VirtualBox

Ticket #20540: VBoxHardening-2021-09-08-15-27-52.log

File VBoxHardening-2021-09-08-15-27-52.log, 459.7 KB (added by kirSin, 3 years ago)
Line 
132c0.2260: Log file opened: 6.1.26r145957 g_hStartupLog=000000000000032c g_uNtVerCombined=0xa047bb00
232c0.2260: \SystemRoot\System32\ntdll.dll:
332c0.2260: CreationTime: 2021-05-18T03:33:49.382474100Z
432c0.2260: LastWriteTime: 2021-05-18T03:33:49.420509300Z
532c0.2260: ChangeTime: 2021-05-18T11:10:36.444488900Z
632c0.2260: FileAttributes: 0x20
732c0.2260: Size: 0x1e8068
832c0.2260: NT Headers: 0xd8
932c0.2260: Timestamp: 0xd6055cfe
1032c0.2260: Machine: 0x8664 - amd64
1132c0.2260: Timestamp: 0xd6055cfe
1232c0.2260: Image Version: 10.0
1332c0.2260: SizeOfImage: 0x1f0000 (2031616)
1432c0.2260: Resource Dir: 0x17f000 LB 0x6f310
1532c0.2260: [Version info resource found at 0xd8! (ID/Name: 0x1; SubID/SubName: 0x409)]
1632c0.2260: [Raw version resource data: 0x17f0f0 LB 0x380, codepage 0x0 (reserved 0x0)]
1732c0.2260: ProductName: Microsoft® Windows® Operating System
1832c0.2260: ProductVersion: 10.0.18362.1533
1932c0.2260: FileVersion: 10.0.18362.1533 (WinBuild.160101.0800)
2032c0.2260: FileDescription: NT Layer DLL
2132c0.2260: \SystemRoot\System32\kernel32.dll:
2232c0.2260: CreationTime: 2021-04-14T05:23:20.244557900Z
2332c0.2260: LastWriteTime: 2021-04-14T05:23:20.262528100Z
2432c0.2260: ChangeTime: 2021-05-18T03:34:44.587413300Z
2532c0.2260: FileAttributes: 0x20
2632c0.2260: Size: 0xb04a8
2732c0.2260: NT Headers: 0xf8
2832c0.2260: Timestamp: 0x95d197ef
2932c0.2260: Machine: 0x8664 - amd64
3032c0.2260: Timestamp: 0x95d197ef
3132c0.2260: Image Version: 10.0
3232c0.2260: SizeOfImage: 0xb2000 (729088)
3332c0.2260: Resource Dir: 0xb0000 LB 0x520
3432c0.2260: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
3532c0.2260: [Raw version resource data: 0xb00b0 LB 0x3a4, codepage 0x0 (reserved 0x0)]
3632c0.2260: ProductName: Microsoft® Windows® Operating System
3732c0.2260: ProductVersion: 10.0.18362.1500
3832c0.2260: FileVersion: 10.0.18362.1500 (WinBuild.160101.0800)
3932c0.2260: FileDescription: Windows NT BASE API Client DLL
4032c0.2260: \SystemRoot\System32\KernelBase.dll:
4132c0.2260: CreationTime: 2021-04-14T05:23:35.396646700Z
4232c0.2260: LastWriteTime: 2021-04-14T05:23:35.466459500Z
4332c0.2260: ChangeTime: 2021-05-18T03:34:44.914821000Z
4432c0.2260: FileAttributes: 0x20
4532c0.2260: Size: 0x2a5888
4632c0.2260: NT Headers: 0x100
4732c0.2260: Timestamp: 0x5ae7af90
4832c0.2260: Machine: 0x8664 - amd64
4932c0.2260: Timestamp: 0x5ae7af90
5032c0.2260: Image Version: 10.0
5132c0.2260: SizeOfImage: 0x2a5000 (2772992)
5232c0.2260: Resource Dir: 0x27f000 LB 0x548
5332c0.2260: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
5432c0.2260: [Raw version resource data: 0x27f0b0 LB 0x3bc, codepage 0x0 (reserved 0x0)]
5532c0.2260: ProductName: Microsoft® Windows® Operating System
5632c0.2260: ProductVersion: 10.0.18362.1474
5732c0.2260: FileVersion: 10.0.18362.1474 (WinBuild.160101.0800)
5832c0.2260: FileDescription: Windows NT BASE API Client DLL
5932c0.2260: \SystemRoot\System32\apisetschema.dll:
6032c0.2260: CreationTime: 2019-03-19T04:43:54.837151500Z
6132c0.2260: LastWriteTime: 2019-03-19T04:43:54.837151500Z
6232c0.2260: ChangeTime: 2021-05-18T03:34:44.560409000Z
6332c0.2260: FileAttributes: 0x20
6432c0.2260: Size: 0x1d028
6532c0.2260: NT Headers: 0xc8
6632c0.2260: Timestamp: 0xd6ced080
6732c0.2260: Machine: 0x8664 - amd64
6832c0.2260: Timestamp: 0xd6ced080
6932c0.2260: Image Version: 10.0
7032c0.2260: SizeOfImage: 0x1e000 (122880)
7132c0.2260: Resource Dir: 0x1d000 LB 0x408
7232c0.2260: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
7332c0.2260: [Raw version resource data: 0x1d060 LB 0x3a8, codepage 0x0 (reserved 0x0)]
7432c0.2260: ProductName: Microsoft® Windows® Operating System
7532c0.2260: ProductVersion: 10.0.18362.1
7632c0.2260: FileVersion: 10.0.18362.1 (WinBuild.160101.0800)
7732c0.2260: FileDescription: ApiSet Schema DLL
7832c0.2260: NtOpenDirectoryObject failed on \Driver: 0xc0000022
7932c0.2260: supR3HardenedWinFindAdversaries: 0x0
8032c0.2260: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox'
8132c0.2260: Calling main()
8232c0.2260: SUPR3HardenedMain: pszProgName=VirtualBoxVM fFlags=0x2
8332c0.2260: supR3HardenedWinInitAppBin(0x2): '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox'
8432c0.2260: SUPR3HardenedMain: Respawn #1
8532c0.2260: System32: \Device\HarddiskVolume7\Windows\System32
8632c0.2260: WinSxS: \Device\HarddiskVolume7\Windows\WinSxS
8732c0.2260: KnownDllPath: C:\Windows\System32
8832c0.2260: supR3HardenedWinInit: Performing a limited self purification...
8932c0.2260: supHardNtVpScanVirtualMemory: enmKind=SELF_PURIFICATION
9032c0.2260: *0000000000000000-000000000097ffff 0x0001/0x0000 0x0000000
9132c0.2260: *0000000000980000-000000000098ffff 0x0004/0x0004 0x0040000
9232c0.2260: *0000000000990000-0000000000990fff 0x0002/0x0002 0x0040000
9332c0.2260: 0000000000991000-000000000099ffff 0x0001/0x0000 0x0000000
9432c0.2260: *00000000009a0000-00000000009bafff 0x0002/0x0002 0x0040000
9532c0.2260: 00000000009bb000-00000000009bffff 0x0001/0x0000 0x0000000
9632c0.2260: *00000000009c0000-00000000009c3fff 0x0002/0x0002 0x0040000
9732c0.2260: 00000000009c4000-00000000009cffff 0x0001/0x0000 0x0000000
9832c0.2260: *00000000009d0000-00000000009d1fff 0x0004/0x0004 0x0020000
9932c0.2260: 00000000009d2000-00000000009dffff 0x0001/0x0000 0x0000000
10032c0.2260: *00000000009e0000-00000000009e0fff 0x0040/0x0040 0x0020000 !!
10132c0.2260: 00000000009e1000-00000000009effff 0x0001/0x0000 0x0000000
10232c0.2260: *00000000009f0000-00000000009f1fff 0x0002/0x0002 0x0040000
10332c0.2260: 00000000009f2000-00000000009fffff 0x0001/0x0000 0x0000000
10432c0.2260: *0000000000a00000-0000000000b49fff 0x0000/0x0004 0x0020000
10532c0.2260: 0000000000b4a000-0000000000b52fff 0x0004/0x0004 0x0020000
10632c0.2260: 0000000000b53000-0000000000b54fff 0x0000/0x0004 0x0020000
10732c0.2260: 0000000000b55000-0000000000b5afff 0x0004/0x0004 0x0020000
10832c0.2260: 0000000000b5b000-0000000000bfffff 0x0000/0x0004 0x0020000
10932c0.2260: *0000000000c00000-0000000000cb8fff 0x0000/0x0004 0x0020000
11032c0.2260: 0000000000cb9000-0000000000cbbfff 0x0104/0x0004 0x0020000
11132c0.2260: 0000000000cbc000-0000000000cfffff 0x0004/0x0004 0x0020000
11232c0.2260: *0000000000d00000-0000000000d03fff 0x0002/0x0002 0x0040000
11332c0.2260: 0000000000d04000-0000000000d07fff 0x0000/0x0002 0x0040000
11432c0.2260: 0000000000d08000-0000000000d0ffff 0x0001/0x0000 0x0000000
11532c0.2260: *0000000000d10000-0000000000d11fff 0x0002/0x0002 0x0040000
11632c0.2260: 0000000000d12000-0000000000d1ffff 0x0001/0x0000 0x0000000
11732c0.2260: *0000000000d20000-0000000000d20fff 0x0004/0x0004 0x0040000
11832c0.2260: 0000000000d21000-0000000000d2ffff 0x0001/0x0000 0x0000000
11932c0.2260: *0000000000d30000-0000000000d45fff 0x0004/0x0004 0x0020000
12032c0.2260: 0000000000d46000-0000000000d47fff 0x0040/0x0004 0x0020000 !!
12132c0.2260: 0000000000d48000-0000000000d59fff 0x0004/0x0004 0x0020000
12232c0.2260: 0000000000d5a000-0000000000d5bfff 0x0040/0x0004 0x0020000 !!
12332c0.2260: 0000000000d5c000-0000000000d6cfff 0x0004/0x0004 0x0020000
12432c0.2260: 0000000000d6d000-0000000000d6efff 0x0040/0x0004 0x0020000 !!
12532c0.2260: 0000000000d6f000-0000000000d72fff 0x0004/0x0004 0x0020000
12632c0.2260: 0000000000d73000-0000000000d74fff 0x0040/0x0004 0x0020000 !!
12732c0.2260: 0000000000d75000-0000000000d77fff 0x0004/0x0004 0x0020000
12832c0.2260: 0000000000d78000-0000000000d86fff 0x0000/0x0004 0x0020000
12932c0.2260: 0000000000d87000-0000000000dc7fff 0x0004/0x0004 0x0020000
13032c0.2260: 0000000000dc8000-0000000000dd4fff 0x0000/0x0004 0x0020000
13132c0.2260: 0000000000dd5000-0000000000dd5fff 0x0004/0x0004 0x0020000
13232c0.2260: 0000000000dd6000-0000000000e2ffff 0x0000/0x0004 0x0020000
13332c0.2260: *0000000000e30000-0000000000ef6fff 0x0002/0x0002 0x0040000
13432c0.2260: 0000000000ef7000-0000000000efffff 0x0001/0x0000 0x0000000
13532c0.2260: *0000000000f00000-0000000000ffafff 0x0000/0x0004 0x0020000
13632c0.2260: 0000000000ffb000-0000000000ffdfff 0x0104/0x0004 0x0020000
13732c0.2260: 0000000000ffe000-0000000000ffffff 0x0004/0x0004 0x0020000
13832c0.2260: *0000000001000000-00000000010f9fff 0x0000/0x0004 0x0020000
13932c0.2260: 00000000010fa000-00000000010fcfff 0x0104/0x0004 0x0020000
14032c0.2260: 00000000010fd000-00000000010fffff 0x0004/0x0004 0x0020000
14132c0.2260: *0000000001100000-0000000001101fff 0x0004/0x0004 0x0020000
14232c0.2260: 0000000001102000-0000000001131fff 0x0000/0x0004 0x0020000
14332c0.2260: 0000000001132000-000000000113ffff 0x0001/0x0000 0x0000000
14432c0.2260: *0000000001140000-0000000001239fff 0x0000/0x0004 0x0020000
14532c0.2260: 000000000123a000-000000000123cfff 0x0104/0x0004 0x0020000
14632c0.2260: 000000000123d000-000000000123ffff 0x0004/0x0004 0x0020000
14732c0.2260: *0000000001240000-0000000001254fff 0x0002/0x0002 0x0040000
14832c0.2260: 0000000001255000-000000000143ffff 0x0000/0x0002 0x0040000
14932c0.2260: *0000000001440000-00000000015c0fff 0x0002/0x0002 0x0040000
15032c0.2260: 00000000015c1000-00000000015cffff 0x0001/0x0000 0x0000000
15132c0.2260: *00000000015d0000-0000000001698fff 0x0002/0x0002 0x0040000
15232c0.2260: 0000000001699000-00000000029d0fff 0x0000/0x0002 0x0040000
15332c0.2260: 00000000029d1000-00000000029dffff 0x0001/0x0000 0x0000000
15432c0.2260: *00000000029e0000-00000000029e0fff 0x0004/0x0004 0x0020000
15532c0.2260: 00000000029e1000-0000000002a11fff 0x0000/0x0004 0x0020000
15632c0.2260: 0000000002a12000-0000000002a1ffff 0x0001/0x0000 0x0000000
15732c0.2260: *0000000002a20000-0000000002a21fff 0x0004/0x0004 0x0020000
15832c0.2260: 0000000002a22000-0000000002a51fff 0x0000/0x0004 0x0020000
15932c0.2260: 0000000002a52000-0000000002a5ffff 0x0001/0x0000 0x0000000
16032c0.2260: *0000000002a60000-0000000002a66fff 0x0004/0x0004 0x0020000
16132c0.2260: 0000000002a67000-0000000002a6ffff 0x0000/0x0004 0x0020000
16232c0.2260: *0000000002a70000-0000000002b6efff 0x0004/0x0004 0x0020000
16332c0.2260: 0000000002b6f000-0000000002b6ffff 0x0000/0x0004 0x0020000
16432c0.2260: 0000000002b70000-0000000002b7ffff 0x0001/0x0000 0x0000000
16532c0.2260: *0000000002b80000-0000000002b8efff 0x0004/0x0004 0x0020000
16632c0.2260: 0000000002b8f000-0000000002b8ffff 0x0000/0x0004 0x0020000
16732c0.2260: *0000000002b90000-0000000002ec6fff 0x0002/0x0002 0x0040000
16832c0.2260: 0000000002ec7000-0000000002ecffff 0x0001/0x0000 0x0000000
16932c0.2260: *0000000002ed0000-0000000002f18fff 0x0004/0x0004 0x0020000
17032c0.2260: 0000000002f19000-0000000002f19fff 0x0001/0x0004 0x0020000
17132c0.2260: 0000000002f1a000-0000000002fc6fff 0x0004/0x0004 0x0020000
17232c0.2260: 0000000002fc7000-00000000030cffff 0x0000/0x0004 0x0020000
17332c0.2260: *00000000030d0000-00000000031d0fff 0x0002/0x0002 0x0040000
17432c0.2260: 00000000031d1000-00000000031dffff 0x0001/0x0000 0x0000000
17532c0.2260: *00000000031e0000-00000000032dbfff 0x0000/0x0004 0x0020000
17632c0.2260: 00000000032dc000-00000000032defff 0x0104/0x0004 0x0020000
17732c0.2260: 00000000032df000-00000000032dffff 0x0004/0x0004 0x0020000
17832c0.2260: *00000000032e0000-00000000033effff 0x0004/0x0004 0x0040000
17932c0.2260: *00000000033f0000-0000000003bfffff 0x0004/0x0004 0x0040000
18032c0.2260: *0000000003c00000-00000000045fffff 0x0002/0x0002 0x0040000
18132c0.2260: *0000000004600000-00000000065fffff 0x0002/0x0002 0x0040000
18232c0.2260: *0000000006600000-00000000066fafff 0x0000/0x0004 0x0020000
18332c0.2260: 00000000066fb000-00000000066fdfff 0x0104/0x0004 0x0020000
18432c0.2260: 00000000066fe000-00000000066fffff 0x0004/0x0004 0x0020000
18532c0.2260: *0000000006700000-00000000067fbfff 0x0000/0x0004 0x0020000
18632c0.2260: 00000000067fc000-00000000067fefff 0x0104/0x0004 0x0020000
18732c0.2260: 00000000067ff000-00000000067fffff 0x0004/0x0004 0x0020000
18832c0.2260: *0000000006800000-0000000006801fff 0x0004/0x0004 0x0020000
18932c0.2260: 0000000006802000-0000000006831fff 0x0000/0x0004 0x0020000
19032c0.2260: 0000000006832000-000000000683ffff 0x0001/0x0000 0x0000000
19132c0.2260: *0000000006840000-0000000006864fff 0x0004/0x0004 0x0020000
19232c0.2260: 0000000006865000-000000000693ffff 0x0000/0x0004 0x0020000
19332c0.2260: *0000000006940000-000000000694efff 0x0004/0x0004 0x0020000
19432c0.2260: 000000000694f000-000000000694ffff 0x0000/0x0004 0x0020000
19532c0.2260: *0000000006950000-0000000006957fff 0x0000/0x0004 0x0020000
19632c0.2260: 0000000006958000-0000000006b48fff 0x0004/0x0004 0x0020000
19732c0.2260: 0000000006b49000-0000000006b49fff 0x0000/0x0004 0x0020000
19832c0.2260: 0000000006b4a000-000000007ffdffff 0x0001/0x0000 0x0000000
19932c0.2260: *000000007ffe0000-000000007ffe0fff 0x0002/0x0002 0x0020000
20032c0.2260: 000000007ffe1000-000000007ffe8fff 0x0001/0x0000 0x0000000
20132c0.2260: *000000007ffe9000-000000007ffe9fff 0x0002/0x0002 0x0020000
20232c0.2260: 000000007ffea000-000000017fffffff 0x0001/0x0000 0x0000000
20332c0.2260: *0000000180000000-0000000180000fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\sdckern.dll
20432c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 0000000180000000 LB 0x1000 (base 0000000180000000) - 'sdckern.dll'
20532c0.2260: 0000000180001000-00000001805f9fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\sdckern.dll
20632c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 0000000180001000 LB 0x5f9000 (base 0000000180000000) - 'sdckern.dll'
20732c0.2260: 00000001805fa000-00000001807f4fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\sdckern.dll
20832c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00000001805fa000 LB 0x1fb000 (base 0000000180000000) - 'sdckern.dll'
20932c0.2260: 00000001807f5000-0000000180806fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\sdckern.dll
21032c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00000001807f5000 LB 0x12000 (base 0000000180000000) - 'sdckern.dll'
21132c0.2260: 0000000180807000-0000000180807fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\sdckern.dll
21232c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 0000000180807000 LB 0x1000 (base 0000000180000000) - 'sdckern.dll'
21332c0.2260: 0000000180808000-000000018080bfff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\sdckern.dll
21432c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 0000000180808000 LB 0x4000 (base 0000000180000000) - 'sdckern.dll'
21532c0.2260: 000000018080c000-000000018080efff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\sdckern.dll
21632c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 000000018080c000 LB 0x3000 (base 0000000180000000) - 'sdckern.dll'
21732c0.2260: 000000018080f000-0000000180817fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\sdckern.dll
21832c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 000000018080f000 LB 0x9000 (base 0000000180000000) - 'sdckern.dll'
21932c0.2260: 0000000180818000-0000000180818fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\sdckern.dll
22032c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 0000000180818000 LB 0x1000 (base 0000000180000000) - 'sdckern.dll'
22132c0.2260: 0000000180819000-000000018081dfff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\sdckern.dll
22232c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 0000000180819000 LB 0x5000 (base 0000000180000000) - 'sdckern.dll'
22332c0.2260: 000000018081e000-0000000180820fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\sdckern.dll
