0x0 cHits=8 \Device\HarddiskVolume3\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2DevProps.dll
24794394.3d90: Error (rc=0):
24804394.3d90: supR3HardenedMonitor_LdrLoadDll: rejecting 'C:\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2DevProps.dll' (C:\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2DevProps.dll): rcNt=0xc0000190
24814394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0xc0000190 'C:\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2DevProps.dll'
24824394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status -22919 (0xffffa679)) on \Device\HarddiskVolume3\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2OSD.dll
24834394.3d90: Error (rc=0):
24844394.3d90: supR3HardenedScreenImage/LdrLoadDll: cached rc=Unknown Status -22919 (0xffffa679) fImage=1 fProtect=0x0 fAccess=0x0 cHits=8 \Device\HarddiskVolume3\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2OSD.dll
24854394.3d90: Error (rc=0):
24864394.3d90: supR3HardenedMonitor_LdrLoadDll: rejecting 'C:\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2OSD.dll' (C:\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2OSD.dll): rcNt=0xc0000190
24874394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0xc0000190 'C:\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2OSD.dll'
24884394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\SHCore.dll
24894394.3d90: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\Shcore.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
24904394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6430000 'C:\WINDOWS\system32\Shcore.dll'
24914394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
24924394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #15 'oleaut32.dll'.
24934394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #17 'rpcrt4.dll'.
24944394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #20 'coreuicomponents.dll'.
24954394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #21 'coremessaging.dll'.
24964394.3d90: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\TextInputFramework.dll)
24974394.3d90: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\TextInputFramework.dll
24984394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
24994394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #35 'coremessaging.dll'.
25004394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #40 'rpcrt4.dll'.
25014394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #48 'shcore.dll'.
25024394.3d90: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\CoreUIComponents.dll)
25034394.3d90: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\CoreUIComponents.dll
25044394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
25054394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #20 'ws2_32.dll'.
25064394.3d90: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\CoreMessaging.dll)
25074394.3d90: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\CoreMessaging.dll
25084394.3d90: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\ntmarta.dll)
25094394.3d90: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\ntmarta.dll
25104394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'combase.dll'.
25114394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #24 'rpcrt4.dll'.
25124394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #32 'bcryptprimitives.dll'.
25134394.3d90: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\WinTypes.dll)
25144394.3d90: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\WinTypes.dll
25154394.3d90: supR3HardenedDllNotificationCallback: load 00007ffcf3f00000 LB 0x00033000 C:\WINDOWS\SYSTEM32\ntmarta.dll [fFlags=0x0]
25164394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ntmarta.dll [avoiding WinVerifyTrust]
25174394.3d90: supR3HardenedDllNotificationCallback: load 00007ffcf2770000 LB 0x000f2000 C:\WINDOWS\System32\CoreMessaging.dll [fFlags=0x0]
25184394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\CoreMessaging.dll [avoiding WinVerifyTrust]
25194394.3d90: supR3HardenedDllNotificationCallback: load 00007ffcf10b0000 LB 0x00154000 C:\WINDOWS\SYSTEM32\wintypes.dll [fFlags=0x0]
25204394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\WinTypes.dll [avoiding WinVerifyTrust]
25214394.3d90: supR3HardenedDllNotificationCallback: load 00007ffcf2410000 LB 0x0035e000 C:\WINDOWS\System32\CoreUIComponents.dll [fFlags=0x0]
25224394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\CoreUIComponents.dll [avoiding WinVerifyTrust]
25234394.3d90: supR3HardenedDllNotificationCallback: load 00007ffcd4980000 LB 0x000f9000 C:\WINDOWS\SYSTEM32\textinputframework.dll [fFlags=0x0]
25244394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\TextInputFramework.dll [avoiding WinVerifyTrust]
25254394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcryptprimitives.dll'...
25264394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcryptprimitives.dll' -> '\Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll' [rcNtRedir=0xc0150008]
25274394.3d90: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll
25284394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
25294394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
25304394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
25314394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
25324394.3d90: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\combase.dll
25334394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
25344394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
25354394.3d90: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ws2_32.dll
25364394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
25374394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
25384394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shcore.dll'...
25394394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'shcore.dll' -> '\Device\HarddiskVolume3\Windows\System32\shcore.dll' [rcNtRedir=0xc0150008]
25404394.3d90: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\SHCore.dll
25414394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
25424394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
25434394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'coremessaging.dll'...
25444394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'coremessaging.dll' -> '\Device\HarddiskVolume3\Windows\System32\coremessaging.dll' [rcNtRedir=0xc0150008]
25454394.3d90: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\CoreMessaging.dll [lacks WinVerifyTrust]
25464394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
25474394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
25484394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'coremessaging.dll'...
25494394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'coremessaging.dll' -> '\Device\HarddiskVolume3\Windows\System32\coremessaging.dll' [rcNtRedir=0xc0150008]
25504394.3d90: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\CoreMessaging.dll [lacks WinVerifyTrust]
25514394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'coreuicomponents.dll'...
25524394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'coreuicomponents.dll' -> '\Device\HarddiskVolume3\Windows\System32\coreuicomponents.dll' [rcNtRedir=0xc0150008]
25534394.3d90: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\CoreUIComponents.dll [lacks WinVerifyTrust]
25544394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
25554394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
25564394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
25574394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
25584394.3d90: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll
25594394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
25604394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
25614394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf42f0000 'C:\WINDOWS\system32\rsaenh.dll'
25624394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf53f0000 'C:\WINDOWS\System32\crypt32.dll'
25634394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\WinTypes.dll'
25644394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf42f0000 'C:\WINDOWS\system32\rsaenh.dll'
25654394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf53f0000 'C:\WINDOWS\System32\crypt32.dll'
25664394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\ntmarta.dll'
25674394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf42f0000 'C:\WINDOWS\system32\rsaenh.dll'
25684394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf53f0000 'C:\WINDOWS\System32\crypt32.dll'
25694394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\CoreMessaging.dll'
25704394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf42f0000 'C:\WINDOWS\system32\rsaenh.dll'
25714394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf53f0000 'C:\WINDOWS\System32\crypt32.dll'
25724394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\CoreUIComponents.dll'
25734394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf42f0000 'C:\WINDOWS\system32\rsaenh.dll'
25744394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll
25754394.3d90: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\crypt32.dll (Input=crypt32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
25764394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf53f0000 'C:\WINDOWS\System32\crypt32.dll'
25774394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\TextInputFramework.dll'
25784394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ole32.dll
25794394.3d90: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\ole32.dll (Input=ole32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
25804394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf5d00000 'C:\WINDOWS\System32\ole32.dll'
25814394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf65a0000 'C:\WINDOWS\System32\OLEAUT32.dll'
25824394.3d90: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000984 pwszName=\Device\HarddiskVolume3\Windows\System32\wbem\wbemprox.dll
25834394.3d90: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000001a32940
25844394.3d90: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000001a32940
25854394.3d90: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=43C78A996B1A8A014016F442FFFD697A5BC70E12
25864394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf42f0000 'C:\WINDOWS\system32\rsaenh.dll'
25874394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf53f0000 'C:\WINDOWS\System32\crypt32.dll'
25884394.3d90: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package03~31bf3856ad364e35~amd64~~10.0.19041.1083.cat'; file='\Device\HarddiskVolume3\Windows\System32\wbem\wbemprox.dll'
25894394.3d90: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
25904394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
25914394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'ws2_32.dll'.
25924394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #18 'wbemcomn.dll'.
25934394.3d90: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\wbem\wbemprox.dll) WinVerifyTrust
25944394.3d90: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\wbem\wbemprox.dll
25954394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'wbemcomn.dll'...
25964394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'wbemcomn.dll' -> '\Device\HarddiskVolume3\Windows\System32\wbemcomn.dll' [rcNtRedir=0xc0150008]
25974394.3d90: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000000000009a4 pwszName=\Device\HarddiskVolume3\Windows\System32\wbemcomn.dll
25984394.3d90: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000001a32940
25994394.3d90: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000001a32940
26004394.3d90: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=3171C0A71232B61EEEB57057418104E9B8748536
26014394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf42f0000 'C:\WINDOWS\system32\rsaenh.dll'
26024394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf53f0000 'C:\WINDOWS\System32\crypt32.dll'
26034394.3d90: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package03~31bf3856ad364e35~amd64~~10.0.19041.1083.cat'; file='\Device\HarddiskVolume3\Windows\System32\wbemcomn.dll'
26044394.3d90: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
26054394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
26064394.3d90: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\wbemcomn.dll) WinVerifyTrust
26074394.3d90: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\wbemcomn.dll
26084394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
26094394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
26104394.3d90: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ws2_32.dll
26114394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
26124394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
26134394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
26144394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
26154394.3d90: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\wbem\wbemprox.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
26164394.3d90: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wbem\wbemprox.dll
26174394.3d90: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wbemcomn.dll
26184394.3d90: supR3HardenedDllNotificationCallback: load 00007ffcee1d0000 LB 0x00092000 C:\WINDOWS\SYSTEM32\wbemcomn.dll [fFlags=0x0]
26194394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wbemcomn.dll
26204394.3d90: supR3HardenedDllNotificationCallback: load 00007ffcecbb0000 LB 0x00011000 C:\WINDOWS\system32\wbem\wbemprox.dll [fFlags=0x0]
26214394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wbem\wbemprox.dll
26224394.3d90: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(API-MS-Win-Core-LocalRegistry-L1-1-0.dll) -> 0x0, fPresent=1
26234394.3d90: supR3HardenedMonitor_LdrLoadDll: pName=API-MS-Win-Core-LocalRegistry-L1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
26244394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf5550000 'API-MS-Win-Core-LocalRegistry-L1-1-0.dll'
26254394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcecbb0000 'C:\WINDOWS\system32\wbem\wbemprox.dll'
26264394.3d90: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000ac0 pwszName=\Device\HarddiskVolume3\Windows\System32\wbem\wbemsvc.dll
26274394.3d90: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000001a32940
26284394.3d90: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000001a32940
26294394.3d90: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=992357962ADA496D4D946786336473A2571388C1
26304394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf42f0000 'C:\WINDOWS\system32\rsaenh.dll'
26314394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf53f0000 'C:\WINDOWS\System32\crypt32.dll'
26324394.3d90: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package03~31bf3856ad364e35~amd64~~10.0.19041.1083.cat'; file='\Device\HarddiskVolume3\Windows\System32\wbem\wbemsvc.dll'
26334394.3d90: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
26344394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
26354394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'rpcrt4.dll'.