22432c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 000000018081e000 LB 0x3000 (base 0000000180000000) - 'sdckern.dll'
22532c0.2260: 0000000180821000-000000018082ffff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\sdckern.dll
22632c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 0000000180821000 LB 0xf000 (base 0000000180000000) - 'sdckern.dll'
22732c0.2260: 0000000180830000-0000000180832fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\sdckern.dll
22832c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 0000000180830000 LB 0x3000 (base 0000000180000000) - 'sdckern.dll'
22932c0.2260: 0000000180833000-0000000180833fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\sdckern.dll
23032c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 0000000180833000 LB 0x1000 (base 0000000180000000) - 'sdckern.dll'
23132c0.2260: 0000000180834000-000000018084efff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\sdckern.dll
23232c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 0000000180834000 LB 0x1b000 (base 0000000180000000) - 'sdckern.dll'
23332c0.2260: 000000018084f000-0000000180918fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\sdckern.dll
23432c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 000000018084f000 LB 0xca000 (base 0000000180000000) - 'sdckern.dll'
23532c0.2260: 0000000180919000-0000000180935fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\sdckern.dll
23632c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 0000000180919000 LB 0x1d000 (base 0000000180000000) - 'sdckern.dll'
23732c0.2260: 0000000180936000-0000000180936fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\sdckern.dll
23832c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 0000000180936000 LB 0x1000 (base 0000000180000000) - 'sdckern.dll'
23932c0.2260: 0000000180937000-000000018093bfff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\sdckern.dll
24032c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 0000000180937000 LB 0x5000 (base 0000000180000000) - 'sdckern.dll'
24132c0.2260: 000000018093c000-00000001809a1fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\sdckern.dll
24232c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 000000018093c000 LB 0x66000 (base 0000000180000000) - 'sdckern.dll'
24332c0.2260: 00000001809a2000-00000001809a2fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\sdckern.dll
24432c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00000001809a2000 LB 0x1000 (base 0000000180000000) - 'sdckern.dll'
24532c0.2260: 00000001809a3000-0000000180a1afff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\sdckern.dll
24632c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00000001809a3000 LB 0x78000 (base 0000000180000000) - 'sdckern.dll'
24732c0.2260: 0000000180a1b000-00007ff490c2ffff 0x0001/0x0000 0x0000000
24832c0.2260: *00007ff490c30000-00007ff490c34fff 0x0002/0x0002 0x0040000
24932c0.2260: 00007ff490c35000-00007ff490d2ffff 0x0000/0x0002 0x0040000
25032c0.2260: *00007ff490d30000-00007ff590d4ffff 0x0000/0x0004 0x0020000
25132c0.2260: *00007ff590d50000-00007ff592d4ffff 0x0000/0x0004 0x0020000
25232c0.2260: 00007ff592d50000-00007ff592d50fff 0x0004/0x0004 0x0020000
25332c0.2260: 00007ff592d51000-00007ff592d5ffff 0x0001/0x0000 0x0000000
25432c0.2260: *00007ff592d60000-00007ff592d60fff 0x0002/0x0002 0x0040000
25532c0.2260: 00007ff592d61000-00007ff592d6ffff 0x0001/0x0000 0x0000000
25632c0.2260: *00007ff592d70000-00007ff592da2fff 0x0002/0x0002 0x0040000
25732c0.2260: 00007ff592da3000-00007ff69a9affff 0x0001/0x0000 0x0000000
25832c0.2260: *00007ff69a9b0000-00007ff69a9b0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
25932c0.2260: 00007ff69a9b1000-00007ff69aa27fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
26032c0.2260: 00007ff69aa28000-00007ff69aa28fff 0x0080/0x0080 0x1000000 \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
26132c0.2260: 00007ff69aa29000-00007ff69aa71fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
26232c0.2260: 00007ff69aa72000-00007ff69aa74fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
26332c0.2260: 00007ff69aa75000-00007ff69aa77fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
26432c0.2260: 00007ff69aa78000-00007ff69aa7afff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
26532c0.2260: 00007ff69aa7b000-00007ff69aa7bfff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
26632c0.2260: 00007ff69aa7c000-00007ff69aa7dfff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
26732c0.2260: 00007ff69aa7e000-00007ff69aa7efff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
26832c0.2260: 00007ff69aa7f000-00007ff69aac7fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
26932c0.2260: 00007ff69aac8000-00007ff9a603ffff 0x0001/0x0000 0x0000000
27032c0.2260: *00007ff9a6040000-00007ff9a6040fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\netapi32.dll
27132c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9a6040000 LB 0x1000 (base 00007ff9a6040000) - 'netapi32.dll'
27232c0.2260: 00007ff9a6041000-00007ff9a604afff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\netapi32.dll
27332c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9a6041000 LB 0xa000 (base 00007ff9a6040000) - 'netapi32.dll'
27432c0.2260: 00007ff9a604b000-00007ff9a6051fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\netapi32.dll
27532c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9a604b000 LB 0x7000 (base 00007ff9a6040000) - 'netapi32.dll'
27632c0.2260: 00007ff9a6052000-00007ff9a6052fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\netapi32.dll
27732c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9a6052000 LB 0x1000 (base 00007ff9a6040000) - 'netapi32.dll'
27832c0.2260: 00007ff9a6053000-00007ff9a6056fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\netapi32.dll
27932c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9a6053000 LB 0x4000 (base 00007ff9a6040000) - 'netapi32.dll'
28032c0.2260: 00007ff9a6057000-00007ff9a61fffff 0x0001/0x0000 0x0000000
28132c0.2260: *00007ff9a6200000-00007ff9a6200fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.18362.1556_none_cf692a153ef0bba3\GdiPlus.dll
28232c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9a6200000 LB 0x1000 (base 00007ff9a6200000) - 'GdiPlus.dll'
28332c0.2260: 00007ff9a6201000-00007ff9a6345fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.18362.1556_none_cf692a153ef0bba3\GdiPlus.dll
28432c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9a6201000 LB 0x145000 (base 00007ff9a6200000) - 'GdiPlus.dll'
28532c0.2260: 00007ff9a6346000-00007ff9a637ffff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.18362.1556_none_cf692a153ef0bba3\GdiPlus.dll
28632c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9a6346000 LB 0x3a000 (base 00007ff9a6200000) - 'GdiPlus.dll'
28732c0.2260: 00007ff9a6380000-00007ff9a6381fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.18362.1556_none_cf692a153ef0bba3\GdiPlus.dll
28832c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9a6380000 LB 0x2000 (base 00007ff9a6200000) - 'GdiPlus.dll'
28932c0.2260: 00007ff9a6382000-00007ff9a63a5fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.18362.1556_none_cf692a153ef0bba3\GdiPlus.dll
29032c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9a6382000 LB 0x24000 (base 00007ff9a6200000) - 'GdiPlus.dll'
29132c0.2260: 00007ff9a63a6000-00007ff9a63affff 0x0001/0x0000 0x0000000
29232c0.2260: *00007ff9a63b0000-00007ff9a63b0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\msi.dll
29332c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9a63b0000 LB 0x1000 (base 00007ff9a63b0000) - 'msi.dll'
29432c0.2260: 00007ff9a63b1000-00007ff9a6741fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\msi.dll
29532c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9a63b1000 LB 0x391000 (base 00007ff9a63b0000) - 'msi.dll'
29632c0.2260: 00007ff9a6742000-00007ff9a67e7fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\msi.dll
29732c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9a6742000 LB 0xa6000 (base 00007ff9a63b0000) - 'msi.dll'
29832c0.2260: 00007ff9a67e8000-00007ff9a67edfff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\msi.dll
29932c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9a67e8000 LB 0x6000 (base 00007ff9a63b0000) - 'msi.dll'
30032c0.2260: 00007ff9a67ee000-00007ff9a67eefff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\msi.dll
30132c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9a67ee000 LB 0x1000 (base 00007ff9a63b0000) - 'msi.dll'
30232c0.2260: 00007ff9a67ef000-00007ff9a6811fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\msi.dll
30332c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9a67ef000 LB 0x23000 (base 00007ff9a63b0000) - 'msi.dll'
30432c0.2260: 00007ff9a6812000-00007ff9ac89ffff 0x0001/0x0000 0x0000000
30532c0.2260: *00007ff9ac8a0000-00007ff9ac8a0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\oleacc.dll
30632c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9ac8a0000 LB 0x1000 (base 00007ff9ac8a0000) - 'oleacc.dll'
30732c0.2260: 00007ff9ac8a1000-00007ff9ac8ddfff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\oleacc.dll
30832c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9ac8a1000 LB 0x3d000 (base 00007ff9ac8a0000) - 'oleacc.dll'
30932c0.2260: 00007ff9ac8de000-00007ff9ac8f6fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\oleacc.dll
31032c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9ac8de000 LB 0x19000 (base 00007ff9ac8a0000) - 'oleacc.dll'
31132c0.2260: 00007ff9ac8f7000-00007ff9ac8f7fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\oleacc.dll
31232c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9ac8f7000 LB 0x1000 (base 00007ff9ac8a0000) - 'oleacc.dll'
31332c0.2260: 00007ff9ac8f8000-00007ff9ac904fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\oleacc.dll
31432c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9ac8f8000 LB 0xd000 (base 00007ff9ac8a0000) - 'oleacc.dll'
31532c0.2260: 00007ff9ac905000-00007ff9ac90ffff 0x0001/0x0000 0x0000000
31632c0.2260: *00007ff9ac910000-00007ff9ac910fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\winspool.drv
31732c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9ac910000 LB 0x1000 (base 00007ff9ac910000) - 'winspool.drv'
31832c0.2260: 00007ff9ac911000-00007ff9ac95afff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\winspool.drv
31932c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9ac911000 LB 0x4a000 (base 00007ff9ac910000) - 'winspool.drv'
32032c0.2260: 00007ff9ac95b000-00007ff9ac979fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\winspool.drv
32132c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9ac95b000 LB 0x1f000 (base 00007ff9ac910000) - 'winspool.drv'
32232c0.2260: 00007ff9ac97a000-00007ff9ac97bfff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\winspool.drv
32332c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9ac97a000 LB 0x2000 (base 00007ff9ac910000) - 'winspool.drv'
32432c0.2260: 00007ff9ac97c000-00007ff9ac998fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\winspool.drv
32532c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9ac97c000 LB 0x1d000 (base 00007ff9ac910000) - 'winspool.drv'
32632c0.2260: 00007ff9ac999000-00007ff9ac99ffff 0x0001/0x0000 0x0000000
32732c0.2260: *00007ff9ac9a0000-00007ff9ac9a0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\msimg32.dll
32832c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9ac9a0000 LB 0x1000 (base 00007ff9ac9a0000) - 'msimg32.dll'
32932c0.2260: 00007ff9ac9a1000-00007ff9ac9a1fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\msimg32.dll
33032c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9ac9a1000 LB 0x1000 (base 00007ff9ac9a0000) - 'msimg32.dll'
33132c0.2260: 00007ff9ac9a2000-00007ff9ac9a2fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\msimg32.dll
33232c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9ac9a2000 LB 0x1000 (base 00007ff9ac9a0000) - 'msimg32.dll'
33332c0.2260: 00007ff9ac9a3000-00007ff9ac9a3fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\msimg32.dll
33432c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9ac9a3000 LB 0x1000 (base 00007ff9ac9a0000) - 'msimg32.dll'
33532c0.2260: 00007ff9ac9a4000-00007ff9ac9a6fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\msimg32.dll
33632c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9ac9a4000 LB 0x3000 (base 00007ff9ac9a0000) - 'msimg32.dll'
33732c0.2260: 00007ff9ac9a7000-00007ff9ac9fffff 0x0001/0x0000 0x0000000
33832c0.2260: *00007ff9aca00000-00007ff9aca00fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\fltLib.dll
33932c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9aca00000 LB 0x1000 (base 00007ff9aca00000) - 'fltLib.dll'
34032c0.2260: 00007ff9aca01000-00007ff9aca03fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\fltLib.dll
34132c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9aca01000 LB 0x3000 (base 00007ff9aca00000) - 'fltLib.dll'
34232c0.2260: 00007ff9aca04000-00007ff9aca05fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\fltLib.dll
34332c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9aca04000 LB 0x2000 (base 00007ff9aca00000) - 'fltLib.dll'
34432c0.2260: 00007ff9aca06000-00007ff9aca06fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\fltLib.dll
34532c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9aca06000 LB 0x1000 (base 00007ff9aca00000) - 'fltLib.dll'
34632c0.2260: 00007ff9aca07000-00007ff9aca09fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\fltLib.dll
34732c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9aca07000 LB 0x3000 (base 00007ff9aca00000) - 'fltLib.dll'
34832c0.2260: 00007ff9aca0a000-00007ff9ae2fffff 0x0001/0x0000 0x0000000
34932c0.2260: *00007ff9ae300000-00007ff9ae300fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\wininet.dll
35032c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9ae300000 LB 0x1000 (base 00007ff9ae300000) - 'wininet.dll'
35132c0.2260: 00007ff9ae301000-00007ff9ae4f0fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\wininet.dll
35232c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9ae301000 LB 0x1f0000 (base 00007ff9ae300000) - 'wininet.dll'
35332c0.2260: 00007ff9ae4f1000-00007ff9ae795fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\wininet.dll
35432c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9ae4f1000 LB 0x2a5000 (base 00007ff9ae300000) - 'wininet.dll'
35532c0.2260: 00007ff9ae796000-00007ff9ae799fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\wininet.dll
35632c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9ae796000 LB 0x4000 (base 00007ff9ae300000) - 'wininet.dll'
35732c0.2260: 00007ff9ae79a000-00007ff9ae79afff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\wininet.dll
35832c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9ae79a000 LB 0x1000 (base 00007ff9ae300000) - 'wininet.dll'
35932c0.2260: 00007ff9ae79b000-00007ff9ae7d6fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\wininet.dll
36032c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9ae79b000 LB 0x3c000 (base 00007ff9ae300000) - 'wininet.dll'
36132c0.2260: 00007ff9ae7d7000-00007ff9b51affff 0x0001/0x0000 0x0000000
36232c0.2260: *00007ff9b51b0000-00007ff9b51b0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\secur32.dll
36332c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9b51b0000 LB 0x1000 (base 00007ff9b51b0000) - 'secur32.dll'