26364394.3d90: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\wbem\wbemsvc.dll) WinVerifyTrust
26374394.3d90: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\wbem\wbemsvc.dll
26384394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
26394394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
26404394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
26414394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
26424394.3d90: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\wbem\wbemsvc.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
26434394.3d90: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wbem\wbemsvc.dll
26444394.3d90: supR3HardenedDllNotificationCallback: load 00007ffceabe0000 LB 0x00014000 C:\WINDOWS\system32\wbem\wbemsvc.dll [fFlags=0x0]
26454394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wbem\wbemsvc.dll
26464394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffceabe0000 'C:\WINDOWS\system32\wbem\wbemsvc.dll'
26474394.3d90: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-localization-l1-2-0.dll) -> 0x0, fPresent=1
26484394.3d90: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-l1-2-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
26494394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf5550000 'api-ms-win-core-localization-l1-2-0.dll'
26504394.3d90: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-localization-obsolete-l1-1-0.dll) -> 0x0, fPresent=1
26514394.3d90: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-obsolete-l1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
26524394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf5550000 'api-ms-win-core-localization-obsolete-l1-1-0.dll'
26534394.3d90: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000b10 pwszName=\Device\HarddiskVolume3\Windows\System32\wbem\fastprox.dll
26544394.3d90: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000001a32940
26554394.3d90: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000001a32940
26564394.3d90: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=184DC69A17259EC62BC6A74793DCE28D7CC5A1AC
26574394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf42f0000 'C:\WINDOWS\system32\rsaenh.dll'
26584394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf53f0000 'C:\WINDOWS\System32\crypt32.dll'
26594394.3d90: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package03~31bf3856ad364e35~amd64~~10.0.19041.1083.cat'; file='\Device\HarddiskVolume3\Windows\System32\wbem\fastprox.dll'
26604394.3d90: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
26614394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
26624394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #20 'wbemcomn.dll'.
26634394.3d90: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\wbem\fastprox.dll) WinVerifyTrust
26644394.3d90: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\wbem\fastprox.dll
26654394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'wbemcomn.dll'...
26664394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'wbemcomn.dll' -> '\Device\HarddiskVolume3\Windows\System32\wbemcomn.dll' [rcNtRedir=0xc0150008]
26674394.3d90: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wbemcomn.dll
26684394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
26694394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
26704394.3d90: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\wbem\fastprox.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
26714394.3d90: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wbem\fastprox.dll
26724394.3d90: supR3HardenedDllNotificationCallback: load 00007ffcead90000 LB 0x0010b000 C:\WINDOWS\system32\wbem\fastprox.dll [fFlags=0x0]
26734394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wbem\fastprox.dll
26744394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcead90000 'C:\WINDOWS\system32\wbem\fastprox.dll'
26754394.3d90: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000b2c pwszName=\Device\HarddiskVolume3\Windows\System32\amsi.dll
26764394.3d90: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000001a32940
26774394.3d90: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000001a32940
26784394.3d90: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=245B8E27DCB2C7A41C4202082696F699C79E039C
26794394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf42f0000 'C:\WINDOWS\system32\rsaenh.dll'
26804394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf53f0000 'C:\WINDOWS\System32\crypt32.dll'
26814394.3d90: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package04~31bf3856ad364e35~amd64~~10.0.19041.1110.cat'; file='\Device\HarddiskVolume3\Windows\System32\amsi.dll'
26824394.3d90: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
26834394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
26844394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #14 'rpcrt4.dll'.
26854394.3d90: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\amsi.dll) WinVerifyTrust
26864394.3d90: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\amsi.dll
26874394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
26884394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
26894394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
26904394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
26914394.3d90: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\amsi.dll (Input=amsi.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
26924394.3d90: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\amsi.dll
26934394.3d90: supR3HardenedDllNotificationCallback: load 00007ffce8770000 LB 0x00019000 C:\WINDOWS\System32\amsi.dll [fFlags=0x0]
26944394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\amsi.dll
26954394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffce8770000 'C:\WINDOWS\System32\amsi.dll'
26964394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf42f0000 'C:\WINDOWS\system32\rsaenh.dll'
26974394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf53f0000 'C:\WINDOWS\System32\crypt32.dll'
26984394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'advapi32.dll'.
26994394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'ole32.dll'.
27004394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'oleaut32.dll'.
27014394.3d90: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Platform\4.18.2106.6-0\MpOAV.dll) WinVerifyTrust
27024394.3d90: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Platform\4.18.2106.6-0\MpOAV.dll
27034394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
27044394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
27054394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
27064394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
27074394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
27084394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
27094394.3d90: supR3HardenedMonitor_LdrLoadDll: pName=C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2106.6-0\MpOav.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
27104394.3d90: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Platform\4.18.2106.6-0\MpOAV.dll
27114394.3d90: supR3HardenedDllNotificationCallback: load 00007ffce86f0000 LB 0x00079000 C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2106.6-0\MpOav.dll [fFlags=0x0]
27124394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Platform\4.18.2106.6-0\MpOAV.dll
27134394.3d90: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-synch-l1-2-0) -> 0x0, fPresent=1
27144394.3d90: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-synch-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
27154394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf5550000 'api-ms-win-core-synch-l1-2-0'
27164394.3d90: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-localization-l1-2-1) -> 0x0, fPresent=1
27174394.3d90: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-l1-2-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
27184394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf5550000 'api-ms-win-core-localization-l1-2-1'
27194394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\kernel32.dll
27204394.3d90: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\kernel32.dll (Input=kernel32, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
27214394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf75b0000 'C:\WINDOWS\System32\kernel32.dll'
27224394.3d90: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\version.dll'.
27234394.3d90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
27244394.3d90: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\version.dll)
27254394.3d90: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\version.dll
27264394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
27274394.3d90: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
27284394.3d90: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\version.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
27294394.3d90: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\version.dll [avoiding WinVerifyTrust]
27304394.3d90: supR3HardenedDllNotificationCallback: load 00007ffcec650000 LB 0x0000a000 C:\WINDOWS\system32\version.dll [fFlags=0x0]
27314394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\version.dll [avoiding WinVerifyTrust]
27324394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcec650000 'C:\WINDOWS\system32\version.dll'
27334394.3d90: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\version.dll'.
27344394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\version.dll' [rescheduled]
27354394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffce86f0000 'C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2106.6-0\MpOav.dll'
27364394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf42f0000 'C:\WINDOWS\system32\rsaenh.dll'
27374394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf53f0000 'C:\WINDOWS\System32\crypt32.dll'
27384394.3d90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\version.dll'
27394394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf64e0000 'C:\WINDOWS\System32\ADVAPI32.dll'
27404394.38dc: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxVMM.dll: Signature #1/2: info status: 24202
27414394.38dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf42f0000 'C:\WINDOWS\system32\rsaenh.dll'
27424394.38dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
27434394.38dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
27444394.38dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxVMM.dll) WinVerifyTrust
27454394.38dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxVMM.dll
27464394.38dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
27474394.38dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
27484394.38dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
27494394.38dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
27504394.38dc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxVMM.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
27514394.38dc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxVMM.dll
27524394.38dc: supR3HardenedDllNotificationCallback: load 00007ffcb2170000 LB 0x0037d000 C:\Program Files\Oracle\VirtualBox\VBoxVMM.DLL [fFlags=0x0]
27534394.38dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxVMM.dll
27544394.38dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcb2170000 'C:\Program Files\Oracle\VirtualBox\VBoxVMM.DLL'
27554394.3664: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf5d00000 'C:\WINDOWS\system32\ole32.dll'
27564394.4fdc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf5d00000 'C:\WINDOWS\system32\ole32.dll'
27574394.3664: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf42f0000 'C:\WINDOWS\system32\rsaenh.dll'
27584394.3354: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxSharedClipboard.dll: Signature #1/2: info status: 24202
27594394.3354: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf42f0000 'C:\WINDOWS\system32\rsaenh.dll'
27604394.3354: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
27614394.3354: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp100.dll'.
27624394.3354: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxvmm.dll'.
27634394.3354: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'vboxrt.dll'.
27644394.3354: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'user32.dll'.
27654394.3354: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxSharedClipboard.dll) WinVerifyTrust
27664394.3354: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxSharedClipboard.dll
27674394.3354: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
27684394.3354: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
27694394.3354: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll
27704394.3354: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
27714394.3354: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
27724394.3354: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxvmm.dll'...
27734394.3354: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxvmm.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxvmm.dll' [rcNtRedir=0xc0150008]
27744394.3354: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxVMM.dll
27754394.3354: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
27764394.3354: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
27774394.3354: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
27784394.3354: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
27794394.3354: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxSharedClipboard.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
27804394.3354: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxSharedClipboard.dll
27814394.3354: supR3HardenedDllNotificationCallback: load 00007ffcefb20000 LB 0x00010000 C:\Program Files\Oracle\VirtualBox\VBoxSharedClipboard.DLL [fFlags=0x0]
27824394.3354: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxSharedClipboard.dll
27834394.3354: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcefb20000 'C:\Program Files\Oracle\VirtualBox\VBoxSharedClipboard.DLL'
27844394.494c: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxDragAndDropSvc.dll: Signature #1/2: info status: 24202
27854394.494c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf42f0000 'C:\WINDOWS\system32\rsaenh.dll'
27864394.494c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
27874394.494c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp100.dll'.
27884394.494c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxrt.dll'.
27894394.494c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxDragAndDropSvc.dll) WinVerifyTrust
27904394.494c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxDragAndDropSvc.dll
27914394.494c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
27924394.494c: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
27934394.494c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
27944394.494c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
27954394.494c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
27964394.494c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
27974394.494c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxDragAndDropSvc.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
27984394.494c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxDragAndDropSvc.dll
27994394.494c: supR3HardenedDllNotificationCallback: load 00007ffcefb10000 LB 0x0000d000 C:\Program Files\Oracle\VirtualBox\VBoxDragAndDropSvc.DLL [fFlags=0x0]
28004394.494c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxDragAndDropSvc.dll
28014394.494c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcefb10000 'C:\Program Files\Oracle\VirtualBox\VBoxDragAndDropSvc.DLL'
28024394.3664: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
28034394.3664: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\Shell32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
28044394.3664: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6e70000 'C:\WINDOWS\system32\Shell32.dll'
28054394.3664: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000c88 pwszName=\Device\HarddiskVolume3\Windows\System32\WinHvPlatform.dll
28064394.3664: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000001a32940
28074394.3664: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000001a32940
28084394.3664: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=E4C882F4212D993AB8CD1218452ADE578B4E8723
28094394.3664: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf42f0000 'C:\WINDOWS\system32\rsaenh.dll'
28104394.3664: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf53f0000 'C:\WINDOWS\System32\crypt32.dll'
28114394.3664: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package02~31bf3856ad364e35~amd64~~10.0.19041.1083.cat'; file='\Device\HarddiskVolume3\Windows\System32\WinHvPlatform.dll'
28124394.3664: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
28134394.3664: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'vid.dll'.
28144394.3664: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\WinHvPlatform.dll) WinVerifyTrust
28154394.3664: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\WinHvPlatform.dll
28164394.3664: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vid.dll'...
28174394.3664: supR3HardenedWinVerifyCacheProcessImportTodos: 'vid.dll' -> '\Device\HarddiskVolume3\Windows\System32\vid.dll' [rcNtRedir=0xc0150008]
28184394.3664: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf42f0000 'C:\WINDOWS\system32\rsaenh.dll'
28194394.3664: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf53f0000 'C:\WINDOWS\System32\crypt32.dll'
28204394.3664: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\vid.dll) WinVerifyTrust
28214394.3664: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\vid.dll
28224394.3664: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\WinHvPlatform.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
28234394.3664: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\WinHvPlatform.dll
28244394.3664: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\vid.dll
28254394.3664: supR3HardenedDllNotificationCallback: load 00007ffcedb50000 LB 0x0001b000 C:\WINDOWS\SYSTEM32\vid.dll [fFlags=0x0]
28264394.3664: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\vid.dll
28274394.3664: supR3HardenedDllNotificationCallback: load 00007ffce3680000 LB 0x00026000 C:\WINDOWS\system32\WinHvPlatform.dll [fFlags=0x0]
28284394.3664: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\WinHvPlatform.dll
28294394.3664: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffce3680000 'C:\WINDOWS\system32\WinHvPlatform.dll'
28304394.3664: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\vid.dll
28314394.3664: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\vid.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
28324394.3664: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcedb50000 'C:\WINDOWS\system32\vid.dll'
28334394.3664: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ntdll.dll
28344394.3664: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\NTDLL.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
28354394.3664: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf7af0000 'C:\WINDOWS\system32\NTDLL.DLL'
28364394.3664: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf42f0000 'C:\WINDOWS\system32\rsaenh.dll'
28374394.3664: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxDD.dll: Signature #1/2: info status: 24202
28384394.3664: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf42f0000 'C:\WINDOWS\system32\rsaenh.dll'
28394394.3664: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
28404394.3664: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxvmm.dll'.