36432c0.2260: 00007ff9b51b1000-00007ff9b51b3fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\secur32.dll
36532c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9b51b1000 LB 0x3000 (base 00007ff9b51b0000) - 'secur32.dll'
36632c0.2260: 00007ff9b51b4000-00007ff9b51b6fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\secur32.dll
36732c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9b51b4000 LB 0x3000 (base 00007ff9b51b0000) - 'secur32.dll'
36832c0.2260: 00007ff9b51b7000-00007ff9b51b7fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\secur32.dll
36932c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9b51b7000 LB 0x1000 (base 00007ff9b51b0000) - 'secur32.dll'
37032c0.2260: 00007ff9b51b8000-00007ff9b51bbfff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\secur32.dll
37132c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9b51b8000 LB 0x4000 (base 00007ff9b51b0000) - 'secur32.dll'
37232c0.2260: 00007ff9b51bc000-00007ff9b932ffff 0x0001/0x0000 0x0000000
37332c0.2260: *00007ff9b9330000-00007ff9b9330fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\version.dll
37432c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9b9330000 LB 0x1000 (base 00007ff9b9330000) - 'version.dll'
37532c0.2260: 00007ff9b9331000-00007ff9b9333fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\version.dll
37632c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9b9331000 LB 0x3000 (base 00007ff9b9330000) - 'version.dll'
37732c0.2260: 00007ff9b9334000-00007ff9b9335fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\version.dll
37832c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9b9334000 LB 0x2000 (base 00007ff9b9330000) - 'version.dll'
37932c0.2260: 00007ff9b9336000-00007ff9b9336fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\version.dll
38032c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9b9336000 LB 0x1000 (base 00007ff9b9330000) - 'version.dll'
38132c0.2260: 00007ff9b9337000-00007ff9b9339fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\version.dll
38232c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9b9337000 LB 0x3000 (base 00007ff9b9330000) - 'version.dll'
38332c0.2260: 00007ff9b933a000-00007ff9c0e5ffff 0x0001/0x0000 0x0000000
38432c0.2260: *00007ff9c0e60000-00007ff9c0e60fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\wkscli.dll
38532c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9c0e60000 LB 0x1000 (base 00007ff9c0e60000) - 'wkscli.dll'
38632c0.2260: 00007ff9c0e61000-00007ff9c0e6afff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\wkscli.dll
38732c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9c0e61000 LB 0xa000 (base 00007ff9c0e60000) - 'wkscli.dll'
38832c0.2260: 00007ff9c0e6b000-00007ff9c0e71fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\wkscli.dll
38932c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9c0e6b000 LB 0x7000 (base 00007ff9c0e60000) - 'wkscli.dll'
39032c0.2260: 00007ff9c0e72000-00007ff9c0e72fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\wkscli.dll
39132c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9c0e72000 LB 0x1000 (base 00007ff9c0e60000) - 'wkscli.dll'
39232c0.2260: 00007ff9c0e73000-00007ff9c0e76fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\wkscli.dll
39332c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9c0e73000 LB 0x4000 (base 00007ff9c0e60000) - 'wkscli.dll'
39432c0.2260: 00007ff9c0e77000-00007ff9c21cffff 0x0001/0x0000 0x0000000
39532c0.2260: *00007ff9c21d0000-00007ff9c21d0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\winhttp.dll
39632c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9c21d0000 LB 0x1000 (base 00007ff9c21d0000) - 'winhttp.dll'
39732c0.2260: 00007ff9c21d1000-00007ff9c2290fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\winhttp.dll
39832c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9c21d1000 LB 0xc0000 (base 00007ff9c21d0000) - 'winhttp.dll'
39932c0.2260: 00007ff9c2291000-00007ff9c22b3fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\winhttp.dll
40032c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9c2291000 LB 0x23000 (base 00007ff9c21d0000) - 'winhttp.dll'
40132c0.2260: 00007ff9c22b4000-00007ff9c22b5fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\winhttp.dll
40232c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9c22b4000 LB 0x2000 (base 00007ff9c21d0000) - 'winhttp.dll'
40332c0.2260: 00007ff9c22b6000-00007ff9c22c9fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\winhttp.dll
40432c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9c22b6000 LB 0x14000 (base 00007ff9c21d0000) - 'winhttp.dll'
40532c0.2260: 00007ff9c22ca000-00007ff9c33effff 0x0001/0x0000 0x0000000
40632c0.2260: *00007ff9c33f0000-00007ff9c33f0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\wtsapi32.dll
40732c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9c33f0000 LB 0x1000 (base 00007ff9c33f0000) - 'wtsapi32.dll'
40832c0.2260: 00007ff9c33f1000-00007ff9c33f9fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\wtsapi32.dll
40932c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9c33f1000 LB 0x9000 (base 00007ff9c33f0000) - 'wtsapi32.dll'
41032c0.2260: 00007ff9c33fa000-00007ff9c33fdfff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\wtsapi32.dll
41132c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9c33fa000 LB 0x4000 (base 00007ff9c33f0000) - 'wtsapi32.dll'
41232c0.2260: 00007ff9c33fe000-00007ff9c33fefff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\wtsapi32.dll
41332c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9c33fe000 LB 0x1000 (base 00007ff9c33f0000) - 'wtsapi32.dll'
41432c0.2260: 00007ff9c33ff000-00007ff9c3402fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\wtsapi32.dll
41532c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9c33ff000 LB 0x4000 (base 00007ff9c33f0000) - 'wtsapi32.dll'
41632c0.2260: 00007ff9c3403000-00007ff9c4d6ffff 0x0001/0x0000 0x0000000
41732c0.2260: *00007ff9c4d70000-00007ff9c4d70fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\propsys.dll
41832c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9c4d70000 LB 0x1000 (base 00007ff9c4d70000) - 'propsys.dll'
41932c0.2260: 00007ff9c4d71000-00007ff9c4e04fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\propsys.dll
42032c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9c4d71000 LB 0x94000 (base 00007ff9c4d70000) - 'propsys.dll'
42132c0.2260: 00007ff9c4e05000-00007ff9c4e4bfff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\propsys.dll
42232c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9c4e05000 LB 0x47000 (base 00007ff9c4d70000) - 'propsys.dll'
42332c0.2260: 00007ff9c4e4c000-00007ff9c4e4dfff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\propsys.dll
42432c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9c4e4c000 LB 0x2000 (base 00007ff9c4d70000) - 'propsys.dll'
42532c0.2260: 00007ff9c4e4e000-00007ff9c4e5efff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\propsys.dll
42632c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9c4e4e000 LB 0x11000 (base 00007ff9c4d70000) - 'propsys.dll'
42732c0.2260: 00007ff9c4e5f000-00007ff9c96dffff 0x0001/0x0000 0x0000000
42832c0.2260: *00007ff9c96e0000-00007ff9c96e0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\IPHLPAPI.DLL
42932c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9c96e0000 LB 0x1000 (base 00007ff9c96e0000) - 'IPHLPAPI.DLL'
43032c0.2260: 00007ff9c96e1000-00007ff9c9709fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\IPHLPAPI.DLL
43132c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9c96e1000 LB 0x29000 (base 00007ff9c96e0000) - 'IPHLPAPI.DLL'
43232c0.2260: 00007ff9c970a000-00007ff9c9713fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\IPHLPAPI.DLL
43332c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9c970a000 LB 0xa000 (base 00007ff9c96e0000) - 'IPHLPAPI.DLL'
43432c0.2260: 00007ff9c9714000-00007ff9c9714fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\IPHLPAPI.DLL
43532c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9c9714000 LB 0x1000 (base 00007ff9c96e0000) - 'IPHLPAPI.DLL'
43632c0.2260: 00007ff9c9715000-00007ff9c9719fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\IPHLPAPI.DLL
43732c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9c9715000 LB 0x5000 (base 00007ff9c96e0000) - 'IPHLPAPI.DLL'
43832c0.2260: 00007ff9c971a000-00007ff9c971ffff 0x0001/0x0000 0x0000000
43932c0.2260: *00007ff9c9720000-00007ff9c9720fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\dnsapi.dll
44032c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9c9720000 LB 0x1000 (base 00007ff9c9720000) - 'dnsapi.dll'
44132c0.2260: 00007ff9c9721000-00007ff9c97b3fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\dnsapi.dll
44232c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9c9721000 LB 0x93000 (base 00007ff9c9720000) - 'dnsapi.dll'
44332c0.2260: 00007ff9c97b4000-00007ff9c97d5fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\dnsapi.dll
44432c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9c97b4000 LB 0x22000 (base 00007ff9c9720000) - 'dnsapi.dll'
44532c0.2260: 00007ff9c97d6000-00007ff9c97d7fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\dnsapi.dll
44632c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9c97d6000 LB 0x2000 (base 00007ff9c9720000) - 'dnsapi.dll'
44732c0.2260: 00007ff9c97d8000-00007ff9c97eafff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\dnsapi.dll
44832c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9c97d8000 LB 0x13000 (base 00007ff9c9720000) - 'dnsapi.dll'
44932c0.2260: 00007ff9c97eb000-00007ff9c97effff 0x0001/0x0000 0x0000000
45032c0.2260: *00007ff9c97f0000-00007ff9c97f0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\netutils.dll
45132c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9c97f0000 LB 0x1000 (base 00007ff9c97f0000) - 'netutils.dll'
45232c0.2260: 00007ff9c97f1000-00007ff9c97f5fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\netutils.dll
45332c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9c97f1000 LB 0x5000 (base 00007ff9c97f0000) - 'netutils.dll'
45432c0.2260: 00007ff9c97f6000-00007ff9c97f7fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\netutils.dll
45532c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9c97f6000 LB 0x2000 (base 00007ff9c97f0000) - 'netutils.dll'
45632c0.2260: 00007ff9c97f8000-00007ff9c97f8fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\netutils.dll
45732c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9c97f8000 LB 0x1000 (base 00007ff9c97f0000) - 'netutils.dll'
45832c0.2260: 00007ff9c97f9000-00007ff9c97fbfff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\netutils.dll
45932c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9c97f9000 LB 0x3000 (base 00007ff9c97f0000) - 'netutils.dll'
46032c0.2260: 00007ff9c97fc000-00007ff9c980ffff 0x0001/0x0000 0x0000000
46132c0.2260: *00007ff9c9810000-00007ff9c9810fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\logoncli.dll
46232c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9c9810000 LB 0x1000 (base 00007ff9c9810000) - 'logoncli.dll'
46332c0.2260: 00007ff9c9811000-00007ff9c982ffff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\logoncli.dll
46432c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9c9811000 LB 0x1f000 (base 00007ff9c9810000) - 'logoncli.dll'
46532c0.2260: 00007ff9c9830000-00007ff9c984afff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\logoncli.dll
46632c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9c9830000 LB 0x1b000 (base 00007ff9c9810000) - 'logoncli.dll'
46732c0.2260: 00007ff9c984b000-00007ff9c984cfff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\logoncli.dll
46832c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9c984b000 LB 0x2000 (base 00007ff9c9810000) - 'logoncli.dll'
46932c0.2260: 00007ff9c984d000-00007ff9c9851fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\logoncli.dll
47032c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9c984d000 LB 0x5000 (base 00007ff9c9810000) - 'logoncli.dll'
47132c0.2260: 00007ff9c9852000-00007ff9c99cffff 0x0001/0x0000 0x0000000
47232c0.2260: *00007ff9c99d0000-00007ff9c99d0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\mswsock.dll
47332c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9c99d0000 LB 0x1000 (base 00007ff9c99d0000) - 'mswsock.dll'
47432c0.2260: 00007ff9c99d1000-00007ff9c9a20fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\mswsock.dll
47532c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9c99d1000 LB 0x50000 (base 00007ff9c99d0000) - 'mswsock.dll'
47632c0.2260: 00007ff9c9a21000-00007ff9c9a2efff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\mswsock.dll
47732c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9c9a21000 LB 0xe000 (base 00007ff9c99d0000) - 'mswsock.dll'
47832c0.2260: 00007ff9c9a2f000-00007ff9c9a30fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\mswsock.dll
47932c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9c9a2f000 LB 0x2000 (base 00007ff9c99d0000) - 'mswsock.dll'
48032c0.2260: 00007ff9c9a31000-00007ff9c9a36fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\mswsock.dll
48132c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9c9a31000 LB 0x6000 (base 00007ff9c99d0000) - 'mswsock.dll'
48232c0.2260: 00007ff9c9a37000-00007ff9ca07ffff 0x0001/0x0000 0x0000000
48332c0.2260: *00007ff9ca080000-00007ff9ca080fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\userenv.dll
48432c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9ca080000 LB 0x1000 (base 00007ff9ca080000) - 'userenv.dll'
48532c0.2260: 00007ff9ca081000-00007ff9ca093fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\userenv.dll
48632c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9ca081000 LB 0x13000 (base 00007ff9ca080000) - 'userenv.dll'
48732c0.2260: 00007ff9ca094000-00007ff9ca09cfff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\userenv.dll
48832c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9ca094000 LB 0x9000 (base 00007ff9ca080000) - 'userenv.dll'
48932c0.2260: 00007ff9ca09d000-00007ff9ca09dfff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\userenv.dll
49032c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9ca09d000 LB 0x1000 (base 00007ff9ca080000) - 'userenv.dll'
49132c0.2260: 00007ff9ca09e000-00007ff9ca0a4fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\userenv.dll
49232c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9ca09e000 LB 0x7000 (base 00007ff9ca080000) - 'userenv.dll'
49332c0.2260: 00007ff9ca0a5000-00007ff9ca0affff 0x0001/0x0000 0x0000000
49432c0.2260: *00007ff9ca0b0000-00007ff9ca0b0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\sspicli.dll
49532c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9ca0b0000 LB 0x1000 (base 00007ff9ca0b0000) - 'sspicli.dll'
49632c0.2260: 00007ff9ca0b1000-00007ff9ca0cdfff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\sspicli.dll
49732c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9ca0b1000 LB 0x1d000 (base 00007ff9ca0b0000) - 'sspicli.dll'
49832c0.2260: 00007ff9ca0ce000-00007ff9ca0d7fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\sspicli.dll
49932c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9ca0ce000 LB 0xa000 (base 00007ff9ca0b0000) - 'sspicli.dll'
50032c0.2260: 00007ff9ca0d8000-00007ff9ca0d8fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\sspicli.dll
50132c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9ca0d8000 LB 0x1000 (base 00007ff9ca0b0000) - 'sspicli.dll'
50232c0.2260: 00007ff9ca0d9000-00007ff9ca0d9fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\sspicli.dll
50332c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9ca0d9000 LB 0x1000 (base 00007ff9ca0b0000) - 'sspicli.dll'
50432c0.2260: 00007ff9ca0da000-00007ff9ca0defff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\sspicli.dll
50532c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9ca0da000 LB 0x5000 (base 00007ff9ca0b0000) - 'sspicli.dll'
50632c0.2260: 00007ff9ca0df000-00007ff9ca18ffff 0x0001/0x0000 0x0000000
50732c0.2260: *00007ff9ca190000-00007ff9ca190fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\umpdc.dll
50832c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9ca190000 LB 0x1000 (base 00007ff9ca190000) - 'umpdc.dll'
50932c0.2260: 00007ff9ca191000-00007ff9ca198fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\umpdc.dll
51032c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9ca191000 LB 0x8000 (base 00007ff9ca190000) - 'umpdc.dll'
51132c0.2260: 00007ff9ca199000-00007ff9ca19bfff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\umpdc.dll
51232c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9ca199000 LB 0x3000 (base 00007ff9ca190000) - 'umpdc.dll'
51332c0.2260: 00007ff9ca19c000-00007ff9ca19cfff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\umpdc.dll
51432c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9ca19c000 LB 0x1000 (base 00007ff9ca190000) - 'umpdc.dll'
51532c0.2260: 00007ff9ca19d000-00007ff9ca19ffff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\umpdc.dll
51632c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9ca19d000 LB 0x3000 (base 00007ff9ca190000) - 'umpdc.dll'
51732c0.2260: *00007ff9ca1a0000-00007ff9ca1a0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\msasn1.dll
51832c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9ca1a0000 LB 0x1000 (base 00007ff9ca1a0000) - 'msasn1.dll'
51932c0.2260: 00007ff9ca1a1000-00007ff9ca1a9fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\msasn1.dll
52032c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9ca1a1000 LB 0x9000 (base 00007ff9ca1a0000) - 'msasn1.dll'
52132c0.2260: 00007ff9ca1aa000-00007ff9ca1adfff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\msasn1.dll
52232c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9ca1aa000 LB 0x4000 (base 00007ff9ca1a0000) - 'msasn1.dll'
52332c0.2260: 00007ff9ca1ae000-00007ff9ca1aefff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\msasn1.dll
52432c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9ca1ae000 LB 0x1000 (base 00007ff9ca1a0000) - 'msasn1.dll'
52532c0.2260: 00007ff9ca1af000-00007ff9ca1b1fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\msasn1.dll
52632c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9ca1af000 LB 0x3000 (base 00007ff9ca1a0000) - 'msasn1.dll'
52732c0.2260: 00007ff9ca1b2000-00007ff9ca1bffff 0x0001/0x0000 0x0000000
52832c0.2260: *00007ff9ca1c0000-00007ff9ca1c0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\powrprof.dll
52932c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9ca1c0000 LB 0x1000 (base 00007ff9ca1c0000) - 'powrprof.dll'
53032c0.2260: 00007ff9ca1c1000-00007ff9ca1d1fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\powrprof.dll
53132c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9ca1c1000 LB 0x11000 (base 00007ff9ca1c0000) - 'powrprof.dll'
53232c0.2260: 00007ff9ca1d2000-00007ff9ca1dbfff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\powrprof.dll
53332c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9ca1d2000 LB 0xa000 (base 00007ff9ca1c0000) - 'powrprof.dll'
53432c0.2260: 00007ff9ca1dc000-00007ff9ca1dcfff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\powrprof.dll
53532c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9ca1dc000 LB 0x1000 (base 00007ff9ca1c0000) - 'powrprof.dll'
53632c0.2260: 00007ff9ca1dd000-00007ff9ca209fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\powrprof.dll
53732c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9ca1dd000 LB 0x2d000 (base 00007ff9ca1c0000) - 'powrprof.dll'
53832c0.2260: 00007ff9ca20a000-00007ff9ca20ffff 0x0001/0x0000 0x0000000
53932c0.2260: *00007ff9ca210000-00007ff9ca210fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\kernel.appcore.dll
54032c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9ca210000 LB 0x1000 (base 00007ff9ca210000) - 'kernel.appcore.dll'
54132c0.2260: 00007ff9ca211000-00007ff9ca214fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\kernel.appcore.dll
54232c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9ca211000 LB 0x4000 (base 00007ff9ca210000) - 'kernel.appcore.dll'
54332c0.2260: 00007ff9ca215000-00007ff9ca21bfff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\kernel.appcore.dll
54432c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9ca215000 LB 0x7000 (base 00007ff9ca210000) - 'kernel.appcore.dll'
54532c0.2260: 00007ff9ca21c000-00007ff9ca21cfff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\kernel.appcore.dll
54632c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9ca21c000 LB 0x1000 (base 00007ff9ca210000) - 'kernel.appcore.dll'
54732c0.2260: 00007ff9ca21d000-00007ff9ca220fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\kernel.appcore.dll
54832c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9ca21d000 LB 0x4000 (base 00007ff9ca210000) - 'kernel.appcore.dll'
54932c0.2260: 00007ff9ca221000-00007ff9ca22ffff 0x0001/0x0000 0x0000000
55032c0.2260: *00007ff9ca230000-00007ff9ca230fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\profapi.dll
55132c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9ca230000 LB 0x1000 (base 00007ff9ca230000) - 'profapi.dll'
55232c0.2260: 00007ff9ca231000-00007ff9ca240fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\profapi.dll
55332c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9ca231000 LB 0x10000 (base 00007ff9ca230000) - 'profapi.dll'
55432c0.2260: 00007ff9ca241000-00007ff9ca247fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\profapi.dll
55532c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9ca241000 LB 0x7000 (base 00007ff9ca230000) - 'profapi.dll'
55632c0.2260: 00007ff9ca248000-00007ff9ca248fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\profapi.dll
55732c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9ca248000 LB 0x1000 (base 00007ff9ca230000) - 'profapi.dll'
55832c0.2260: 00007ff9ca249000-00007ff9ca24dfff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\profapi.dll
55932c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9ca249000 LB 0x5000 (base 00007ff9ca230000) - 'profapi.dll'
56032c0.2260: 00007ff9ca24e000-00007ff9ca24ffff 0x0001/0x0000 0x0000000
56132c0.2260: *00007ff9ca250000-00007ff9ca250fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\bcryptprimitives.dll
56232c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9ca250000 LB 0x1000 (base 00007ff9ca250000) - 'bcryptprimitives.dll'
56332c0.2260: 00007ff9ca251000-00007ff9ca2b6fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\bcryptprimitives.dll
56432c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9ca251000 LB 0x66000 (base 00007ff9ca250000) - 'bcryptprimitives.dll'
56532c0.2260: 00007ff9ca2b7000-00007ff9ca2cafff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\bcryptprimitives.dll
56632c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9ca2b7000 LB 0x14000 (base 00007ff9ca250000) - 'bcryptprimitives.dll'
56732c0.2260: 00007ff9ca2cb000-00007ff9ca2cbfff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\bcryptprimitives.dll
56832c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9ca2cb000 LB 0x1000 (base 00007ff9ca250000) - 'bcryptprimitives.dll'
56932c0.2260: 00007ff9ca2cc000-00007ff9ca2d0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\bcryptprimitives.dll
57032c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9ca2cc000 LB 0x5000 (base 00007ff9ca250000) - 'bcryptprimitives.dll'
57132c0.2260: 00007ff9ca2d1000-00007ff9ca2dffff 0x0001/0x0000 0x0000000
57232c0.2260: *00007ff9ca2e0000-00007ff9ca2e0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\gdi32full.dll
57332c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9ca2e0000 LB 0x1000 (base 00007ff9ca2e0000) - 'gdi32full.dll'
57432c0.2260: 00007ff9ca2e1000-00007ff9ca3b3fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\gdi32full.dll
57532c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9ca2e1000 LB 0xd3000 (base 00007ff9ca2e0000) - 'gdi32full.dll'
57632c0.2260: 00007ff9ca3b4000-00007ff9ca455fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\gdi32full.dll
57732c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9ca3b4000 LB 0xa2000 (base 00007ff9ca2e0000) - 'gdi32full.dll'
57832c0.2260: 00007ff9ca456000-00007ff9ca459fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\gdi32full.dll
57932c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9ca456000 LB 0x4000 (base 00007ff9ca2e0000) - 'gdi32full.dll'
58032c0.2260: 00007ff9ca45a000-00007ff9ca45afff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\gdi32full.dll
58132c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9ca45a000 LB 0x1000 (base 00007ff9ca2e0000) - 'gdi32full.dll'
58232c0.2260: 00007ff9ca45b000-00007ff9ca477fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\gdi32full.dll
58332c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9ca45b000 LB 0x1d000 (base 00007ff9ca2e0000) - 'gdi32full.dll'
58432c0.2260: 00007ff9ca478000-00007ff9ca47ffff 0x0001/0x0000 0x0000000
58532c0.2260: *00007ff9ca480000-00007ff9ca480fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\KernelBase.dll
58632c0.2260: 00007ff9ca481000-00007ff9ca586fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\KernelBase.dll
58732c0.2260: 00007ff9ca587000-00007ff9ca6e9fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\KernelBase.dll
58832c0.2260: 00007ff9ca6ea000-00007ff9ca6edfff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\KernelBase.dll
58932c0.2260: 00007ff9ca6ee000-00007ff9ca6eefff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\KernelBase.dll
59032c0.2260: 00007ff9ca6ef000-00007ff9ca724fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\KernelBase.dll
59132c0.2260: 00007ff9ca725000-00007ff9ca72ffff 0x0001/0x0000 0x0000000
59232c0.2260: *00007ff9ca730000-00007ff9ca730fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\wintrust.dll
59332c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9ca730000 LB 0x1000 (base 00007ff9ca730000) - 'wintrust.dll'
59432c0.2260: 00007ff9ca731000-00007ff9ca76efff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\wintrust.dll
59532c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9ca731000 LB 0x3e000 (base 00007ff9ca730000) - 'wintrust.dll'
59632c0.2260: 00007ff9ca76f000-00007ff9ca781fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\wintrust.dll
59732c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9ca76f000 LB 0x13000 (base 00007ff9ca730000) - 'wintrust.dll'
59832c0.2260: 00007ff9ca782000-00007ff9ca782fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\wintrust.dll
59932c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9ca782000 LB 0x1000 (base 00007ff9ca730000) - 'wintrust.dll'
60032c0.2260: 00007ff9ca783000-00007ff9ca783fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\wintrust.dll
60132c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9ca783000 LB 0x1000 (base 00007ff9ca730000) - 'wintrust.dll'
60232c0.2260: 00007ff9ca784000-00007ff9ca78bfff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\wintrust.dll
60332c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9ca784000 LB 0x8000 (base 00007ff9ca730000) - 'wintrust.dll'
60432c0.2260: 00007ff9ca78c000-00007ff9ca78ffff 0x0001/0x0000 0x0000000
60532c0.2260: *00007ff9ca790000-00007ff9ca790fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\bcrypt.dll
60632c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9ca790000 LB 0x1000 (base 00007ff9ca790000) - 'bcrypt.dll'
60732c0.2260: 00007ff9ca791000-00007ff9ca7a9fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\bcrypt.dll
60832c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9ca791000 LB 0x19000 (base 00007ff9ca790000) - 'bcrypt.dll'
60932c0.2260: 00007ff9ca7aa000-00007ff9ca7affff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\bcrypt.dll
61032c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9ca7aa000 LB 0x6000 (base 00007ff9ca790000) - 'bcrypt.dll'
61132c0.2260: 00007ff9ca7b0000-00007ff9ca7b0fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\bcrypt.dll
61232c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9ca7b0000 LB 0x1000 (base 00007ff9ca790000) - 'bcrypt.dll'
61332c0.2260: 00007ff9ca7b1000-00007ff9ca7b5fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\bcrypt.dll
61432c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9ca7b1000 LB 0x5000 (base 00007ff9ca790000) - 'bcrypt.dll'
61532c0.2260: 00007ff9ca7b6000-00007ff9ca7bffff 0x0001/0x0000 0x0000000
61632c0.2260: *00007ff9ca7c0000-00007ff9ca7c0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\windows.storage.dll
61732c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9ca7c0000 LB 0x1000 (base 00007ff9ca7c0000) - 'windows.storage.dll'
61832c0.2260: 00007ff9ca7c1000-00007ff9cad01fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\windows.storage.dll
61932c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9ca7c1000 LB 0x541000 (base 00007ff9ca7c0000) - 'windows.storage.dll'
62032c0.2260: 00007ff9cad02000-00007ff9caebcfff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\windows.storage.dll
62132c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9cad02000 LB 0x1bb000 (base 00007ff9ca7c0000) - 'windows.storage.dll'
62232c0.2260: 00007ff9caebd000-00007ff9caec9fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\windows.storage.dll
62332c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9caebd000 LB 0xd000 (base 00007ff9ca7c0000) - 'windows.storage.dll'
62432c0.2260: 00007ff9caeca000-00007ff9caecafff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\windows.storage.dll
62532c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9caeca000 LB 0x1000 (base 00007ff9ca7c0000) - 'windows.storage.dll'
62632c0.2260: 00007ff9caecb000-00007ff9caf3afff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\windows.storage.dll
62732c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9caecb000 LB 0x70000 (base 00007ff9ca7c0000) - 'windows.storage.dll'
62832c0.2260: 00007ff9caf3b000-00007ff9caf3ffff 0x0001/0x0000 0x0000000
62932c0.2260: *00007ff9caf40000-00007ff9caf40fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\cryptsp.dll
63032c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9caf40000 LB 0x1000 (base 00007ff9caf40000) - 'cryptsp.dll'
63132c0.2260: 00007ff9caf41000-00007ff9caf4bfff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\cryptsp.dll
63232c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9caf41000 LB 0xb000 (base 00007ff9caf40000) - 'cryptsp.dll'
63332c0.2260: 00007ff9caf4c000-00007ff9caf51fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\cryptsp.dll
63432c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9caf4c000 LB 0x6000 (base 00007ff9caf40000) - 'cryptsp.dll'
63532c0.2260: 00007ff9caf52000-00007ff9caf52fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\cryptsp.dll