28414394.3664: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxrt.dll'.
28424394.3664: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'vboxddu.dll'.
28434394.3664: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'vboxdd2.dll'.
28444394.3664: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'user32.dll'.
28454394.3664: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'setupapi.dll'.
28464394.3664: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'ws2_32.dll'.
28474394.3664: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'ole32.dll'.
28484394.3664: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'iphlpapi.dll'.
28494394.3664: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxDD.dll) WinVerifyTrust
28504394.3664: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxDD.dll
28514394.3664: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'iphlpapi.dll'...
28524394.3664: supR3HardenedWinVerifyCacheProcessImportTodos: 'iphlpapi.dll' -> '\Device\HarddiskVolume3\Windows\System32\iphlpapi.dll' [rcNtRedir=0xc0150008]
28534394.3664: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf42f0000 'C:\WINDOWS\system32\rsaenh.dll'
28544394.3664: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf53f0000 'C:\WINDOWS\System32\crypt32.dll'
28554394.3664: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\IPHLPAPI.DLL) WinVerifyTrust
28564394.3664: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\IPHLPAPI.DLL
28574394.3664: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
28584394.3664: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
28594394.3664: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
28604394.3664: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
28614394.3664: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ws2_32.dll
28624394.3664: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'setupapi.dll'...
28634394.3664: supR3HardenedWinVerifyCacheProcessImportTodos: 'setupapi.dll' -> '\Device\HarddiskVolume3\Windows\System32\setupapi.dll' [rcNtRedir=0xc0150008]
28644394.3664: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf42f0000 'C:\WINDOWS\system32\rsaenh.dll'
28654394.3664: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf53f0000 'C:\WINDOWS\System32\crypt32.dll'
28664394.3664: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
28674394.3664: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #28 'rpcrt4.dll'.
28684394.3664: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #35 'cfgmgr32.dll'.
28694394.3664: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #40 'bcrypt.dll'.
28704394.3664: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\setupapi.dll) WinVerifyTrust
28714394.3664: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\setupapi.dll
28724394.3664: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
28734394.3664: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
28744394.3664: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxdd2.dll'...
28754394.3664: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxdd2.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxdd2.dll' [rcNtRedir=0xc0150008]
28764394.3664: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxDD2.dll: Signature #1/2: info status: 24202
28774394.3664: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcrypt.dll'...
28784394.3664: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcrypt.dll' -> '\Device\HarddiskVolume3\Windows\System32\bcrypt.dll' [rcNtRedir=0xc0150008]
28794394.3664: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\bcrypt.dll
28804394.3664: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'cfgmgr32.dll'...
28814394.3664: supR3HardenedWinVerifyCacheProcessImportTodos: 'cfgmgr32.dll' -> '\Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll' [rcNtRedir=0xc0150008]
28824394.3664: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll'.
28834394.3664: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll)
28844394.3664: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll
28854394.3664: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
28864394.3664: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
28874394.3664: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
28884394.3664: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
28894394.3664: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf42f0000 'C:\WINDOWS\system32\rsaenh.dll'
28904394.3664: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
28914394.3664: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
28924394.3664: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxDD2.dll) WinVerifyTrust
28934394.3664: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxDD2.dll
28944394.3664: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxddu.dll'...
28954394.3664: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxddu.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxddu.dll' [rcNtRedir=0xc0150008]
28964394.3664: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxDDU.dll: Signature #1/2: info status: 24202
28974394.3664: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
28984394.3664: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
28994394.3664: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
29004394.3664: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
29014394.3664: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll
29024394.3664: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf42f0000 'C:\WINDOWS\system32\rsaenh.dll'
29034394.3664: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
29044394.3664: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
29054394.3664: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
29064394.3664: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'setupapi.dll'.
29074394.3664: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'advapi32.dll'.
29084394.3664: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxDDU.dll) WinVerifyTrust
29094394.3664: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxDDU.dll
29104394.3664: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
29114394.3664: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
29124394.3664: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxvmm.dll'...
29134394.3664: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxvmm.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxvmm.dll' [rcNtRedir=0xc0150008]
29144394.3664: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxVMM.dll
29154394.3664: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
29164394.3664: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
29174394.3664: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
29184394.3664: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
29194394.3664: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'setupapi.dll'...
29204394.3664: supR3HardenedWinVerifyCacheProcessImportTodos: 'setupapi.dll' -> '\Device\HarddiskVolume3\Windows\System32\setupapi.dll' [rcNtRedir=0xc0150008]
29214394.3664: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\setupapi.dll
29224394.3664: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
29234394.3664: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
29244394.3664: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
29254394.3664: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
29264394.3664: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
29274394.3664: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
29284394.3664: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxDD.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
29294394.3664: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxDD.dll
29304394.3664: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxDDU.dll
29314394.3664: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxDD2.dll
29324394.3664: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\IPHLPAPI.DLL
29334394.3664: supR3HardenedDllNotificationCallback: load 00007ffcf5ae0000 LB 0x0004e000 C:\WINDOWS\System32\cfgmgr32.dll [fFlags=0x0]
29344394.3664: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll [avoiding WinVerifyTrust]
29354394.3664: supR3HardenedDllNotificationCallback: load 00007ffcf5e30000 LB 0x00469000 C:\WINDOWS\System32\SETUPAPI.dll [fFlags=0x0]
29364394.3664: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\setupapi.dll
29374394.3664: supR3HardenedDllNotificationCallback: load 00007ffce4220000 LB 0x00066000 C:\Program Files\Oracle\VirtualBox\VBoxDDU.dll [fFlags=0x0]
29384394.3664: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxDDU.dll
29394394.3664: supR3HardenedDllNotificationCallback: load 00007ffc84bf0000 LB 0x0085c000 C:\Program Files\Oracle\VirtualBox\VBoxDD2.dll [fFlags=0x0]
29404394.3664: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxDD2.dll
29414394.3664: supR3HardenedDllNotificationCallback: load 00007ffcf4660000 LB 0x0003b000 C:\WINDOWS\SYSTEM32\IPHLPAPI.DLL [fFlags=0x0]
29424394.3664: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\IPHLPAPI.DLL
29434394.3664: supR3HardenedDllNotificationCallback: load 00007ffc8fe30000 LB 0x00a03000 C:\Program Files\Oracle\VirtualBox\VBoxDD.DLL [fFlags=0x0]
29444394.3664: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxDD.dll
29454394.3664: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc8fe30000 'C:\Program Files\Oracle\VirtualBox\VBoxDD.DLL'
29464394.3664: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf42f0000 'C:\WINDOWS\system32\rsaenh.dll'
29474394.3664: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf53f0000 'C:\WINDOWS\System32\crypt32.dll'
29484394.3664: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll'
29494394.3664: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf42f0000 'C:\WINDOWS\system32\rsaenh.dll'
29504394.3664: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxC.dll
29514394.3664: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxC.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
29524394.3664: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffca5820000 'C:\Program Files\Oracle\VirtualBox\VBoxC.DLL'
29534394.3664: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf42f0000 'C:\WINDOWS\system32\rsaenh.dll'
29544394.3664: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxDD2.dll
29554394.3664: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxDD2.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
29564394.3664: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc84bf0000 'C:\Program Files\Oracle\VirtualBox\VBoxDD2.DLL'
29574394.3664: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf42f0000 'C:\WINDOWS\system32\rsaenh.dll'
29584394.4494: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxSharedFolders.dll: Signature #1/2: info status: 24202
29594394.4494: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf42f0000 'C:\WINDOWS\system32\rsaenh.dll'
29604394.4494: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
29614394.4494: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxvmm.dll'.
29624394.4494: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxrt.dll'.
29634394.4494: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxSharedFolders.dll) WinVerifyTrust
29644394.4494: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxSharedFolders.dll
29654394.4494: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
29664394.4494: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
29674394.4494: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxvmm.dll'...
29684394.4494: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxvmm.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxvmm.dll' [rcNtRedir=0xc0150008]
29694394.4494: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxVMM.dll
29704394.4494: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
29714394.4494: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
29724394.4494: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxSharedFolders.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
29734394.4494: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxSharedFolders.dll
29744394.4494: supR3HardenedDllNotificationCallback: load 00007ffcefaf0000 LB 0x00014000 C:\Program Files\Oracle\VirtualBox\VBoxSharedFolders.DLL [fFlags=0x0]
29754394.4494: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxSharedFolders.dll
29764394.4494: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcefaf0000 'C:\Program Files\Oracle\VirtualBox\VBoxSharedFolders.DLL'
29774394.e30: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxGuestControlSvc.dll: Signature #1/2: info status: 24202
29784394.e30: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf42f0000 'C:\WINDOWS\system32\rsaenh.dll'
29794394.e30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
29804394.e30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp100.dll'.
29814394.e30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxvmm.dll'.
29824394.e30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'vboxrt.dll'.
29834394.e30: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxGuestControlSvc.dll) WinVerifyTrust
29844394.e30: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxGuestControlSvc.dll
29854394.e30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
29864394.e30: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
29874394.e30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxvmm.dll'...
29884394.e30: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxvmm.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxvmm.dll' [rcNtRedir=0xc0150008]
29894394.e30: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxVMM.dll
29904394.e30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
29914394.e30: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
29924394.e30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
29934394.e30: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
29944394.e30: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxGuestControlSvc.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
29954394.e30: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxGuestControlSvc.dll
29964394.e30: supR3HardenedDllNotificationCallback: load 00007ffcef4e0000 LB 0x0000c000 C:\Program Files\Oracle\VirtualBox\VBoxGuestControlSvc.DLL [fFlags=0x0]
29974394.e30: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxGuestControlSvc.dll
29984394.e30: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcef4e0000 'C:\Program Files\Oracle\VirtualBox\VBoxGuestControlSvc.DLL'
29994394.540: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxGuestPropSvc.dll: Signature #1/2: info status: 24202
30004394.540: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf42f0000 'C:\WINDOWS\system32\rsaenh.dll'
30014394.540: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
30024394.540: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp100.dll'.
30034394.540: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxrt.dll'.
30044394.540: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxGuestPropSvc.dll) WinVerifyTrust
30054394.540: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxGuestPropSvc.dll
30064394.540: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
30074394.540: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
30084394.540: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
30094394.540: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
30104394.540: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
30114394.540: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
30124394.540: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxGuestPropSvc.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
30134394.540: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxGuestPropSvc.dll
30144394.540: supR3HardenedDllNotificationCallback: load 00007ffcef4d0000 LB 0x0000d000 C:\Program Files\Oracle\VirtualBox\VBoxGuestPropSvc.DLL [fFlags=0x0]
30154394.540: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxGuestPropSvc.dll
30164394.540: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcef4d0000 'C:\Program Files\Oracle\VirtualBox\VBoxGuestPropSvc.DLL'
30174394.3664: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\IPHLPAPI.DLL
30184394.3664: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\Iphlpapi.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
30194394.3664: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf4660000 'C:\WINDOWS\system32\Iphlpapi.dll'
30204394.3664: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'rpcrt4.dll'.