63632c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9caf52000 LB 0x1000 (base 00007ff9caf40000) - 'cryptsp.dll'
63732c0.2260: 00007ff9caf53000-00007ff9caf56fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\cryptsp.dll
63832c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9caf53000 LB 0x4000 (base 00007ff9caf40000) - 'cryptsp.dll'
63932c0.2260: 00007ff9caf57000-00007ff9caf5ffff 0x0001/0x0000 0x0000000
64032c0.2260: *00007ff9caf60000-00007ff9caf60fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\msvcp_win.dll
64132c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9caf60000 LB 0x1000 (base 00007ff9caf60000) - 'msvcp_win.dll'
64232c0.2260: 00007ff9caf61000-00007ff9cafb4fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\msvcp_win.dll
64332c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9caf61000 LB 0x54000 (base 00007ff9caf60000) - 'msvcp_win.dll'
64432c0.2260: 00007ff9cafb5000-00007ff9caff1fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\msvcp_win.dll
64532c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9cafb5000 LB 0x3d000 (base 00007ff9caf60000) - 'msvcp_win.dll'
64632c0.2260: 00007ff9caff2000-00007ff9caff2fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\msvcp_win.dll
64732c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9caff2000 LB 0x1000 (base 00007ff9caf60000) - 'msvcp_win.dll'
64832c0.2260: 00007ff9caff3000-00007ff9caff5fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\msvcp_win.dll
64932c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9caff3000 LB 0x3000 (base 00007ff9caf60000) - 'msvcp_win.dll'
65032c0.2260: 00007ff9caff6000-00007ff9caffdfff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\msvcp_win.dll
65132c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9caff6000 LB 0x8000 (base 00007ff9caf60000) - 'msvcp_win.dll'
65232c0.2260: 00007ff9caffe000-00007ff9caffffff 0x0001/0x0000 0x0000000
65332c0.2260: *00007ff9cb000000-00007ff9cb000fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\cfgmgr32.dll
65432c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9cb000000 LB 0x1000 (base 00007ff9cb000000) - 'cfgmgr32.dll'
65532c0.2260: 00007ff9cb001000-00007ff9cb033fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\cfgmgr32.dll
65632c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9cb001000 LB 0x33000 (base 00007ff9cb000000) - 'cfgmgr32.dll'
65732c0.2260: 00007ff9cb034000-00007ff9cb041fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\cfgmgr32.dll
65832c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9cb034000 LB 0xe000 (base 00007ff9cb000000) - 'cfgmgr32.dll'
65932c0.2260: 00007ff9cb042000-00007ff9cb042fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\cfgmgr32.dll
66032c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9cb042000 LB 0x1000 (base 00007ff9cb000000) - 'cfgmgr32.dll'
66132c0.2260: 00007ff9cb043000-00007ff9cb043fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\cfgmgr32.dll
66232c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9cb043000 LB 0x1000 (base 00007ff9cb000000) - 'cfgmgr32.dll'
66332c0.2260: 00007ff9cb044000-00007ff9cb049fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\cfgmgr32.dll
66432c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9cb044000 LB 0x6000 (base 00007ff9cb000000) - 'cfgmgr32.dll'
66532c0.2260: 00007ff9cb04a000-00007ff9cb04ffff 0x0001/0x0000 0x0000000
66632c0.2260: *00007ff9cb050000-00007ff9cb050fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\crypt32.dll
66732c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9cb050000 LB 0x1000 (base 00007ff9cb050000) - 'crypt32.dll'
66832c0.2260: 00007ff9cb051000-00007ff9cb150fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\crypt32.dll
66932c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9cb051000 LB 0x100000 (base 00007ff9cb050000) - 'crypt32.dll'
67032c0.2260: 00007ff9cb151000-00007ff9cb188fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\crypt32.dll
67132c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9cb151000 LB 0x38000 (base 00007ff9cb050000) - 'crypt32.dll'
67232c0.2260: 00007ff9cb189000-00007ff9cb18ffff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\crypt32.dll
67332c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9cb189000 LB 0x7000 (base 00007ff9cb050000) - 'crypt32.dll'
67432c0.2260: 00007ff9cb190000-00007ff9cb1a0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\crypt32.dll
67532c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9cb190000 LB 0x11000 (base 00007ff9cb050000) - 'crypt32.dll'
67632c0.2260: 00007ff9cb1a1000-00007ff9cb25ffff 0x0001/0x0000 0x0000000
67732c0.2260: *00007ff9cb260000-00007ff9cb260fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\ucrtbase.dll
67832c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9cb260000 LB 0x1000 (base 00007ff9cb260000) - 'ucrtbase.dll'
67932c0.2260: 00007ff9cb261000-00007ff9cb311fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\ucrtbase.dll
68032c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9cb261000 LB 0xb1000 (base 00007ff9cb260000) - 'ucrtbase.dll'
68132c0.2260: 00007ff9cb312000-00007ff9cb349fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\ucrtbase.dll
68232c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9cb312000 LB 0x38000 (base 00007ff9cb260000) - 'ucrtbase.dll'
68332c0.2260: 00007ff9cb34a000-00007ff9cb34cfff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\ucrtbase.dll
68432c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9cb34a000 LB 0x3000 (base 00007ff9cb260000) - 'ucrtbase.dll'
68532c0.2260: 00007ff9cb34d000-00007ff9cb359fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\ucrtbase.dll
68632c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9cb34d000 LB 0xd000 (base 00007ff9cb260000) - 'ucrtbase.dll'
68732c0.2260: 00007ff9cb35a000-00007ff9cb35ffff 0x0001/0x0000 0x0000000
68832c0.2260: *00007ff9cb360000-00007ff9cb360fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\win32u.dll
68932c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9cb360000 LB 0x1000 (base 00007ff9cb360000) - 'win32u.dll'
69032c0.2260: 00007ff9cb361000-00007ff9cb36afff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\win32u.dll
69132c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9cb361000 LB 0xa000 (base 00007ff9cb360000) - 'win32u.dll'
69232c0.2260: 00007ff9cb36b000-00007ff9cb379fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\win32u.dll
69332c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9cb36b000 LB 0xf000 (base 00007ff9cb360000) - 'win32u.dll'
69432c0.2260: 00007ff9cb37a000-00007ff9cb37afff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\win32u.dll
69532c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9cb37a000 LB 0x1000 (base 00007ff9cb360000) - 'win32u.dll'
69632c0.2260: 00007ff9cb37b000-00007ff9cb380fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\win32u.dll
69732c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9cb37b000 LB 0x6000 (base 00007ff9cb360000) - 'win32u.dll'
69832c0.2260: 00007ff9cb381000-00007ff9cb38ffff 0x0001/0x0000 0x0000000
69932c0.2260: *00007ff9cb390000-00007ff9cb390fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\shlwapi.dll
70032c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9cb390000 LB 0x1000 (base 00007ff9cb390000) - 'shlwapi.dll'
70132c0.2260: 00007ff9cb391000-00007ff9cb3bafff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\shlwapi.dll
70232c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9cb391000 LB 0x2a000 (base 00007ff9cb390000) - 'shlwapi.dll'
70332c0.2260: 00007ff9cb3bb000-00007ff9cb3dafff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\shlwapi.dll
70432c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9cb3bb000 LB 0x20000 (base 00007ff9cb390000) - 'shlwapi.dll'
70532c0.2260: 00007ff9cb3db000-00007ff9cb3dbfff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\shlwapi.dll
70632c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9cb3db000 LB 0x1000 (base 00007ff9cb390000) - 'shlwapi.dll'
70732c0.2260: 00007ff9cb3dc000-00007ff9cb3e1fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\shlwapi.dll
70832c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9cb3dc000 LB 0x6000 (base 00007ff9cb390000) - 'shlwapi.dll'
70932c0.2260: 00007ff9cb3e2000-00007ff9cb3effff 0x0001/0x0000 0x0000000
71032c0.2260: *00007ff9cb3f0000-00007ff9cb3f0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\nsi.dll
71132c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9cb3f0000 LB 0x1000 (base 00007ff9cb3f0000) - 'nsi.dll'
71232c0.2260: 00007ff9cb3f1000-00007ff9cb3f2fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\nsi.dll
71332c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9cb3f1000 LB 0x2000 (base 00007ff9cb3f0000) - 'nsi.dll'
71432c0.2260: 00007ff9cb3f3000-00007ff9cb3f3fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\nsi.dll
71532c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9cb3f3000 LB 0x1000 (base 00007ff9cb3f0000) - 'nsi.dll'
71632c0.2260: 00007ff9cb3f4000-00007ff9cb3f4fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\nsi.dll
71732c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9cb3f4000 LB 0x1000 (base 00007ff9cb3f0000) - 'nsi.dll'
71832c0.2260: 00007ff9cb3f5000-00007ff9cb3f7fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\nsi.dll
71932c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9cb3f5000 LB 0x3000 (base 00007ff9cb3f0000) - 'nsi.dll'
72032c0.2260: 00007ff9cb3f8000-00007ff9cb3fffff 0x0001/0x0000 0x0000000
72132c0.2260: *00007ff9cb400000-00007ff9cb400fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\msvcrt.dll
72232c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9cb400000 LB 0x1000 (base 00007ff9cb400000) - 'msvcrt.dll'
72332c0.2260: 00007ff9cb401000-00007ff9cb475fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\msvcrt.dll
72432c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9cb401000 LB 0x75000 (base 00007ff9cb400000) - 'msvcrt.dll'
72532c0.2260: 00007ff9cb476000-00007ff9cb48efff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\msvcrt.dll
72632c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9cb476000 LB 0x19000 (base 00007ff9cb400000) - 'msvcrt.dll'
72732c0.2260: 00007ff9cb48f000-00007ff9cb490fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\msvcrt.dll
72832c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9cb48f000 LB 0x2000 (base 00007ff9cb400000) - 'msvcrt.dll'
72932c0.2260: 00007ff9cb491000-00007ff9cb493fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\msvcrt.dll
73032c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9cb491000 LB 0x3000 (base 00007ff9cb400000) - 'msvcrt.dll'
73132c0.2260: 00007ff9cb494000-00007ff9cb495fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\msvcrt.dll
73232c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9cb494000 LB 0x2000 (base 00007ff9cb400000) - 'msvcrt.dll'
73332c0.2260: 00007ff9cb496000-00007ff9cb496fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\msvcrt.dll
73432c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9cb496000 LB 0x1000 (base 00007ff9cb400000) - 'msvcrt.dll'
73532c0.2260: 00007ff9cb497000-00007ff9cb49dfff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\msvcrt.dll
73632c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9cb497000 LB 0x7000 (base 00007ff9cb400000) - 'msvcrt.dll'
73732c0.2260: 00007ff9cb49e000-00007ff9cb53ffff 0x0001/0x0000 0x0000000
73832c0.2260: *00007ff9cb540000-00007ff9cb540fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\imm32.dll
73932c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9cb540000 LB 0x1000 (base 00007ff9cb540000) - 'imm32.dll'
74032c0.2260: 00007ff9cb541000-00007ff9cb55cfff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\imm32.dll
74132c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9cb541000 LB 0x1c000 (base 00007ff9cb540000) - 'imm32.dll'
74232c0.2260: 00007ff9cb55d000-00007ff9cb563fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\imm32.dll
74332c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9cb55d000 LB 0x7000 (base 00007ff9cb540000) - 'imm32.dll'
74432c0.2260: 00007ff9cb564000-00007ff9cb564fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\imm32.dll
74532c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9cb564000 LB 0x1000 (base 00007ff9cb540000) - 'imm32.dll'
74632c0.2260: 00007ff9cb565000-00007ff9cb56dfff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\imm32.dll
74732c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9cb565000 LB 0x9000 (base 00007ff9cb540000) - 'imm32.dll'
74832c0.2260: 00007ff9cb56e000-00007ff9cb56ffff 0x0001/0x0000 0x0000000
74932c0.2260: *00007ff9cb570000-00007ff9cb570fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\setupapi.dll
75032c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9cb570000 LB 0x1000 (base 00007ff9cb570000) - 'setupapi.dll'
75132c0.2260: 00007ff9cb571000-00007ff9cb648fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\setupapi.dll
75232c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9cb571000 LB 0xd8000 (base 00007ff9cb570000) - 'setupapi.dll'
75332c0.2260: 00007ff9cb649000-00007ff9cb683fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\setupapi.dll
75432c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9cb649000 LB 0x3b000 (base 00007ff9cb570000) - 'setupapi.dll'
75532c0.2260: 00007ff9cb684000-00007ff9cb685fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\setupapi.dll
75632c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9cb684000 LB 0x2000 (base 00007ff9cb570000) - 'setupapi.dll'
75732c0.2260: 00007ff9cb686000-00007ff9cb9dffff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\setupapi.dll
75832c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9cb686000 LB 0x35a000 (base 00007ff9cb570000) - 'setupapi.dll'
75932c0.2260: *00007ff9cb9e0000-00007ff9cb9e0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\gdi32.dll
76032c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9cb9e0000 LB 0x1000 (base 00007ff9cb9e0000) - 'gdi32.dll'
76132c0.2260: 00007ff9cb9e1000-00007ff9cb9ecfff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\gdi32.dll
76232c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9cb9e1000 LB 0xc000 (base 00007ff9cb9e0000) - 'gdi32.dll'
76332c0.2260: 00007ff9cb9ed000-00007ff9cb9fffff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\gdi32.dll
76432c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9cb9ed000 LB 0x13000 (base 00007ff9cb9e0000) - 'gdi32.dll'
76532c0.2260: 00007ff9cba00000-00007ff9cba00fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\gdi32.dll
76632c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9cba00000 LB 0x1000 (base 00007ff9cb9e0000) - 'gdi32.dll'
76732c0.2260: 00007ff9cba01000-00007ff9cba05fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\gdi32.dll
76832c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9cba01000 LB 0x5000 (base 00007ff9cb9e0000) - 'gdi32.dll'
76932c0.2260: 00007ff9cba06000-00007ff9cba0ffff 0x0001/0x0000 0x0000000
77032c0.2260: *00007ff9cba10000-00007ff9cba10fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\psapi.dll
77132c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9cba10000 LB 0x1000 (base 00007ff9cba10000) - 'psapi.dll'
77232c0.2260: 00007ff9cba11000-00007ff9cba11fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\psapi.dll
77332c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9cba11000 LB 0x1000 (base 00007ff9cba10000) - 'psapi.dll'