30214394.3664: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'nsi.dll'.
30224394.3664: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\winnsi.dll)
30234394.3664: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\winnsi.dll
30244394.3664: supR3HardenedDllNotificationCallback: load 00007ffcf78f0000 LB 0x00008000 C:\WINDOWS\System32\NSI.dll [fFlags=0x0]
30254394.3664: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\nsi.dll)
30264394.3664: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\nsi.dll
30274394.3664: supR3HardenedDllNotificationCallback: load 00007ffcee680000 LB 0x0000b000 C:\WINDOWS\SYSTEM32\WINNSI.DLL [fFlags=0x0]
30284394.3664: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winnsi.dll [avoiding WinVerifyTrust]
30294394.3664: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'rpcrt4.dll'.
30304394.3664: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\dhcpcsvc6.dll)
30314394.3664: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\dhcpcsvc6.dll
30324394.3664: supR3HardenedDllNotificationCallback: load 00007ffcee700000 LB 0x00017000 C:\WINDOWS\SYSTEM32\dhcpcsvc6.DLL [fFlags=0x0]
30334394.3664: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\dhcpcsvc6.dll [avoiding WinVerifyTrust]
30344394.3664: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'rpcrt4.dll'.
30354394.3664: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\dhcpcsvc.dll)
30364394.3664: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\dhcpcsvc.dll
30374394.3664: supR3HardenedDllNotificationCallback: load 00007ffcee660000 LB 0x0001d000 C:\WINDOWS\SYSTEM32\dhcpcsvc.DLL [fFlags=0x0]
30384394.3664: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\dhcpcsvc.dll [avoiding WinVerifyTrust]
30394394.3664: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\dnsapi.dll)
30404394.3664: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\dnsapi.dll
30414394.3664: supR3HardenedDllNotificationCallback: load 00007ffcf46b0000 LB 0x000cc000 C:\WINDOWS\SYSTEM32\DNSAPI.dll [fFlags=0x0]
30424394.3664: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\dnsapi.dll [avoiding WinVerifyTrust]
30434394.3664: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
30444394.3664: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
30454394.3664: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
30464394.3664: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
30474394.3664: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'nsi.dll'...
30484394.3664: supR3HardenedWinVerifyCacheProcessImportTodos: 'nsi.dll' -> '\Device\HarddiskVolume3\Windows\System32\nsi.dll' [rcNtRedir=0xc0150008]
30494394.3664: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\nsi.dll [lacks WinVerifyTrust]
30504394.3664: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
30514394.3664: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
30524394.3664: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf42f0000 'C:\WINDOWS\system32\rsaenh.dll'
30534394.3664: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf53f0000 'C:\WINDOWS\System32\crypt32.dll'
30544394.3664: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\dnsapi.dll'
30554394.3664: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000ddc pwszName=\Device\HarddiskVolume3\Windows\System32\dhcpcsvc.dll
30564394.3664: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000001a32940
30574394.3664: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000001a32940
30584394.3664: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=DCAD48333E2A4922B628484108339A2EED2CAAA4
30594394.3664: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf42f0000 'C:\WINDOWS\system32\rsaenh.dll'
30604394.3664: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf53f0000 'C:\WINDOWS\System32\crypt32.dll'
30614394.3664: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.19041.1110.cat'; file='\Device\HarddiskVolume3\Windows\System32\dhcpcsvc.dll'
30624394.3664: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
30634394.3664: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\dhcpcsvc.dll'
30644394.3664: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000f74 pwszName=\Device\HarddiskVolume3\Windows\System32\dhcpcsvc6.dll
30654394.3664: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000001a32940
30664394.3664: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000001a32940
30674394.3664: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=3B30BEFD11A7A908BF866683855A2B32DDCBE496
30684394.3664: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf42f0000 'C:\WINDOWS\system32\rsaenh.dll'
30694394.3664: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf53f0000 'C:\WINDOWS\System32\crypt32.dll'
30704394.3664: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.19041.1110.cat'; file='\Device\HarddiskVolume3\Windows\System32\dhcpcsvc6.dll'
30714394.3664: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
30724394.3664: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\dhcpcsvc6.dll'
30734394.3664: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf42f0000 'C:\WINDOWS\system32\rsaenh.dll'
30744394.3664: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf53f0000 'C:\WINDOWS\System32\crypt32.dll'
30754394.3664: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\nsi.dll'
30764394.3664: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf42f0000 'C:\WINDOWS\system32\rsaenh.dll'
30774394.3664: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf53f0000 'C:\WINDOWS\System32\crypt32.dll'
30784394.3664: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\winnsi.dll'
30794394.3664: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf42f0000 'C:\WINDOWS\system32\rsaenh.dll'
30804394.3664: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf53f0000 'C:\WINDOWS\System32\crypt32.dll'
30814394.3664: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
30824394.3664: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'user32.dll'.
30834394.3664: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'win32u.dll'.
30844394.3664: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'gdi32.dll'.
30854394.3664: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'dwmapi.dll'.
30864394.3664: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\d3d9.dll) WinVerifyTrust
30874394.3664: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\d3d9.dll
30884394.3664: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'dwmapi.dll'...
30894394.3664: supR3HardenedWinVerifyCacheProcessImportTodos: 'dwmapi.dll' -> '\Device\HarddiskVolume3\Windows\System32\dwmapi.dll' [rcNtRedir=0xc0150008]
30904394.3664: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf42f0000 'C:\WINDOWS\system32\rsaenh.dll'
30914394.3664: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf53f0000 'C:\WINDOWS\System32\crypt32.dll'
30924394.3664: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
30934394.3664: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #20 'win32u.dll'.
30944394.3664: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #21 'user32.dll'.
30954394.3664: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #22 'gdi32.dll'.
30964394.3664: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\dwmapi.dll) WinVerifyTrust
30974394.3664: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\dwmapi.dll
30984394.3664: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
30994394.3664: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
31004394.3664: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
31014394.3664: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
31024394.3664: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
31034394.3664: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
31044394.3664: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
31054394.3664: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
31064394.3664: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
31074394.3664: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
31084394.3664: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll
31094394.3664: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
31104394.3664: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
31114394.3664: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
31124394.3664: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
31134394.3664: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
31144394.3664: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
31154394.3664: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\d3d9.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
31164394.3664: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\d3d9.dll
31174394.3664: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\dwmapi.dll
31184394.3664: supR3HardenedDllNotificationCallback: load 00007ffcf2d50000 LB 0x0002f000 C:\WINDOWS\SYSTEM32\dwmapi.dll [fFlags=0x0]
31194394.3664: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\dwmapi.dll
31204394.3664: supR3HardenedDllNotificationCallback: load 00007ffce3e30000 LB 0x001ce000 C:\WINDOWS\system32\d3d9.dll [fFlags=0x0]
31214394.3664: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\d3d9.dll
31224394.3664: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffce3e30000 'C:\WINDOWS\system32\d3d9.dll'
31234394.3664: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf42f0000 'C:\WINDOWS\system32\rsaenh.dll'
31244394.3664: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf53f0000 'C:\WINDOWS\System32\crypt32.dll'
31254394.3664: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf53f0000 'C:\WINDOWS\System32\crypt32.dll'
31264394.3664: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'advapi32.dll'.
31274394.3664: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'user32.dll'.
31284394.3664: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'ole32.dll'.
31294394.3664: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igdumdim64.dll) WinVerifyTrust
31304394.3664: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igdumdim64.dll
31314394.3664: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
31324394.3664: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
31334394.3664: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
31344394.3664: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
31354394.3664: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
31364394.3664: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
31374394.3664: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igdumdim64.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
31384394.3664: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igdumdim64.dll
31394394.3664: supR3HardenedDllNotificationCallback: load 00007ffcae4e0000 LB 0x00165000 C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igdumdim64.dll [fFlags=0x0]
31404394.3664: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igdumdim64.dll
31414394.3664: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-synch-l1-2-0) -> 0x0, fPresent=1
31424394.3664: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-synch-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
31434394.3664: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf5550000 'api-ms-win-core-synch-l1-2-0'
31444394.3664: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-localization-l1-2-1) -> 0x0, fPresent=1
31454394.3664: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-l1-2-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
31464394.3664: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf5550000 'api-ms-win-core-localization-l1-2-1'
31474394.3664: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\kernel32.dll
31484394.3664: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\kernel32.dll (Input=kernel32, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
31494394.3664: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf75b0000 'C:\WINDOWS\System32\kernel32.dll'
31504394.3664: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcae4e0000 'C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igdumdim64.dll'
31514394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status -22919 (0xffffa679)) on \Device\HarddiskVolume3\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2DevProps.dll
31524394.3d90: Error (rc=0):
31534394.3d90: supR3HardenedScreenImage/LdrLoadDll: cached rc=Unknown Status -22919 (0xffffa679) fImage=1 fProtect=0x0 fAccess=0x0 cHits=16 \Device\HarddiskVolume3\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2DevProps.dll
31544394.3d90: Error (rc=0):
31554394.3d90: supR3HardenedMonitor_LdrLoadDll: rejecting 'C:\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2DevProps.dll' (C:\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2DevProps.dll): rcNt=0xc0000190
31564394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0xc0000190 'C:\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2DevProps.dll'
31574394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status -22919 (0xffffa679)) on \Device\HarddiskVolume3\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2OSD.dll
31584394.3d90: Error (rc=0):
31594394.3d90: supR3HardenedScreenImage/LdrLoadDll: cached rc=Unknown Status -22919 (0xffffa679) fImage=1 fProtect=0x0 fAccess=0x0 cHits=16 \Device\HarddiskVolume3\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2OSD.dll
31604394.3d90: Error (rc=0):
31614394.3d90: supR3HardenedMonitor_LdrLoadDll: rejecting 'C:\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2OSD.dll' (C:\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2OSD.dll): rcNt=0xc0000190
31624394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0xc0000190 'C:\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2OSD.dll'
31634394.3664: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf42f0000 'C:\WINDOWS\system32\rsaenh.dll'
31644394.3664: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf53f0000 'C:\WINDOWS\System32\crypt32.dll'
31654394.3664: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf53f0000 'C:\WINDOWS\System32\crypt32.dll'
31664394.3664: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'advapi32.dll'.
31674394.3664: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'ole32.dll'.
31684394.3664: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'oleaut32.dll'.
31694394.3664: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'setupapi.dll'.
31704394.3664: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igd9dxva64.dll) WinVerifyTrust
31714394.3664: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igd9dxva64.dll
31724394.3664: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'setupapi.dll'...