77432c0.2260: 00007ff9cba12000-00007ff9cba13fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\psapi.dll
77532c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9cba12000 LB 0x2000 (base 00007ff9cba10000) - 'psapi.dll'
77632c0.2260: 00007ff9cba14000-00007ff9cba14fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\psapi.dll
77732c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9cba14000 LB 0x1000 (base 00007ff9cba10000) - 'psapi.dll'
77832c0.2260: 00007ff9cba15000-00007ff9cba17fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\psapi.dll
77932c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9cba15000 LB 0x3000 (base 00007ff9cba10000) - 'psapi.dll'
78032c0.2260: 00007ff9cba18000-00007ff9cbb4ffff 0x0001/0x0000 0x0000000
78132c0.2260: *00007ff9cbb50000-00007ff9cbb50fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\shell32.dll
78232c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9cbb50000 LB 0x1000 (base 00007ff9cbb50000) - 'shell32.dll'
78332c0.2260: 00007ff9cbb51000-00007ff9cc0aefff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\shell32.dll
78432c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9cbb51000 LB 0x55e000 (base 00007ff9cbb50000) - 'shell32.dll'
78532c0.2260: 00007ff9cc0af000-00007ff9cc1c8fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\shell32.dll
78632c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9cc0af000 LB 0x11a000 (base 00007ff9cbb50000) - 'shell32.dll'
78732c0.2260: 00007ff9cc1c9000-00007ff9cc1cffff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\shell32.dll
78832c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9cc1c9000 LB 0x7000 (base 00007ff9cbb50000) - 'shell32.dll'
78932c0.2260: 00007ff9cc1d0000-00007ff9cc1d1fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\shell32.dll
79032c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9cc1d0000 LB 0x2000 (base 00007ff9cbb50000) - 'shell32.dll'
79132c0.2260: 00007ff9cc1d2000-00007ff9cc236fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\shell32.dll
79232c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9cc1d2000 LB 0x65000 (base 00007ff9cbb50000) - 'shell32.dll'
79332c0.2260: 00007ff9cc237000-00007ff9cc2effff 0x0001/0x0000 0x0000000
79432c0.2260: *00007ff9cc2f0000-00007ff9cc2f0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\rpcrt4.dll
79532c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9cc2f0000 LB 0x1000 (base 00007ff9cc2f0000) - 'rpcrt4.dll'
79632c0.2260: 00007ff9cc2f1000-00007ff9cc3cefff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\rpcrt4.dll
79732c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9cc2f1000 LB 0xde000 (base 00007ff9cc2f0000) - 'rpcrt4.dll'
79832c0.2260: 00007ff9cc3cf000-00007ff9cc3f8fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\rpcrt4.dll
79932c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9cc3cf000 LB 0x2a000 (base 00007ff9cc2f0000) - 'rpcrt4.dll'
80032c0.2260: 00007ff9cc3f9000-00007ff9cc3fafff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\rpcrt4.dll
80132c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9cc3f9000 LB 0x2000 (base 00007ff9cc2f0000) - 'rpcrt4.dll'
80232c0.2260: 00007ff9cc3fb000-00007ff9cc40efff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\rpcrt4.dll
80332c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9cc3fb000 LB 0x14000 (base 00007ff9cc2f0000) - 'rpcrt4.dll'
80432c0.2260: 00007ff9cc40f000-00007ff9cc40ffff 0x0001/0x0000 0x0000000
80532c0.2260: *00007ff9cc410000-00007ff9cc410fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\ws2_32.dll
80632c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9cc410000 LB 0x1000 (base 00007ff9cc410000) - 'ws2_32.dll'
80732c0.2260: 00007ff9cc411000-00007ff9cc457fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\ws2_32.dll
80832c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9cc411000 LB 0x47000 (base 00007ff9cc410000) - 'ws2_32.dll'
80932c0.2260: 00007ff9cc458000-00007ff9cc465fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\ws2_32.dll
81032c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9cc458000 LB 0xe000 (base 00007ff9cc410000) - 'ws2_32.dll'
81132c0.2260: 00007ff9cc466000-00007ff9cc466fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\ws2_32.dll
81232c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9cc466000 LB 0x1000 (base 00007ff9cc410000) - 'ws2_32.dll'
81332c0.2260: 00007ff9cc467000-00007ff9cc47efff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\ws2_32.dll
81432c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9cc467000 LB 0x18000 (base 00007ff9cc410000) - 'ws2_32.dll'
81532c0.2260: 00007ff9cc47f000-00007ff9cc4fffff 0x0001/0x0000 0x0000000
81632c0.2260: *00007ff9cc500000-00007ff9cc500fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\kernel32.dll
81732c0.2260: 00007ff9cc501000-00007ff9cc575fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\kernel32.dll
81832c0.2260: 00007ff9cc576000-00007ff9cc5a7fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\kernel32.dll
81932c0.2260: 00007ff9cc5a8000-00007ff9cc5a8fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\kernel32.dll
82032c0.2260: 00007ff9cc5a9000-00007ff9cc5a9fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\kernel32.dll
82132c0.2260: 00007ff9cc5aa000-00007ff9cc5b1fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\kernel32.dll
82232c0.2260: 00007ff9cc5b2000-00007ff9cc8affff 0x0001/0x0000 0x0000000
82332c0.2260: *00007ff9cc8b0000-00007ff9cc8b0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\user32.dll
82432c0.2260: 00007ff9cc8b1000-00007ff9cc936fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\user32.dll
82532c0.2260: 00007ff9cc937000-00007ff9cc956fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\user32.dll
82632c0.2260: 00007ff9cc957000-00007ff9cc958fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\user32.dll
82732c0.2260: 00007ff9cc959000-00007ff9cca43fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\user32.dll
82832c0.2260: 00007ff9cca44000-00007ff9cca4ffff 0x0001/0x0000 0x0000000
82932c0.2260: *00007ff9cca50000-00007ff9cca50fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\advapi32.dll
83032c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9cca50000 LB 0x1000 (base 00007ff9cca50000) - 'advapi32.dll'
83132c0.2260: 00007ff9cca51000-00007ff9ccaaffff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\advapi32.dll
83232c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9cca51000 LB 0x5f000 (base 00007ff9cca50000) - 'advapi32.dll'
83332c0.2260: 00007ff9ccab0000-00007ff9ccae4fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\advapi32.dll
83432c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9ccab0000 LB 0x35000 (base 00007ff9cca50000) - 'advapi32.dll'
83532c0.2260: 00007ff9ccae5000-00007ff9ccae5fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\advapi32.dll
83632c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9ccae5000 LB 0x1000 (base 00007ff9cca50000) - 'advapi32.dll'
83732c0.2260: 00007ff9ccae6000-00007ff9ccae6fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\advapi32.dll
83832c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9ccae6000 LB 0x1000 (base 00007ff9cca50000) - 'advapi32.dll'
83932c0.2260: 00007ff9ccae7000-00007ff9ccae8fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\advapi32.dll
84032c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9ccae7000 LB 0x2000 (base 00007ff9cca50000) - 'advapi32.dll'
84132c0.2260: 00007ff9ccae9000-00007ff9ccae9fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\advapi32.dll
84232c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9ccae9000 LB 0x1000 (base 00007ff9cca50000) - 'advapi32.dll'
84332c0.2260: 00007ff9ccaea000-00007ff9ccaf2fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\advapi32.dll
84432c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9ccaea000 LB 0x9000 (base 00007ff9cca50000) - 'advapi32.dll'
84532c0.2260: 00007ff9ccaf3000-00007ff9ccafffff 0x0001/0x0000 0x0000000
84632c0.2260: *00007ff9ccb00000-00007ff9ccb00fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\ole32.dll
84732c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9ccb00000 LB 0x1000 (base 00007ff9ccb00000) - 'ole32.dll'
84832c0.2260: 00007ff9ccb01000-00007ff9ccbcafff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\ole32.dll
84932c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9ccb01000 LB 0xca000 (base 00007ff9ccb00000) - 'ole32.dll'
85032c0.2260: 00007ff9ccbcb000-00007ff9ccc27fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\ole32.dll
85132c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9ccbcb000 LB 0x5d000 (base 00007ff9ccb00000) - 'ole32.dll'
85232c0.2260: 00007ff9ccc28000-00007ff9ccc29fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\ole32.dll
85332c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9ccc28000 LB 0x2000 (base 00007ff9ccb00000) - 'ole32.dll'
85432c0.2260: 00007ff9ccc2a000-00007ff9ccc56fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\ole32.dll
85532c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9ccc2a000 LB 0x2d000 (base 00007ff9ccb00000) - 'ole32.dll'
85632c0.2260: 00007ff9ccc57000-00007ff9ccc5ffff 0x0001/0x0000 0x0000000
85732c0.2260: *00007ff9ccc60000-00007ff9ccc60fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\sechost.dll
85832c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9ccc60000 LB 0x1000 (base 00007ff9ccc60000) - 'sechost.dll'
85932c0.2260: 00007ff9ccc61000-00007ff9cccc1fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\sechost.dll
86032c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9ccc61000 LB 0x61000 (base 00007ff9ccc60000) - 'sechost.dll'
86132c0.2260: 00007ff9cccc2000-00007ff9ccce8fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\sechost.dll
86232c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9cccc2000 LB 0x27000 (base 00007ff9ccc60000) - 'sechost.dll'
86332c0.2260: 00007ff9ccce9000-00007ff9ccce9fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\sechost.dll
86432c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9ccce9000 LB 0x1000 (base 00007ff9ccc60000) - 'sechost.dll'
86532c0.2260: 00007ff9cccea000-00007ff9ccceafff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\sechost.dll
86632c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9cccea000 LB 0x1000 (base 00007ff9ccc60000) - 'sechost.dll'
86732c0.2260: 00007ff9ccceb000-00007ff9cccecfff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\sechost.dll
86832c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9ccceb000 LB 0x2000 (base 00007ff9ccc60000) - 'sechost.dll'
86932c0.2260: 00007ff9ccced000-00007ff9cccf6fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\sechost.dll
87032c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9ccced000 LB 0xa000 (base 00007ff9ccc60000) - 'sechost.dll'
87132c0.2260: 00007ff9cccf7000-00007ff9ccdcffff 0x0001/0x0000 0x0000000
87232c0.2260: *00007ff9ccdd0000-00007ff9ccdd0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\SHCore.dll
87332c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9ccdd0000 LB 0x1000 (base 00007ff9ccdd0000) - 'SHCore.dll'
87432c0.2260: 00007ff9ccdd1000-00007ff9cce40fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\SHCore.dll
87532c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9ccdd1000 LB 0x70000 (base 00007ff9ccdd0000) - 'SHCore.dll'
87632c0.2260: 00007ff9cce41000-00007ff9cce66fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\SHCore.dll
87732c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9cce41000 LB 0x26000 (base 00007ff9ccdd0000) - 'SHCore.dll'
87832c0.2260: 00007ff9cce67000-00007ff9cce68fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\SHCore.dll
87932c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9cce67000 LB 0x2000 (base 00007ff9ccdd0000) - 'SHCore.dll'
88032c0.2260: 00007ff9cce69000-00007ff9cce77fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\SHCore.dll
88132c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9cce69000 LB 0xf000 (base 00007ff9ccdd0000) - 'SHCore.dll'
88232c0.2260: 00007ff9cce78000-00007ff9cce7ffff 0x0001/0x0000 0x0000000
88332c0.2260: *00007ff9cce80000-00007ff9cce80fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\oleaut32.dll
88432c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9cce80000 LB 0x1000 (base 00007ff9cce80000) - 'oleaut32.dll'
88532c0.2260: 00007ff9cce81000-00007ff9ccf0dfff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\oleaut32.dll
88632c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9cce81000 LB 0x8d000 (base 00007ff9cce80000) - 'oleaut32.dll'
88732c0.2260: 00007ff9ccf0e000-00007ff9ccf33fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\oleaut32.dll
88832c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9ccf0e000 LB 0x26000 (base 00007ff9cce80000) - 'oleaut32.dll'
88932c0.2260: 00007ff9ccf34000-00007ff9ccf36fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\oleaut32.dll
89032c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9ccf34000 LB 0x3000 (base 00007ff9cce80000) - 'oleaut32.dll'
89132c0.2260: 00007ff9ccf37000-00007ff9ccf44fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\oleaut32.dll
89232c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9ccf37000 LB 0xe000 (base 00007ff9cce80000) - 'oleaut32.dll'
89332c0.2260: 00007ff9ccf45000-00007ff9ccf4ffff 0x0001/0x0000 0x0000000
89432c0.2260: *00007ff9ccf50000-00007ff9ccf50fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\combase.dll
89532c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9ccf50000 LB 0x1000 (base 00007ff9ccf50000) - 'combase.dll'
89632c0.2260: 00007ff9ccf51000-00007ff9cd16ffff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\combase.dll
89732c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9ccf51000 LB 0x21f000 (base 00007ff9ccf50000) - 'combase.dll'
89832c0.2260: 00007ff9cd170000-00007ff9cd232fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\combase.dll
89932c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9cd170000 LB 0xc3000 (base 00007ff9ccf50000) - 'combase.dll'
90032c0.2260: 00007ff9cd233000-00007ff9cd238fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\combase.dll
90132c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9cd233000 LB 0x6000 (base 00007ff9ccf50000) - 'combase.dll'
90232c0.2260: 00007ff9cd239000-00007ff9cd285fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\combase.dll
90332c0.2260: supHardNtVpScanVirtualMemory: Ignoring unknown mem at 00007ff9cd239000 LB 0x4d000 (base 00007ff9ccf50000) - 'combase.dll'
90432c0.2260: 00007ff9cd286000-00007ff9cd2dffff 0x0001/0x0000 0x0000000
90532c0.2260: *00007ff9cd2e0000-00007ff9cd2e0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\ntdll.dll
90632c0.2260: 00007ff9cd2e1000-00007ff9cd3f7fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\ntdll.dll
90732c0.2260: 00007ff9cd3f8000-00007ff9cd43efff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\ntdll.dll
90832c0.2260: 00007ff9cd43f000-00007ff9cd43ffff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\ntdll.dll
90932c0.2260: 00007ff9cd440000-00007ff9cd441fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\ntdll.dll
91032c0.2260: 00007ff9cd442000-00007ff9cd44afff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\ntdll.dll
91132c0.2260: 00007ff9cd44b000-00007ff9cd4cffff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\ntdll.dll
91232c0.2260: *00007ff9cd4d0000-00007ff9cd4dffff 0x0040/0x0040 0x0020000 !!