31734394.3664: supR3HardenedWinVerifyCacheProcessImportTodos: 'setupapi.dll' -> '\Device\HarddiskVolume3\Windows\System32\setupapi.dll' [rcNtRedir=0xc0150008]
31744394.3664: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\setupapi.dll
31754394.3664: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
31764394.3664: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
31774394.3664: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
31784394.3664: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
31794394.3664: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
31804394.3664: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
31814394.3664: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igd9dxva64.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
31824394.3664: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igd9dxva64.dll
31834394.3664: supR3HardenedDllNotificationCallback: load 00007ffc911f0000 LB 0x03c8b000 C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igd9dxva64.dll [fFlags=0x0]
31844394.3664: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igd9dxva64.dll
31854394.3664: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-synch-l1-2-0) -> 0x0, fPresent=1
31864394.3664: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-synch-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
31874394.3664: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf5550000 'api-ms-win-core-synch-l1-2-0'
31884394.3664: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-localization-l1-2-1) -> 0x0, fPresent=1
31894394.3664: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-l1-2-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
31904394.3664: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf5550000 'api-ms-win-core-localization-l1-2-1'
31914394.3664: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\kernel32.dll
31924394.3664: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\kernel32.dll (Input=kernel32, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
31934394.3664: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf75b0000 'C:\WINDOWS\System32\kernel32.dll'
31944394.3664: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-string-l1-1-0) -> 0x0, fPresent=1
31954394.3664: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-string-l1-1-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
31964394.3664: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf5550000 'api-ms-win-core-string-l1-1-0'
31974394.3664: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-datetime-l1-1-1) -> 0x0, fPresent=1
31984394.3664: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-datetime-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
31994394.3664: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf5550000 'api-ms-win-core-datetime-l1-1-1'
32004394.3664: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-localization-obsolete-l1-2-0) -> 0x0, fPresent=1
32014394.3664: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-obsolete-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
32024394.3664: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf5550000 'api-ms-win-core-localization-obsolete-l1-2-0'
32034394.3664: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc911f0000 'C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igd9dxva64.dll'
32044394.3664: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf42f0000 'C:\WINDOWS\system32\rsaenh.dll'
32054394.3664: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf53f0000 'C:\WINDOWS\System32\crypt32.dll'
32064394.3664: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf53f0000 'C:\WINDOWS\System32\crypt32.dll'
32074394.3664: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'advapi32.dll'.
32084394.3664: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igdgmm64.dll) WinVerifyTrust
32094394.3664: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igdgmm64.dll
32104394.3664: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
32114394.3664: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
32124394.3664: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igdgmm64.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
32134394.3664: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igdgmm64.dll
32144394.3664: supR3HardenedDllNotificationCallback: load 00007ffce8130000 LB 0x00336000 C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igdgmm64.dll [fFlags=0x0]
32154394.3664: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igdgmm64.dll
32164394.3664: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-synch-l1-2-0) -> 0x0, fPresent=1
32174394.3664: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-synch-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
32184394.3664: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf5550000 'api-ms-win-core-synch-l1-2-0'
32194394.3664: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-localization-l1-2-1) -> 0x0, fPresent=1
32204394.3664: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-l1-2-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
32214394.3664: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf5550000 'api-ms-win-core-localization-l1-2-1'
32224394.3664: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\kernel32.dll
32234394.3664: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\kernel32.dll (Input=kernel32, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
32244394.3664: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf75b0000 'C:\WINDOWS\System32\kernel32.dll'
32254394.3664: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffce8130000 'C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igdgmm64.dll'
32264394.3664: \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\nvmii.inf_amd64_45030e1b94489c65\nvldumdx.dll: Owner is administrators group.
32274394.3664: \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\nvmii.inf_amd64_45030e1b94489c65\nvldumdx.dll: Signature #1/2: VERR_CR_X509_CPV_NOT_VALID_AT_TIME for 0x60ebdf15; retrying against current time: 0x60fbe921.
32284394.3664: \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\nvmii.inf_amd64_45030e1b94489c65\nvldumdx.dll: Signature #1/2: VERR_CR_X509_CPV_NOT_VALID_AT_TIME (-23033) w/ timestamp=0x60fbe921/now.
32294394.3664: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf42f0000 'C:\WINDOWS\system32\rsaenh.dll'
32304394.3664: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf53f0000 'C:\WINDOWS\System32\crypt32.dll'
32314394.3664: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #30 'version.dll'.
32324394.3664: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #31 'user32.dll'.
32334394.3664: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\nvmii.inf_amd64_45030e1b94489c65\nvldumdx.dll) WinVerifyTrust
32344394.3664: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\nvmii.inf_amd64_45030e1b94489c65\nvldumdx.dll
32354394.3664: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
32364394.3664: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
32374394.3664: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'version.dll'...
32384394.3664: supR3HardenedWinVerifyCacheProcessImportTodos: 'version.dll' -> '\Device\HarddiskVolume3\Windows\System32\version.dll' [rcNtRedir=0xc0150008]
32394394.3664: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\version.dll
32404394.3664: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\DriverStore\FileRepository\nvmii.inf_amd64_45030e1b94489c65\nvldumdx.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
32414394.3664: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\nvmii.inf_amd64_45030e1b94489c65\nvldumdx.dll
32424394.3664: supR3HardenedDllNotificationCallback: load 00007ffce8020000 LB 0x00106000 C:\WINDOWS\System32\DriverStore\FileRepository\nvmii.inf_amd64_45030e1b94489c65\nvldumdx.dll [fFlags=0x0]
32434394.3664: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\nvmii.inf_amd64_45030e1b94489c65\nvldumdx.dll
32444394.3664: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-synch-l1-2-0) -> 0x0, fPresent=1
32454394.3664: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-synch-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
32464394.3664: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf5550000 'api-ms-win-core-synch-l1-2-0'
32474394.3664: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-fibers-l1-1-1) -> 0x0, fPresent=1
32484394.3664: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-fibers-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
32494394.3664: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf5550000 'api-ms-win-core-fibers-l1-1-1'
32504394.3664: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-synch-l1-2-0) -> 0x0, fPresent=1
32514394.3664: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-synch-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
32524394.3664: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf5550000 'api-ms-win-core-synch-l1-2-0'
32534394.3664: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-fibers-l1-1-1) -> 0x0, fPresent=1
32544394.3664: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-fibers-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
32554394.3664: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf5550000 'api-ms-win-core-fibers-l1-1-1'
32564394.3664: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-localization-l1-2-1) -> 0x0, fPresent=1
32574394.3664: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-l1-2-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
32584394.3664: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf5550000 'api-ms-win-core-localization-l1-2-1'
32594394.3664: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf75b0000 'C:\WINDOWS\System32\kernel32.dll'
32604394.3664: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffce8020000 'C:\WINDOWS\System32\DriverStore\FileRepository\nvmii.inf_amd64_45030e1b94489c65\nvldumdx.dll'
32614394.3664: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msasn1.dll
32624394.3664: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\msasn1.dll (Input=msasn1.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
32634394.3664: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf4e20000 'C:\WINDOWS\System32\msasn1.dll'
32644394.3664: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffceba20000 'C:\WINDOWS\System32\cryptnet.dll'
32654394.3664: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf42f0000 'C:\WINDOWS\system32\rsaenh.dll'
32664394.3664: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf53f0000 'C:\WINDOWS\System32\crypt32.dll'
32674394.3664: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
32684394.3664: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\drvstore.dll) WinVerifyTrust
32694394.3664: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\drvstore.dll
32704394.3664: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
32714394.3664: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
32724394.3664: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\drvstore.dll (Input=drvstore.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
32734394.3664: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\drvstore.dll
32744394.3664: supR3HardenedDllNotificationCallback: load 00007ffceb7a0000 LB 0x0014a000 C:\WINDOWS\System32\drvstore.dll [fFlags=0x0]
32754394.3664: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\drvstore.dll
32764394.3664: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffceb7a0000 'C:\WINDOWS\System32\drvstore.dll'
32774394.3664: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf42f0000 'C:\WINDOWS\system32\rsaenh.dll'
32784394.3664: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf53f0000 'C:\WINDOWS\System32\crypt32.dll'
32794394.3664: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #18 'cfgmgr32.dll'.
32804394.3664: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\devobj.dll) WinVerifyTrust
32814394.3664: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\devobj.dll
32824394.3664: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'cfgmgr32.dll'...
32834394.3664: supR3HardenedWinVerifyCacheProcessImportTodos: 'cfgmgr32.dll' -> '\Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll' [rcNtRedir=0xc0150008]
32844394.3664: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll
32854394.3664: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\devobj.dll (Input=devobj.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
32864394.3664: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\devobj.dll
32874394.3664: supR3HardenedDllNotificationCallback: load 00007ffcf4fe0000 LB 0x0002c000 C:\WINDOWS\System32\devobj.dll [fFlags=0x0]
32884394.3664: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\devobj.dll
32894394.3664: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf4fe0000 'C:\WINDOWS\System32\devobj.dll'
32904394.3664: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wldp.dll
32914394.3664: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wldp.dll (Input=wldp.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
32924394.3664: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf4bc0000 'C:\WINDOWS\System32\wldp.dll'
32934394.3664: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\cryptbase.dll
32944394.3664: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\cryptbase.dll (Input=cryptbase.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
32954394.3664: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf4b20000 'C:\WINDOWS\System32\cryptbase.dll'
32964394.3664: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf53f0000 'C:\WINDOWS\System32\crypt32.dll'
32974394.3664: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wintrust.dll
32984394.3664: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wintrust.dll (Input=wintrust.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
32994394.3664: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf5390000 'C:\WINDOWS\System32\wintrust.dll'
33004394.3664: \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\nvmii.inf_amd64_45030e1b94489c65\nvd3dumx.dll: Owner is administrators group.
33014394.3664: \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\nvmii.inf_amd64_45030e1b94489c65\nvd3dumx.dll: Signature #1/2: VERR_CR_X509_CPV_NOT_VALID_AT_TIME for 0x60ebe040; retrying against current time: 0x60fbe921.
33024394.3664: \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\nvmii.inf_amd64_45030e1b94489c65\nvd3dumx.dll: Signature #1/2: VERR_CR_X509_CPV_NOT_VALID_AT_TIME (-23033) w/ timestamp=0x60fbe921/now.
33034394.3664: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf42f0000 'C:\WINDOWS\system32\rsaenh.dll'
33044394.3664: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf53f0000 'C:\WINDOWS\System32\crypt32.dll'
33054394.3664: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'version.dll'.
33064394.3664: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'.
33074394.3664: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'advapi32.dll'.
33084394.3664: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'gdi32.dll'.
33094394.3664: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'winmm.dll'.
33104394.3664: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\nvmii.inf_amd64_45030e1b94489c65\nvd3dumx.dll) WinVerifyTrust
33114394.3664: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\nvmii.inf_amd64_45030e1b94489c65\nvd3dumx.dll
33124394.3664: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
33134394.3664: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume3\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008]
33144394.3664: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmm.dll
33154394.3664: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
33164394.3664: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
33174394.3664: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
33184394.3664: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
33194394.3664: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
33204394.3664: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
33214394.3664: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'version.dll'...
33224394.3664: supR3HardenedWinVerifyCacheProcessImportTodos: 'version.dll' -> '\Device\HarddiskVolume3\Windows\System32\version.dll' [rcNtRedir=0xc0150008]
33234394.3664: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\version.dll
33244394.3664: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\DriverStore\FileRepository\nvmii.inf_amd64_45030e1b94489c65\nvd3dumx.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
33254394.3664: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\nvmii.inf_amd64_45030e1b94489c65\nvd3dumx.dll
33264394.3664: supR3HardenedDllNotificationCallback: load 00007ffca8ac0000 LB 0x018b0000 C:\WINDOWS\System32\DriverStore\FileRepository\nvmii.inf_amd64_45030e1b94489c65\nvd3dumx.dll [fFlags=0x0]
33274394.3664: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\nvmii.inf_amd64_45030e1b94489c65\nvd3dumx.dll
33284394.3664: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-synch-l1-2-0) -> 0x0, fPresent=1
33294394.3664: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-synch-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
33304394.3664: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf5550000 'api-ms-win-core-synch-l1-2-0'
33314394.3664: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-fibers-l1-1-1) -> 0x0, fPresent=1
33324394.3664: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-fibers-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
33334394.3664: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf5550000 'api-ms-win-core-fibers-l1-1-1'
33344394.3664: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-synch-l1-2-0) -> 0x0, fPresent=1
33354394.3664: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-synch-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
33364394.3664: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf5550000 'api-ms-win-core-synch-l1-2-0'
33374394.3664: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-fibers-l1-1-1) -> 0x0, fPresent=1
33384394.3664: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-fibers-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
33394394.3664: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf5550000 'api-ms-win-core-fibers-l1-1-1'
33404394.3664: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-localization-l1-2-1) -> 0x0, fPresent=1
33414394.3664: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-l1-2-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
33424394.3664: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf5550000 'api-ms-win-core-localization-l1-2-1'
33434394.3664: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf75b0000 'C:\WINDOWS\System32\kernel32.dll'
33444394.3664: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffca8ac0000 'C:\WINDOWS\System32\DriverStore\FileRepository\nvmii.inf_amd64_45030e1b94489c65\nvd3dumx.dll'
33454394.3664: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcp_win.dll'.
33464394.3664: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\D3D12.dll)
33474394.3664: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\D3D12.dll
33484394.3664: supR3HardenedMonitor_NtCreateSection: NtMapViewOfSection failed on 0000000000001148 (hFile=0000000000001178) with 0xc0000022 -> STATUS_TRUST_FAILURE
33494394.3664: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\D3D12.dll [avoiding WinVerifyTrust]
33504394.3664: supR3HardenedMonitor_NtCreateSection: NtMapViewOfSection failed on 0000000000001178 (hFile=0000000000001148) with 0xc0000022 -> STATUS_TRUST_FAILURE
33514394.3664: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
33524394.3664: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
33534394.3664: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll
33544394.3664: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf42f0000 'C:\WINDOWS\system32\rsaenh.dll'
33554394.3664: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf53f0000 'C:\WINDOWS\System32\crypt32.dll'
33564394.3664: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\D3D12.dll'
33574394.3664: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6c60000 'C:\WINDOWS\System32\gdi32.dll'
33584394.3664: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ntdll.dll
33594394.3664: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\ntdll.dll (Input=ntdll.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
33604394.3664: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf7af0000 'C:\WINDOWS\System32\ntdll.dll'
33614394.3664: \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\nvmii.inf_amd64_45030e1b94489c65\nvdlistx.dll: Owner is administrators group.
33624394.3664: \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\nvmii.inf_amd64_45030e1b94489c65\nvdlistx.dll: Signature #1/2: VERR_CR_X509_CPV_NOT_VALID_AT_TIME for 0x60ebdedd; retrying against current time: 0x60fbe922.
33634394.3664: \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\nvmii.inf_amd64_45030e1b94489c65\nvdlistx.dll: Signature #1/2: VERR_CR_X509_CPV_NOT_VALID_AT_TIME (-23033) w/ timestamp=0x60fbe922/now.
33644394.3664: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf42f0000 'C:\WINDOWS\system32\rsaenh.dll'
33654394.3664: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf53f0000 'C:\WINDOWS\System32\crypt32.dll'
33664394.3664: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'version.dll'.
33674394.3664: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'advapi32.dll'.
33684394.3664: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
33694394.3664: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\nvmii.inf_amd64_45030e1b94489c65\nvdlistx.dll) WinVerifyTrust
33704394.3664: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\nvmii.inf_amd64_45030e1b94489c65\nvdlistx.dll
33714394.3664: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
33724394.3664: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
33734394.3664: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
33744394.3664: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
33754394.3664: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll
33764394.3664: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'version.dll'...
33774394.3664: supR3HardenedWinVerifyCacheProcessImportTodos: 'version.dll' -> '\Device\HarddiskVolume3\Windows\System32\version.dll' [rcNtRedir=0xc0150008]
33784394.3664: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\version.dll
33794394.3664: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\DriverStore\FileRepository\nvmii.inf_amd64_45030e1b94489c65\nvdlistx.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
33804394.3664: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\nvmii.inf_amd64_45030e1b94489c65\nvdlistx.dll
33814394.3664: supR3HardenedDllNotificationCallback: load 00007ffce28a0000 LB 0x00038000 C:\WINDOWS\System32\DriverStore\FileRepository\nvmii.inf_amd64_45030e1b94489c65\nvdlistx.dll [fFlags=0x0]
33824394.3664: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\nvmii.inf_amd64_45030e1b94489c65\nvdlistx.dll
33834394.3664: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-synch-l1-2-0) -> 0x0, fPresent=1
33844394.3664: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-synch-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
33854394.3664: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf5550000 'api-ms-win-core-synch-l1-2-0'
33864394.3664: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-fibers-l1-1-1) -> 0x0, fPresent=1
33874394.3664: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-fibers-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
33884394.3664: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf5550000 'api-ms-win-core-fibers-l1-1-1'
33894394.3664: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-synch-l1-2-0) -> 0x0, fPresent=1
33904394.3664: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-synch-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
33914394.3664: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf5550000 'api-ms-win-core-synch-l1-2-0'
33924394.3664: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-fibers-l1-1-1) -> 0x0, fPresent=1
33934394.3664: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-fibers-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
33944394.3664: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf5550000 'api-ms-win-core-fibers-l1-1-1'
33954394.3664: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-localization-l1-2-1) -> 0x0, fPresent=1
33964394.3664: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-l1-2-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
33974394.3664: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf5550000 'api-ms-win-core-localization-l1-2-1'
33984394.3664: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf75b0000 'C:\WINDOWS\System32\kernel32.dll'
33994394.3664: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffce28a0000 'C:\WINDOWS\System32\DriverStore\FileRepository\nvmii.inf_amd64_45030e1b94489c65\nvdlistx.dll'
34004394.53cc: supR3HardenedDllNotificationCallback: Unload 00007ffce28a0000 LB 0x00038000 C:\WINDOWS\System32\DriverStore\FileRepository\nvmii.inf_amd64_45030e1b94489c65\nvdlistx.dll [flags=0x0]
34014394.3b90: '\Device\HarddiskVolume3\Windows\System32\tzres.dll' has no imports
34024394.3b90: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\tzres.dll)
34034394.3b90: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\tzres.dll
34044394.3b90: supR3HardenedMonitor_NtCreateSection: NtMapViewOfSection failed on 00000000000011cc (hFile=0000000000001160) with 0xc0000022 -> STATUS_TRUST_FAILURE
34054394.3b90: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\tzres.dll [avoiding WinVerifyTrust]
34064394.3b90: supR3HardenedMonitor_NtCreateSection: NtMapViewOfSection failed on 0000000000001160 (hFile=00000000000011cc) with 0xc0000022 -> STATUS_TRUST_FAILURE
34074394.3b90: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000000000011c8 pwszName=\Device\HarddiskVolume3\Windows\System32\tzres.dll
34084394.3b90: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000001a32940
34094394.3b90: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000001a32940
34104394.3b90: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wintrust.dll
34114394.3b90: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\WINTRUST.DLL (Input=WINTRUST.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
34124394.3b90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf5390000 'C:\WINDOWS\System32\WINTRUST.DLL'
34134394.3b90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf53f0000 'C:\WINDOWS\System32\CRYPT32.dll'
34144394.3b90: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=C1C1AF313E01DD72BECAA2C2044BD4F39C1BEC78
34154394.3b90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf42f0000 'C:\WINDOWS\system32\rsaenh.dll'
34164394.3b90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf53f0000 'C:\WINDOWS\System32\crypt32.dll'
34174394.3b90: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.19041.1110.cat'; file='\Device\HarddiskVolume3\Windows\System32\tzres.dll'
34184394.3b90: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
34194394.3b90: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\tzres.dll'
34204394.3b90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf42f0000 'C:\WINDOWS\system32\rsaenh.dll'
34214394.3b90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf53f0000 'C:\WINDOWS\System32\crypt32.dll'
34224394.3b90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'ws2_32.dll'.
34234394.3b90: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #21 'rpcrt4.dll'.
34244394.3b90: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\mswsock.dll) WinVerifyTrust
34254394.3b90: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\mswsock.dll
34264394.3b90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
34274394.3b90: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
34284394.3b90: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
34294394.3b90: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
34304394.3b90: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ws2_32.dll
34314394.3b90: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\mswsock.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
34324394.3b90: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\mswsock.dll
34334394.3b90: supR3HardenedDllNotificationCallback: load 00007ffcf49a0000 LB 0x0006a000 C:\WINDOWS\system32\mswsock.dll [fFlags=0x0]
34344394.3b90: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\mswsock.dll
34354394.3b90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf49a0000 'C:\WINDOWS\system32\mswsock.dll'
34364394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msctf.dll
34374394.3d90: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\MSCTF.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
34384394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf62b0000 'C:\WINDOWS\System32\MSCTF.dll'
34394394.5218: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igdumdim64.dll
34404394.5218: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igdumdim64.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
34414394.5218: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcae4e0000 'C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igdumdim64.dll'
34424394.5218: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igd9dxva64.dll
34434394.5218: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igd9dxva64.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
34444394.5218: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc911f0000 'C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igd9dxva64.dll'
34454394.5218: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igdgmm64.dll
34464394.5218: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igdgmm64.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
34474394.5218: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffce8130000 'C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igdgmm64.dll'
34484394.5218: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(ext-ms-win-core-resourcepolicy-l1-1-0.dll) -> 0x0, fPresent=1
34494394.5218: supR3HardenedMonitor_LdrLoadDll: pName=ext-ms-win-core-resourcepolicy-l1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
34504394.5218: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
34514394.5218: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'rpcrt4.dll'.
34524394.5218: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\ResourcePolicyClient.dll)
34534394.5218: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\ResourcePolicyClient.dll
34544394.5218: supR3HardenedDllNotificationCallback: load 00007ffcf2c60000 LB 0x00014000 C:\WINDOWS\SYSTEM32\resourcepolicyclient.dll [fFlags=0x0]
34554394.5218: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ResourcePolicyClient.dll [avoiding WinVerifyTrust]
34564394.5218: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf2c60000 'ext-ms-win-core-resourcepolicy-l1-1-0.dll'
34574394.5218: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
34584394.5218: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
34594394.5218: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
34604394.5218: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
34614394.5218: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf42f0000 'C:\WINDOWS\system32\rsaenh.dll'
34624394.5218: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wintrust.dll
34634394.5218: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\WINTRUST.DLL (Input=WINTRUST.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
34644394.5218: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf5390000 'C:\WINDOWS\System32\WINTRUST.DLL'
34654394.5218: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf53f0000 'C:\WINDOWS\System32\CRYPT32.dll'
34664394.5218: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf53f0000 'C:\WINDOWS\System32\crypt32.dll'
34674394.5218: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\ResourcePolicyClient.dll'
34684394.5218: supR3HardenedDllNotificationCallback: Unload 00007ffcf2c60000 LB 0x00014000 C:\WINDOWS\SYSTEM32\resourcepolicyclient.dll [flags=0x0]
34694394.5218: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igdumdim64.dll
34704394.5218: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igdumdim64.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
34714394.5218: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcae4e0000 'C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igdumdim64.dll'
34724394.5218: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igd9dxva64.dll
34734394.5218: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igd9dxva64.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
34744394.5218: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc911f0000 'C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igd9dxva64.dll'
34754394.5218: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igdgmm64.dll
34764394.5218: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igdgmm64.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
34774394.5218: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffce8130000 'C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igdgmm64.dll'
34784394.5218: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igdgmm64.dll
34794394.5218: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igdgmm64.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
34804394.5218: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffce8130000 'C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igdgmm64.dll'
34814394.5218: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf42f0000 'C:\WINDOWS\system32\rsaenh.dll'
34824394.5218: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf53f0000 'C:\WINDOWS\System32\crypt32.dll'
34834394.5218: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf53f0000 'C:\WINDOWS\System32\crypt32.dll'
34844394.5218: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'advapi32.dll'.