91332c0.2260: 00007ff9cd4e0000-00007ffffffeffff 0x0001/0x0000 0x0000000
91432c0.2260: user32.dll: timestamp 0xe196962b (rc=VINF_SUCCESS)
91532c0.2260: kernel32.dll: timestamp 0x95d197ef (rc=VINF_SUCCESS)
91632c0.2260: kernelbase.dll: timestamp 0x5ae7af90 (rc=VINF_SUCCESS)
91732c0.2260: VirtualBoxVM.exe: timestamp 0x61018314 (rc=VINF_SUCCESS)
91832c0.2260: \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe: Signature #1/2: info status: 24202
91932c0.2260: '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe' has no imports
92032c0.2260: '\Device\HarddiskVolume7\Windows\System32\ntdll.dll' has no imports
92132c0.2260: ntdll.dll: Differences in section #1 (.text) between file and memory:
92232c0.2260: 00007ff9cd37cf50 / 0x009cf50: 4c != e9
92332c0.2260: 00007ff9cd37cf51 / 0x009cf51: 8b != 2b
92432c0.2260: 00007ff9cd37cf52 / 0x009cf52: d1 != 36
92532c0.2260: 00007ff9cd37cf53 / 0x009cf53: b8 != 15
92632c0.2260: 00007ff9cd37cf54 / 0x009cf54: 06 != 00
92732c0.2260: 00007ff9cd37cf70 / 0x009cf70: 4c != e9
92832c0.2260: 00007ff9cd37cf71 / 0x009cf71: 8b != 4b
92932c0.2260: 00007ff9cd37cf72 / 0x009cf72: d1 != 38
93032c0.2260: 00007ff9cd37cf73 / 0x009cf73: b8 != 15
93132c0.2260: 00007ff9cd37cf74 / 0x009cf74: 07 != 00
93232c0.2260: 00007ff9cd37cf90 / 0x009cf90: 4c != e9
93332c0.2260: 00007ff9cd37cf91 / 0x009cf91: 8b != 0b
93432c0.2260: 00007ff9cd37cf92 / 0x009cf92: d1 != 36
93532c0.2260: 00007ff9cd37cf93 / 0x009cf93: b8 != 15
93632c0.2260: 00007ff9cd37cf94 / 0x009cf94: 08 != 00
93732c0.2260: 00007ff9cd37d070 / 0x009d070: 4c != e9
93832c0.2260: 00007ff9cd37d071 / 0x009d071: 8b != eb
93932c0.2260: 00007ff9cd37d072 / 0x009d072: d1 != 34
94032c0.2260: 00007ff9cd37d073 / 0x009d073: b8 != 15
94132c0.2260: 00007ff9cd37d074 / 0x009d074: 0f != 00
94232c0.2260: 00007ff9cd37d0b0 / 0x009d0b0: 4c != e9
94332c0.2260: 00007ff9cd37d0b1 / 0x009d0b1: 8b != 0b
94432c0.2260: 00007ff9cd37d0b2 / 0x009d0b2: d1 != 35
94532c0.2260: 00007ff9cd37d0b3 / 0x009d0b3: b8 != 15
94632c0.2260: 00007ff9cd37d0b4 / 0x009d0b4: 11 != 00
94732c0.2260: 00007ff9cd37d350 / 0x009d350: 4c != e9
94832c0.2260: 00007ff9cd37d351 / 0x009d351: 8b != ab
94932c0.2260: 00007ff9cd37d352 / 0x009d352: d1 != 2c
95032c0.2260: 00007ff9cd37d353 / 0x009d353: b8 != 15
95132c0.2260: 00007ff9cd37d354 / 0x009d354: 26 != 00
95232c0.2260: 00007ff9cd37d370 / 0x009d370: 4c != e9
95332c0.2260: 00007ff9cd37d371 / 0x009d371: 8b != 6b
95432c0.2260: 00007ff9cd37d372 / 0x009d372: d1 != 32
95532c0.2260: 00007ff9cd37d373 / 0x009d373: b8 != 15
95632c0.2260: 00007ff9cd37d374 / 0x009d374: 27 != 00
95732c0.2260: 00007ff9cd37d410 / 0x009d410: 4c != e9
95832c0.2260: 00007ff9cd37d411 / 0x009d411: 8b != 0b
95932c0.2260: 00007ff9cd37d412 / 0x009d412: d1 != 2c
96032c0.2260: 00007ff9cd37d413 / 0x009d413: b8 != 15
96132c0.2260: 00007ff9cd37d414 / 0x009d414: 2c != 00
96232c0.2260: 00007ff9cd37d4f0 / 0x009d4f0: 4c != e9
96332c0.2260: 00007ff9cd37d4f1 / 0x009d4f1: 8b != 4b
96432c0.2260: 00007ff9cd37d4f2 / 0x009d4f2: d1 != 30
96532c0.2260: 00007ff9cd37d4f3 / 0x009d4f3: b8 != 15
96632c0.2260: 00007ff9cd37d4f4 / 0x009d4f4: 33 != 00
96732c0.2260: 00007ff9cd37d570 / 0x009d570: 4c != e9
96832c0.2260: 00007ff9cd37d571 / 0x009d571: 8b != 6b
96932c0.2260: 00007ff9cd37d572 / 0x009d572: d1 != 31
97032c0.2260: 00007ff9cd37d573 / 0x009d573: b8 != 15
97132c0.2260: 00007ff9cd37d574 / 0x009d574: 37 != 00
97232c0.2260: 00007ff9cd37d5b0 / 0x009d5b0: 4c != e9
97332c0.2260: 00007ff9cd37d5b1 / 0x009d5b1: 8b != eb
97432c0.2260: 00007ff9cd37d5b2 / 0x009d5b2: d1 != 31
97532c0.2260: 00007ff9cd37d5b3 / 0x009d5b3: b8 != 15
97632c0.2260: 00007ff9cd37d5b4 / 0x009d5b4: 39 != 00
97732c0.2260: 00007ff9cd37d7d0 / 0x009d7d0: 4c != e9
97832c0.2260: 00007ff9cd37d7d1 / 0x009d7d1: 8b != eb
97932c0.2260: 00007ff9cd37d7d2 / 0x009d7d2: d1 != 2e
98032c0.2260: 00007ff9cd37d7d3 / 0x009d7d3: b8 != 15
98132c0.2260: 00007ff9cd37d7d4 / 0x009d7d4: 4a != 00
98232c0.2260: 00007ff9cd37d930 / 0x009d930: 4c != e9
98332c0.2260: 00007ff9cd37d931 / 0x009d931: 8b != eb
98432c0.2260: 00007ff9cd37d932 / 0x009d932: d1 != 2b
98532c0.2260: 00007ff9cd37d933 / 0x009d933: b8 != 15
98632c0.2260: 00007ff9cd37d934 / 0x009d934: 55 != 00
98732c0.2260: Restored 0x2000 bytes of original file content at 00007ff9cd37c04e
98832c0.2260: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'win32u.dll'.
98932c0.2260: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #34 'gdi32.dll'.
99032c0.2260: supHardNtVpGetImport: Failed to find symbol 0xffffffff / 'NtUserRegisterClassExWOW' in 'win32u.dll': Unknown Status -610 (0xfffffd9e)
99132c0.2260: Error (rc=-5629):
99232c0.2260: RTLdrGetBits failed on image user32.dll: Unknown Status -610 (0xfffffd9e)
99332c0.2260: supR3HardenedWinInit: SUPHARDNTVPKIND_SELF_PURIFICATION_LIMITED -> Unknown Status -5629 (0xffffea03), cFixes=1
99432c0.2260: \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe: Signature #1/2: info status: 24202
99532c0.2260: '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe' has no imports
99632c0.2260: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe)
99732c0.2260: supR3HardNtEnableThreadCreationEx:
99832c0.2260: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007ff9cd352040 pvNtTerminateThread=00007ff9cd37d8f0
99932c0.2260: supR3HardenedWinDoReSpawn(1): New child 3b30.31a8 [kernel32].
100032c0.2260: supR3HardNtChildGatherData: PebBaseAddress=0000000000a57000 cbPeb=0x388
100132c0.2260: supR3HardNtPuChFindNtdll: uNtDllParentAddr=00007ff9cd2e0000 uNtDllChildAddr=00007ff9cd2e0000
100232c0.2260: supR3HardenedWinSetupChildInit: uLdrInitThunk=00007ff9cd352040
100332c0.2260: supR3HardenedWinSetupChildInit: Initial context:
1004 rax=0000000000000000 rbx=0000000000000000 rcx=00007ff69a9b7900 rdx=0000000000a57000
1005 rsi=0000000000000000 rdi=0000000000000000 r8 =0000000000000000 r9 =0000000000000000
1006 r10=0000000000000000 r11=0000000000000000 r12=0000000000000000 r13=0000000000000000
1007 r14=0000000000000000 r15=0000000000000000 P1=0000000000000000 P2=0000000000000000
1008 rip=00007ff9cd34d700 rsp=0000000000d1fde8 rbp=0000000000000000 ctxflags=0010001b
1009 cs=0033 ss=002b ds=0000 es=0000 fs=0000 gs=0000 eflags=00000200 mxcrx=00001f80
1010 P3=0000000000000000 P4=0000000000000000 P5=0000000000000000 P6=0000000000000000
1011 dr0=0000000000000000 dr1=0000000000000000 dr2=0000000000000000 dr3=0000000000000000
1012 dr6=0000000000000000 dr7=0000000000000000 vcr=0000000000000000 dcr=0000000000000000
1013 lbt=0000000000000000 lbf=0000000000000000 lxt=0000000000000000 lxf=0000000000000000
101432c0.2260: supR3HardenedWinSetupChildInit: Start child.
101532c0.2260: supR3HardNtChildWaitFor: Found expected request 0 (PurifyChildAndCloseHandles) after 1 ms.
101632c0.2260: supR3HardNtChildPurify: Startup delay kludge #1/0: 264 ms, 30 sleeps
101732c0.2260: supHardNtVpScanVirtualMemory: enmKind=CHILD_PURIFICATION
101832c0.2260: *0000000000000000-00000000009cffff 0x0001/0x0000 0x0000000
101932c0.2260: *00000000009d0000-00000000009effff 0x0004/0x0004 0x0020000
102032c0.2260: *00000000009f0000-00000000009f3fff 0x0002/0x0002 0x0040000
102132c0.2260: 00000000009f4000-00000000009fffff 0x0001/0x0000 0x0000000
102232c0.2260: *0000000000a00000-0000000000a56fff 0x0000/0x0004 0x0020000
102332c0.2260: 0000000000a57000-0000000000a59fff 0x0004/0x0004 0x0020000
102432c0.2260: 0000000000a5a000-0000000000bfffff 0x0000/0x0004 0x0020000
102532c0.2260: *0000000000c00000-0000000000c1afff 0x0002/0x0002 0x0040000
102632c0.2260: 0000000000c1b000-0000000000c1ffff 0x0001/0x0000 0x0000000
102732c0.2260: *0000000000c20000-0000000000d1afff 0x0000/0x0004 0x0020000
102832c0.2260: 0000000000d1b000-0000000000d1dfff 0x0104/0x0004 0x0020000
102932c0.2260: 0000000000d1e000-0000000000d1ffff 0x0004/0x0004 0x0020000
103032c0.2260: *0000000000d20000-0000000000d21fff 0x0004/0x0004 0x0020000
103132c0.2260: 0000000000d22000-0000000000d2ffff 0x0001/0x0000 0x0000000
103232c0.2260: *0000000000d30000-0000000000d30fff 0x0040/0x0040 0x0020000 !!
103332c0.2260: supHardNtVpFreeOrReplacePrivateExecMemory: Freeing exec mem at 0000000000d30000 (LB 0x1000, 0000000000d30000 LB 0x1000)
103432c0.2260: 0000000006893d80/0000: 55 48 83 ec 10 48 8b ec-48 81 ec 00 02 00 00 e8 UH...H..H.......
10350000000006893d90/0010: 00 00 00 00 5e 48 81 c6-ac 00 00 00 4c 8d 4d 00 ....^H......L.M.
10360000000006893da0/0020: 4c 8d 46 10 33 d2 33 c9-ff 16 85 c0 75 1c 4c 8d L.F.3.3.....u.L.
10370000000006893db0/0030: 4d 08 45 33 c0 48 8d 56-20 48 8b 4d 00 ff 56 08 M.E3.H.V H.M..V.
10380000000006893dc0/0040: 85 c0 75 06 48 8b 45 08-ff d0 48 81 c4 10 02 00 ..u.H.E...H.....
10390000000006893dd0/0050: 00 5d c3 66 66 66 90 66-66 66 90 66 66 90 66 90 .].fff.fff.ff.f.
10400000000006893de0/0060: c3 66 66 66 90 66 66 66-90 66 66 66 90 66 66 90 .fff.fff.fff.ff.
10410000000006893df0/0070: 55 8b ec 83 c4 f8 56 e8-00 00 00 00 5e 81 c6 44 U.....V.....^..D
10420000000006893e00/0080: 00 00 00 8d 45 fc 50 8d-46 08 50 6a 00 6a 00 2e ....E.P.F.Pj.j..
10430000000006893e10/0090: ff 16 85 c0 75 18 8d 45-f8 50 6a 00 8d 46 10 50 ....u..E.Pj..F.P
10440000000006893e20/00a0: ff 75 fc 2e ff 56 04 85-c0 75 03 ff 55 f8 5e c9 .u...V...u..U.^.
10450000000006893e30/00b0: c2 0c 00 66 66 66 90 66-66 66 90 66 66 90 66 90 ...fff.fff.ff.f.
10460000000006893e40/00c0: 00 16 30 cd f9 7f 00 00-b0 eb 35 cd f9 7f 00 00 ..0.......5.....
10470000000006893e50/00d0: 3e 00 3e 00 00 00 00 00-f0 00 d3 00 00 00 00 00 >.>.............
10480000000006893e60/00e0: 09 00 09 00 00 00 00 00-2e 01 d3 00 00 00 00 00 ................
10490000000006893e70/00f0: 43 00 3a 00 5c 00 57 00-69 00 6e 00 64 00 6f 00 C.:.\.W.i.n.d.o.
105032c0.2260: 0000000006893e80/0000: 77 00 73 00 5c 00 53 00-79 00 73 00 74 00 65 00 w.s.\.S.y.s.t.e.
10510000000006893e90/0010: 6d 00 33 00 32 00 5c 00-73 00 64 00 63 00 6b 00 m.3.2.\.s.d.c.k.
10520000000006893ea0/0020: 65 00 72 00 6e 00 2e 00-64 00 6c 00 6c 00 45 6e e.r.n...d.l.l.En
10530000000006893eb0/0030: 76 69 72 49 6e 69 74 00-00 00 00 00 00 00 00 00 virInit.........