34854394.5218: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igdinfo64.dll) WinVerifyTrust
34864394.5218: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igdinfo64.dll
34874394.5218: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
34884394.5218: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
34894394.5218: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igdinfo64.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
34904394.5218: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igdinfo64.dll
34914394.5218: supR3HardenedDllNotificationCallback: load 00007ffce3960000 LB 0x00027000 C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igdinfo64.dll [fFlags=0x0]
34924394.5218: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igdinfo64.dll
34934394.5218: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-synch-l1-2-0) -> 0x0, fPresent=1
34944394.5218: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-synch-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
34954394.5218: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf5550000 'api-ms-win-core-synch-l1-2-0'
34964394.5218: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-localization-l1-2-1) -> 0x0, fPresent=1
34974394.5218: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-l1-2-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
34984394.5218: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf5550000 'api-ms-win-core-localization-l1-2-1'
34994394.5218: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf75b0000 'C:\WINDOWS\System32\kernel32.dll'
35004394.5218: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffce3960000 'C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igdinfo64.dll'
35014394.5218: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf42f0000 'C:\WINDOWS\system32\rsaenh.dll'
35024394.5218: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf53f0000 'C:\WINDOWS\System32\crypt32.dll'
35034394.5218: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf53f0000 'C:\WINDOWS\System32\crypt32.dll'
35044394.5218: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'ole32.dll'.
35054394.5218: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'shell32.dll'.
35064394.5218: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'advapi32.dll'.
35074394.5218: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igc64.dll) WinVerifyTrust
35084394.5218: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igc64.dll
35094394.5218: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
35104394.5218: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
35114394.5218: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
35124394.5218: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume3\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
35134394.5218: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
35144394.5218: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
35154394.5218: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igc64.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
35164394.5218: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igc64.dll
35174394.5218: supR3HardenedDllNotificationCallback: load 00007ffcc5540000 LB 0x02d85000 C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igc64.dll [fFlags=0x0]
35184394.5218: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igc64.dll
35194394.5218: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-synch-l1-2-0) -> 0x0, fPresent=1
35204394.5218: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-synch-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
35214394.5218: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf5550000 'api-ms-win-core-synch-l1-2-0'
35224394.5218: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-localization-l1-2-1) -> 0x0, fPresent=1
35234394.5218: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-l1-2-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
35244394.5218: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf5550000 'api-ms-win-core-localization-l1-2-1'
35254394.5218: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf75b0000 'C:\WINDOWS\System32\kernel32.dll'
35264394.5218: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-string-l1-1-0) -> 0x0, fPresent=1
35274394.5218: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-string-l1-1-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
35284394.5218: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf5550000 'api-ms-win-core-string-l1-1-0'
35294394.5218: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-datetime-l1-1-1) -> 0x0, fPresent=1
35304394.5218: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-datetime-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
35314394.5218: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf5550000 'api-ms-win-core-datetime-l1-1-1'
35324394.5218: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-localization-obsolete-l1-2-0) -> 0x0, fPresent=1
35334394.5218: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-obsolete-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
35344394.5218: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf5550000 'api-ms-win-core-localization-obsolete-l1-2-0'
35354394.5218: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc5540000 'C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igc64.dll'
35364394.5218: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcp_win.dll'.
35374394.5218: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #14 'rpcrt4.dll'.
35384394.5218: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #28 'win32u.dll'.
35394394.5218: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\DXCore.dll)
35404394.5218: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\DXCore.dll
35414394.5218: supR3HardenedDllNotificationCallback: load 00007ffce93d0000 LB 0x0003b000 C:\WINDOWS\SYSTEM32\dxcore.dll [fFlags=0x0]
35424394.5218: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\DXCore.dll [avoiding WinVerifyTrust]
35434394.5218: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
35444394.5218: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
35454394.5218: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
35464394.5218: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
35474394.5218: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
35484394.5218: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
35494394.5218: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
35504394.5218: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll
35514394.5218: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
35524394.5218: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf42f0000 'C:\WINDOWS\system32\rsaenh.dll'
35534394.5218: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf53f0000 'C:\WINDOWS\System32\crypt32.dll'
35544394.5218: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\DXCore.dll'
35554394.5218: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\d3d9.dll
35564394.5218: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\d3d9.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
35574394.5218: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffce3e30000 'C:\WINDOWS\system32\d3d9.dll'
35584394.5218: supR3HardenedDllNotificationCallback: Unload 00007ffce3960000 LB 0x00027000 C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igdinfo64.dll [flags=0x0]
35594394.5218: supR3HardenedDllNotificationCallback: Unload 00007ffcc5540000 LB 0x02d85000 C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igc64.dll [flags=0x0]
35604394.5218: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igdumdim64.dll
35614394.5218: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igdumdim64.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
35624394.5218: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcae4e0000 'C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igdumdim64.dll'
35634394.5218: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igd9dxva64.dll
35644394.5218: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igd9dxva64.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
35654394.5218: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc911f0000 'C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igd9dxva64.dll'
35664394.5218: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igdgmm64.dll
35674394.5218: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igdgmm64.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
35684394.5218: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffce8130000 'C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igdgmm64.dll'
35694394.5218: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igdumdim64.dll
35704394.5218: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igdumdim64.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
35714394.5218: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcae4e0000 'C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igdumdim64.dll'
35724394.5218: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igd9dxva64.dll
35734394.5218: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igd9dxva64.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
35744394.5218: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc911f0000 'C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igd9dxva64.dll'
35754394.5218: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igdgmm64.dll
35764394.5218: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igdgmm64.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
35774394.5218: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffce8130000 'C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igdgmm64.dll'
35784394.5218: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igdgmm64.dll
35794394.5218: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igdgmm64.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
35804394.5218: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffce8130000 'C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igdgmm64.dll'
35814394.5218: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igdinfo64.dll
35824394.5218: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igdinfo64.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
35834394.5218: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igdinfo64.dll
35844394.5218: supR3HardenedDllNotificationCallback: load 00007ffce3960000 LB 0x00027000 C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igdinfo64.dll [fFlags=0x0]
35854394.5218: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igdinfo64.dll
35864394.5218: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-synch-l1-2-0) -> 0x0, fPresent=1
35874394.5218: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-synch-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
35884394.5218: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf5550000 'api-ms-win-core-synch-l1-2-0'
35894394.5218: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-localization-l1-2-1) -> 0x0, fPresent=1
35904394.5218: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-l1-2-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
35914394.5218: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf5550000 'api-ms-win-core-localization-l1-2-1'
35924394.5218: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf75b0000 'C:\WINDOWS\System32\kernel32.dll'
35934394.5218: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffce3960000 'C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igdinfo64.dll'
35944394.5218: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igc64.dll
35954394.5218: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igc64.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
35964394.5218: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igc64.dll
35974394.5218: supR3HardenedDllNotificationCallback: load 00007ffcc5540000 LB 0x02d85000 C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igc64.dll [fFlags=0x0]
35984394.5218: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igc64.dll
35994394.5218: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-synch-l1-2-0) -> 0x0, fPresent=1
36004394.5218: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-synch-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
36014394.5218: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf5550000 'api-ms-win-core-synch-l1-2-0'
36024394.5218: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-localization-l1-2-1) -> 0x0, fPresent=1
36034394.5218: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-l1-2-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
36044394.5218: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf5550000 'api-ms-win-core-localization-l1-2-1'
36054394.5218: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf75b0000 'C:\WINDOWS\System32\kernel32.dll'
36064394.5218: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-string-l1-1-0) -> 0x0, fPresent=1
36074394.5218: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-string-l1-1-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
36084394.5218: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf5550000 'api-ms-win-core-string-l1-1-0'
36094394.5218: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-datetime-l1-1-1) -> 0x0, fPresent=1
36104394.5218: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-datetime-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
36114394.5218: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf5550000 'api-ms-win-core-datetime-l1-1-1'
36124394.5218: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-localization-obsolete-l1-2-0) -> 0x0, fPresent=1
36134394.5218: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-obsolete-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
36144394.5218: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf5550000 'api-ms-win-core-localization-obsolete-l1-2-0'
36154394.5218: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc5540000 'C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igc64.dll'
36164394.5218: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\d3d9.dll
36174394.5218: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\d3d9.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
36184394.5218: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffce3e30000 'C:\WINDOWS\system32\d3d9.dll'
36194394.5218: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igdumdim64.dll
36204394.5218: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igdumdim64.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
36214394.5218: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcae4e0000 'C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igdumdim64.dll'
36224394.5218: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igd9dxva64.dll
36234394.5218: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igd9dxva64.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
36244394.5218: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc911f0000 'C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igd9dxva64.dll'
36254394.5218: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffce8130000 'C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igdgmm64.dll'
36264394.5218: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igdumdim64.dll
36274394.5218: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igdumdim64.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
36284394.5218: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcae4e0000 'C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igdumdim64.dll'
36294394.5218: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igd9dxva64.dll
36304394.5218: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igd9dxva64.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
36314394.5218: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc911f0000 'C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igd9dxva64.dll'
36324394.5218: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffce8130000 'C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igdgmm64.dll'
36334394.5218: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffce8130000 'C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igdgmm64.dll'
36344394.5218: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igc64.dll
36354394.5218: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igc64.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
36364394.5218: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc5540000 'C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igc64.dll'
36374394.5218: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\d3d9.dll
36384394.5218: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\d3d9.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
36394394.5218: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffce3e30000 'C:\WINDOWS\system32\d3d9.dll'
36404394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status -22919 (0xffffa679)) on \Device\HarddiskVolume3\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2DevProps.dll
36414394.3d90: Error (rc=0):
36424394.3d90: supR3HardenedScreenImage/LdrLoadDll: cached rc=Unknown Status -22919 (0xffffa679) fImage=1 fProtect=0x0 fAccess=0x0 cHits=32 \Device\HarddiskVolume3\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2DevProps.dll
36434394.3d90: Error (rc=0):
36444394.3d90: supR3HardenedMonitor_LdrLoadDll: rejecting 'C:\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2DevProps.dll' (C:\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2DevProps.dll): rcNt=0xc0000190
36454394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0xc0000190 'C:\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2DevProps.dll'
36464394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status -22919 (0xffffa679)) on \Device\HarddiskVolume3\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2OSD.dll
36474394.3d90: Error (rc=0):
36484394.3d90: supR3HardenedScreenImage/LdrLoadDll: cached rc=Unknown Status -22919 (0xffffa679) fImage=1 fProtect=0x0 fAccess=0x0 cHits=32 \Device\HarddiskVolume3\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2OSD.dll
36494394.3d90: Error (rc=0):
36504394.3d90: supR3HardenedMonitor_LdrLoadDll: rejecting 'C:\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2OSD.dll' (C:\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2OSD.dll): rcNt=0xc0000190
36514394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0xc0000190 'C:\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2OSD.dll'
36524394.5218: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcae4e0000 'C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igdumdim64.dll'
36534394.5218: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc911f0000 'C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igd9dxva64.dll'
36544394.5218: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffce8130000 'C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igdgmm64.dll'
36554394.5218: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcae4e0000 'C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igdumdim64.dll'
36564394.5218: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc911f0000 'C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igd9dxva64.dll'
36574394.5218: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffce8130000 'C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igdgmm64.dll'
36584394.5218: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffce8130000 'C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igdgmm64.dll'
36594394.5218: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igc64.dll
36604394.5218: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igc64.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
36614394.5218: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc5540000 'C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igc64.dll'
36624394.5218: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\d3d9.dll
36634394.5218: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\d3d9.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
36644394.5218: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffce3e30000 'C:\WINDOWS\system32\d3d9.dll'
36654394.5218: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcae4e0000 'C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igdumdim64.dll'
36664394.5218: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc911f0000 'C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igd9dxva64.dll'
36674394.5218: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffce8130000 'C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igdgmm64.dll'
36684394.5218: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcae4e0000 'C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igdumdim64.dll'
36694394.5218: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc911f0000 'C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igd9dxva64.dll'
36704394.5218: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igdgmm64.dll
36714394.5218: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igdgmm64.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
36724394.5218: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffce8130000 'C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igdgmm64.dll'
36734394.5218: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffce8130000 'C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igdgmm64.dll'
36744394.5218: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igc64.dll
36754394.5218: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igc64.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
36764394.5218: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc5540000 'C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igc64.dll'
36774394.5218: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\d3d9.dll
36784394.5218: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\d3d9.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
36794394.5218: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffce3e30000 'C:\WINDOWS\system32\d3d9.dll'
36804394.3354: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf5b60000 'C:\WINDOWS\system32\User32.dll'
36814394.5218: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcae4e0000 'C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igdumdim64.dll'
36824394.5218: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc911f0000 'C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igd9dxva64.dll'
36834394.5218: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffce8130000 'C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igdgmm64.dll'
36844394.5218: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcae4e0000 'C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igdumdim64.dll'
36854394.5218: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc911f0000 'C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igd9dxva64.dll'
36864394.5218: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffce8130000 'C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igdgmm64.dll'
36874394.5218: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffce8130000 'C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igdgmm64.dll'
36884394.5218: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc5540000 'C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igc64.dll'
36894394.5218: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\d3d9.dll
36904394.5218: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\d3d9.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
36914394.5218: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffce3e30000 'C:\WINDOWS\system32\d3d9.dll'
36924394.5218: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcae4e0000 'C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igdumdim64.dll'
36934394.5218: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc911f0000 'C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igd9dxva64.dll'
36944394.5218: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffce8130000 'C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igdgmm64.dll'
36954394.5218: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igdumdim64.dll
36964394.5218: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igdumdim64.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
36974394.5218: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcae4e0000 'C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igdumdim64.dll'
36984394.5218: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igd9dxva64.dll
36994394.5218: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igd9dxva64.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
37004394.5218: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc911f0000 'C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igd9dxva64.dll'
37014394.5218: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffce8130000 'C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igdgmm64.dll'
37024394.5218: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffce8130000 'C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igdgmm64.dll'
37034394.5218: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc5540000 'C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igc64.dll'
37044394.5218: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffce3e30000 'C:\WINDOWS\system32\d3d9.dll'
37054394.5218: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcae4e0000 'C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igdumdim64.dll'
37064394.5218: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc911f0000 'C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igd9dxva64.dll'
37074394.5218: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffce8130000 'C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igdgmm64.dll'
37084394.5218: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcae4e0000 'C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igdumdim64.dll'
37094394.5218: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffc911f0000 'C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igd9dxva64.dll'
37104394.5218: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffce8130000 'C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igdgmm64.dll'
37114394.5218: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffce8130000 'C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igdgmm64.dll'
37124394.5218: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcc5540000 'C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bb3678f1b2323513\igc64.dll'
37134394.5218: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffce3e30000 'C:\WINDOWS\system32\d3d9.dll'
37144394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status -22919 (0xffffa679)) on \Device\HarddiskVolume3\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2DevProps.dll
37154394.3d90: Error (rc=0):
37164394.3d90: supR3HardenedScreenImage/LdrLoadDll: cached rc=Unknown Status -22919 (0xffffa679) fImage=1 fProtect=0x0 fAccess=0x0 cHits=64 \Device\HarddiskVolume3\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2DevProps.dll
37174394.3d90: Error (rc=0):
37184394.3d90: supR3HardenedMonitor_LdrLoadDll: rejecting 'C:\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2DevProps.dll' (C:\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2DevProps.dll): rcNt=0xc0000190
37194394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0xc0000190 'C:\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2DevProps.dll'
37204394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status -22919 (0xffffa679)) on \Device\HarddiskVolume3\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2OSD.dll
37214394.3d90: Error (rc=0):
37224394.3d90: supR3HardenedScreenImage/LdrLoadDll: cached rc=Unknown Status -22919 (0xffffa679) fImage=1 fProtect=0x0 fAccess=0x0 cHits=64 \Device\HarddiskVolume3\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2OSD.dll
37234394.3d90: Error (rc=0):
37244394.3d90: supR3HardenedMonitor_LdrLoadDll: rejecting 'C:\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2OSD.dll' (C:\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2OSD.dll): rcNt=0xc0000190
37254394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0xc0000190 'C:\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2OSD.dll'
37264394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status -22919 (0xffffa679)) on \Device\HarddiskVolume3\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2DevProps.dll
37274394.3d90: Error (rc=0):
37284394.3d90: supR3HardenedScreenImage/LdrLoadDll: cached rc=Unknown Status -22919 (0xffffa679) fImage=1 fProtect=0x0 fAccess=0x0 cHits=128 \Device\HarddiskVolume3\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2DevProps.dll
37294394.3d90: Error (rc=0):
37304394.3d90: supR3HardenedMonitor_LdrLoadDll: rejecting 'C:\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2DevProps.dll' (C:\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2DevProps.dll): rcNt=0xc0000190
37314394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0xc0000190 'C:\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2DevProps.dll'
37324394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status -22919 (0xffffa679)) on \Device\HarddiskVolume3\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2OSD.dll
37334394.3d90: Error (rc=0):
37344394.3d90: supR3HardenedScreenImage/LdrLoadDll: cached rc=Unknown Status -22919 (0xffffa679) fImage=1 fProtect=0x0 fAccess=0x0 cHits=128 \Device\HarddiskVolume3\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2OSD.dll
37354394.3d90: Error (rc=0):
37364394.3d90: supR3HardenedMonitor_LdrLoadDll: rejecting 'C:\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2OSD.dll' (C:\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2OSD.dll): rcNt=0xc0000190
37374394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0xc0000190 'C:\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2OSD.dll'
37384394.3d90: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(ext-ms-win-rtcore-ntuser-window-ext-l1-1-0.dll) -> 0x0, fPresent=1
37394394.3d90: supR3HardenedMonitor_LdrLoadDll: pName=ext-ms-win-rtcore-ntuser-window-ext-l1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
37404394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf5b60000 'ext-ms-win-rtcore-ntuser-window-ext-l1-1-0.dll'
37414394.3d90: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(ext-ms-win-rtcore-ntuser-integration-l1-1-0.dll) -> 0x0, fPresent=1
37424394.3d90: supR3HardenedMonitor_LdrLoadDll: pName=ext-ms-win-rtcore-ntuser-integration-l1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
37434394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf5b60000 'ext-ms-win-rtcore-ntuser-integration-l1-1-0.dll'
37444394.3d90: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-com-l1-1-0.dll) -> 0x0, fPresent=1
37454394.3d90: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-com-l1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
37464394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6880000 'api-ms-win-core-com-l1-1-0.dll'
37474394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status -22919 (0xffffa679)) on \Device\HarddiskVolume3\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2DevProps.dll
37484394.3d90: Error (rc=0):
37494394.3d90: supR3HardenedScreenImage/LdrLoadDll: cached rc=Unknown Status -22919 (0xffffa679) fImage=1 fProtect=0x0 fAccess=0x0 cHits=256 \Device\HarddiskVolume3\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2DevProps.dll
37504394.3d90: Error (rc=0):
37514394.3d90: supR3HardenedMonitor_LdrLoadDll: rejecting 'C:\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2DevProps.dll' (C:\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2DevProps.dll): rcNt=0xc0000190
37524394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0xc0000190 'C:\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2DevProps.dll'
37534394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status -22919 (0xffffa679)) on \Device\HarddiskVolume3\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2OSD.dll
37544394.3d90: Error (rc=0):
37554394.3d90: supR3HardenedScreenImage/LdrLoadDll: cached rc=Unknown Status -22919 (0xffffa679) fImage=1 fProtect=0x0 fAccess=0x0 cHits=256 \Device\HarddiskVolume3\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2OSD.dll
37564394.3d90: Error (rc=0):
37574394.3d90: supR3HardenedMonitor_LdrLoadDll: rejecting 'C:\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2OSD.dll' (C:\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2OSD.dll): rcNt=0xc0000190
37584394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0xc0000190 'C:\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2OSD.dll'
37594394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6e70000 'C:\WINDOWS\system32\shell32.dll'
37604394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6e70000 'C:\WINDOWS\system32\shell32.dll'
37614394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6e70000 'C:\WINDOWS\system32\shell32.dll'
37624394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6e70000 'C:\WINDOWS\system32\shell32.dll'
37634394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6e70000 'C:\WINDOWS\system32\shell32.dll'
37644394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6e70000 'C:\WINDOWS\system32\shell32.dll'
37654394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
37664394.3d90: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\shell32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
37674394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6e70000 'C:\WINDOWS\system32\shell32.dll'
37684394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6e70000 'C:\WINDOWS\system32\shell32.dll'
37694394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6e70000 'C:\WINDOWS\system32\shell32.dll'
37704394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6e70000 'C:\WINDOWS\system32\shell32.dll'
37714394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6e70000 'C:\WINDOWS\system32\shell32.dll'
37724394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6e70000 'C:\WINDOWS\system32\shell32.dll'
37734394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6e70000 'C:\WINDOWS\system32\shell32.dll'
37744394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6e70000 'C:\WINDOWS\system32\shell32.dll'
37754394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6e70000 'C:\WINDOWS\system32\shell32.dll'
37764394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6e70000 'C:\WINDOWS\system32\shell32.dll'
37774394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6e70000 'C:\WINDOWS\system32\shell32.dll'
37784394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6e70000 'C:\WINDOWS\system32\shell32.dll'
37794394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6e70000 'C:\WINDOWS\system32\shell32.dll'
37804394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6e70000 'C:\WINDOWS\system32\shell32.dll'
37814394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6e70000 'C:\WINDOWS\system32\shell32.dll'
37824394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6e70000 'C:\WINDOWS\system32\shell32.dll'
37834394.3d90: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
37844394.3d90: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\shell32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
37854394.3d90: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffcf6e70000 'C:\WINDOWS\system32\shell32.dll'

© 2024 Oracle Support Privacy / Do Not Sell My Info Terms of Use Trademark Policy