10540000000006893ec0/0040: 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
1055**************** **** <ditto x 10>
10560000000006893f70/00f0: 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
105732c0.2260: supHardNtVpFreeOrReplacePrivateExecMemory: Free attempt #1 succeeded: 0x0 [0000000000d30000/0000000000d30000 LB 0/0x1000]
105832c0.2260: supHardNtVpFreeOrReplacePrivateExecMemory: QVM after free 0: [0000000000000000]/0000000000d30000 LB 0x7f2b0000 s=0x10000 ap=0x0 rp=0x00000000000001
105932c0.2260: 0000000000d31000-000000007ffdffff 0x0001/0x0000 0x0000000
106032c0.2260: *000000007ffe0000-000000007ffe0fff 0x0002/0x0002 0x0020000
106132c0.2260: 000000007ffe1000-000000007ffe8fff 0x0001/0x0000 0x0000000
106232c0.2260: *000000007ffe9000-000000007ffe9fff 0x0002/0x0002 0x0020000
106332c0.2260: 000000007ffea000-00007ff5e936ffff 0x0001/0x0000 0x0000000
106432c0.2260: *00007ff5e9370000-00007ff5e9370fff 0x0002/0x0002 0x0040000
106532c0.2260: 00007ff5e9371000-00007ff5e937ffff 0x0001/0x0000 0x0000000
106632c0.2260: *00007ff5e9380000-00007ff5e93b2fff 0x0002/0x0002 0x0040000
106732c0.2260: 00007ff5e93b3000-00007ff69a9affff 0x0001/0x0000 0x0000000
106832c0.2260: *00007ff69a9b0000-00007ff69a9b0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
106932c0.2260: 00007ff69a9b1000-00007ff69aa27fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
107032c0.2260: 00007ff69aa28000-00007ff69aa28fff 0x0080/0x0080 0x1000000 \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
107132c0.2260: 00007ff69aa29000-00007ff69aa71fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
107232c0.2260: 00007ff69aa72000-00007ff69aa72fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
107332c0.2260: 00007ff69aa73000-00007ff69aa73fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
107432c0.2260: 00007ff69aa74000-00007ff69aa78fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
107532c0.2260: 00007ff69aa79000-00007ff69aa79fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
107632c0.2260: 00007ff69aa7a000-00007ff69aa7afff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
107732c0.2260: 00007ff69aa7b000-00007ff69aa7efff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
107832c0.2260: 00007ff69aa7f000-00007ff69aac7fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
107932c0.2260: 00007ff69aac8000-00007ff9cd2dffff 0x0001/0x0000 0x0000000
108032c0.2260: *00007ff9cd2e0000-00007ff9cd2e0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\ntdll.dll
108132c0.2260: 00007ff9cd2e1000-00007ff9cd3f7fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\ntdll.dll
108232c0.2260: 00007ff9cd3f8000-00007ff9cd43efff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\ntdll.dll
108332c0.2260: 00007ff9cd43f000-00007ff9cd44afff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\ntdll.dll
108432c0.2260: 00007ff9cd44b000-00007ff9cd459fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\ntdll.dll
108532c0.2260: 00007ff9cd45a000-00007ff9cd45afff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\ntdll.dll
108632c0.2260: 00007ff9cd45b000-00007ff9cd45dfff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\ntdll.dll
108732c0.2260: 00007ff9cd45e000-00007ff9cd4cffff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\ntdll.dll
108832c0.2260: 00007ff9cd4d0000-00007ffffffeffff 0x0001/0x0000 0x0000000
108932c0.2260: supR3HardNtChildPurify: cFixes=1 g_fSupAdversaries=0x80000000
109032c0.2260: supR3HardNtChildPurify: Startup delay kludge #1/1: 520 ms, 60 sleeps
109132c0.2260: supHardNtVpScanVirtualMemory: enmKind=CHILD_PURIFICATION
109232c0.2260: *0000000000000000-00000000009cffff 0x0001/0x0000 0x0000000
109332c0.2260: *00000000009d0000-00000000009effff 0x0004/0x0004 0x0020000
109432c0.2260: *00000000009f0000-00000000009f3fff 0x0002/0x0002 0x0040000
109532c0.2260: 00000000009f4000-00000000009fffff 0x0001/0x0000 0x0000000
109632c0.2260: *0000000000a00000-0000000000a56fff 0x0000/0x0004 0x0020000
109732c0.2260: 0000000000a57000-0000000000a59fff 0x0004/0x0004 0x0020000
109832c0.2260: 0000000000a5a000-0000000000bfffff 0x0000/0x0004 0x0020000
109932c0.2260: *0000000000c00000-0000000000c1afff 0x0002/0x0002 0x0040000
110032c0.2260: 0000000000c1b000-0000000000c1ffff 0x0001/0x0000 0x0000000
110132c0.2260: *0000000000c20000-0000000000d1afff 0x0000/0x0004 0x0020000
110232c0.2260: 0000000000d1b000-0000000000d1dfff 0x0104/0x0004 0x0020000
110332c0.2260: 0000000000d1e000-0000000000d1ffff 0x0004/0x0004 0x0020000
110432c0.2260: *0000000000d20000-0000000000d21fff 0x0004/0x0004 0x0020000
110532c0.2260: 0000000000d22000-000000007ffdffff 0x0001/0x0000 0x0000000
110632c0.2260: *000000007ffe0000-000000007ffe0fff 0x0002/0x0002 0x0020000
110732c0.2260: 000000007ffe1000-000000007ffe8fff 0x0001/0x0000 0x0000000
110832c0.2260: *000000007ffe9000-000000007ffe9fff 0x0002/0x0002 0x0020000
110932c0.2260: 000000007ffea000-00007ff5e936ffff 0x0001/0x0000 0x0000000
111032c0.2260: *00007ff5e9370000-00007ff5e9370fff 0x0002/0x0002 0x0040000
111132c0.2260: 00007ff5e9371000-00007ff5e937ffff 0x0001/0x0000 0x0000000
111232c0.2260: *00007ff5e9380000-00007ff5e93b2fff 0x0002/0x0002 0x0040000
111332c0.2260: 00007ff5e93b3000-00007ff69a9affff 0x0001/0x0000 0x0000000
111432c0.2260: *00007ff69a9b0000-00007ff69a9b0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
111532c0.2260: 00007ff69a9b1000-00007ff69aa27fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
111632c0.2260: 00007ff69aa28000-00007ff69aa28fff 0x0040/0x0080 0x1000000 \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
111732c0.2260: 00007ff69aa29000-00007ff69aa71fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
111832c0.2260: 00007ff69aa72000-00007ff69aa7efff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
111932c0.2260: 00007ff69aa7f000-00007ff69aac7fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
112032c0.2260: 00007ff69aac8000-00007ff9cd2dffff 0x0001/0x0000 0x0000000
112132c0.2260: *00007ff9cd2e0000-00007ff9cd2e0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\ntdll.dll
112232c0.2260: 00007ff9cd2e1000-00007ff9cd3f7fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\ntdll.dll
112332c0.2260: 00007ff9cd3f8000-00007ff9cd43efff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\ntdll.dll
112432c0.2260: 00007ff9cd43f000-00007ff9cd442fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\ntdll.dll
112532c0.2260: 00007ff9cd443000-00007ff9cd44afff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\ntdll.dll
112632c0.2260: 00007ff9cd44b000-00007ff9cd459fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\ntdll.dll
112732c0.2260: 00007ff9cd45a000-00007ff9cd45afff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\ntdll.dll
112832c0.2260: 00007ff9cd45b000-00007ff9cd45dfff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\ntdll.dll
112932c0.2260: 00007ff9cd45e000-00007ff9cd4cffff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\ntdll.dll
113032c0.2260: 00007ff9cd4d0000-00007ffffffeffff 0x0001/0x0000 0x0000000
113132c0.2260: supR3HardNtChildPurify: Done after 884 ms and 1 fixes (loop #1).
11323b30.31a8: Log file opened: 6.1.26r145957 g_hStartupLog=0000000000000004 g_uNtVerCombined=0xa047bb00
11333b30.31a8: supR3HardenedVmProcessInit: uNtDllAddr=00007ff9cd2e0000 g_uNtVerCombined=0xa047bb00 (stack ~0000000000d1f878)
11343b30.31a8: ntdll.dll: timestamp 0xd6055cfe (rc=VINF_SUCCESS)
11353b30.31a8: New simple heap: #1 0000000000e30000 LB 0x400000 (for 2031616 allocation)
113632c0.2260: supR3HardNtEnableThreadCreationEx:
11373b30.31a8: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox'
11383b30.31a8: System32: \Device\HarddiskVolume7\Windows\System32
11393b30.31a8: WinSxS: \Device\HarddiskVolume7\Windows\WinSxS
11403b30.31a8: KnownDllPath: C:\Windows\System32
11413b30.31a8: supR3HardenedVmProcessInit: Opening vboxdrv stub...
11423b30.31a8: supR3HardenedVmProcessInit: Restoring LdrInitializeThunk...
11433b30.31a8: supR3HardenedVmProcessInit: Returning to LdrInitializeThunk...
11443b30.31a8: Registered Dll notification callback with NTDLL.
11453b30.31a8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume7\Windows\System32\kernel32.dll)
11463b30.31a8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume7\Windows\System32\kernel32.dll
11473b30.31a8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\KERNEL32.DLL (Input=KERNEL32.DLL, rcNtResolve=0xc0150008) *pfFlags=0xffffffff pwszSearchPath=0000000000004001:<flags> [calling]
11483b30.31a8: supR3HardenedDllNotificationCallback: load 00007ff9ca480000 LB 0x002a5000 C:\Windows\System32\KERNELBASE.dll [fFlags=0x0]
11493b30.31a8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume7\Windows\System32\KernelBase.dll)
11503b30.31a8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume7\Windows\System32\KernelBase.dll
11513b30.31a8: supR3HardenedDllNotificationCallback: load 00007ff9cc500000 LB 0x000b2000 C:\Windows\System32\KERNEL32.DLL [fFlags=0x0]
11523b30.31a8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
11533b30.31a8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9cc500000 'C:\Windows\System32\KERNEL32.DLL'
11543b30.31a8: supR3HardenedDllNotificationCallback: load 00007ff69a9b0000 LB 0x00118000 C:\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe [fFlags=0x0]
11553b30.31a8: \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe: Signature #1/2: info status: 24202
11563b30.31a8: '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe' has no imports
11573b30.31a8: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe)
11583b30.31a8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
11593b30.31a8: supR3HardenedMonitor_KiUserApcDispatcher_C: pfnRoutine=0000000000d30000 enmState=3 -> supR3HardenedWinDummyApcRoutine
11603b30.31a8: supR3HardenedWinDummyApcRoutine: pvArg1=0000000000000000 pvArg2=0000000000000000 pvArg3=0000000000000000
11613b30.31a8: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007ff9cd352040 pvNtTerminateThread=00007ff9cd37d8f0
116232c0.2260: supR3HardNtChildWaitFor: Found expected request 1 (CloseEvents) after 225 ms.
11633b30.31a8: \SystemRoot\System32\ntdll.dll:
11643b30.31a8: CreationTime: 2021-05-18T03:33:49.382474100Z
11653b30.31a8: LastWriteTime: 2021-05-18T03:33:49.420509300Z
11663b30.31a8: ChangeTime: 2021-05-18T11:10:36.444488900Z
11673b30.31a8: FileAttributes: 0x20
11683b30.31a8: Size: 0x1e8068
11693b30.31a8: NT Headers: 0xd8
11703b30.31a8: Timestamp: 0xd6055cfe
11713b30.31a8: Machine: 0x8664 - amd64
11723b30.31a8: Timestamp: 0xd6055cfe
11733b30.31a8: Image Version: 10.0
11743b30.31a8: SizeOfImage: 0x1f0000 (2031616)
11753b30.31a8: Resource Dir: 0x17f000 LB 0x6f310
11763b30.31a8: [Version info resource found at 0xd8! (ID/Name: 0x1; SubID/SubName: 0x409)]
11773b30.31a8: [Raw version resource data: 0x17f0f0 LB 0x380, codepage 0x0 (reserved 0x0)]
11783b30.31a8: ProductName: Microsoft® Windows® Operating System
11793b30.31a8: ProductVersion: 10.0.18362.1533
11803b30.31a8: FileVersion: 10.0.18362.1533 (WinBuild.160101.0800)
11813b30.31a8: FileDescription: NT Layer DLL
11823b30.31a8: \SystemRoot\System32\kernel32.dll:
11833b30.31a8: CreationTime: 2021-04-14T05:23:20.244557900Z
11843b30.31a8: LastWriteTime: 2021-04-14T05:23:20.262528100Z
11853b30.31a8: ChangeTime: 2021-05-18T03:34:44.587413300Z
11863b30.31a8: FileAttributes: 0x20
11873b30.31a8: Size: 0xb04a8
11883b30.31a8: NT Headers: 0xf8
11893b30.31a8: Timestamp: 0x95d197ef
11903b30.31a8: Machine: 0x8664 - amd64
11913b30.31a8: Timestamp: 0x95d197ef
11923b30.31a8: Image Version: 10.0
11933b30.31a8: SizeOfImage: 0xb2000 (729088)
11943b30.31a8: Resource Dir: 0xb0000 LB 0x520
11953b30.31a8: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
11963b30.31a8: [Raw version resource data: 0xb00b0 LB 0x3a4, codepage 0x0 (reserved 0x0)]
11973b30.31a8: ProductName: Microsoft® Windows® Operating System
11983b30.31a8: ProductVersion: 10.0.18362.1500
11993b30.31a8: FileVersion: 10.0.18362.1500 (WinBuild.160101.0800)
12003b30.31a8: FileDescription: Windows NT BASE API Client DLL
12013b30.31a8: \SystemRoot\System32\KernelBase.dll:
12023b30.31a8: CreationTime: 2021-04-14T05:23:35.396646700Z
12033b30.31a8: LastWriteTime: 2021-04-14T05:23:35.466459500Z
12043b30.31a8: ChangeTime: 2021-05-18T03:34:44.914821000Z
12053b30.31a8: FileAttributes: 0x20
12063b30.31a8: Size: 0x2a5888
12073b30.31a8: NT Headers: 0x100
12083b30.31a8: Timestamp: 0x5ae7af90
12093b30.31a8: Machine: 0x8664 - amd64
12103b30.31a8: Timestamp: 0x5ae7af90
12113b30.31a8: Image Version: 10.0
12123b30.31a8: SizeOfImage: 0x2a5000 (2772992)
12133b30.31a8: Resource Dir: 0x27f000 LB 0x548
12143b30.31a8: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
12153b30.31a8: [Raw version resource data: 0x27f0b0 LB 0x3bc, codepage 0x0 (reserved 0x0)]
12163b30.31a8: ProductName: Microsoft® Windows® Operating System
12173b30.31a8: ProductVersion: 10.0.18362.1474
12183b30.31a8: FileVersion: 10.0.18362.1474 (WinBuild.160101.0800)
12193b30.31a8: FileDescription: Windows NT BASE API Client DLL
12203b30.31a8: \SystemRoot\System32\apisetschema.dll:
12213b30.31a8: CreationTime: 2019-03-19T04:43:54.837151500Z
12223b30.31a8: LastWriteTime: 2019-03-19T04:43:54.837151500Z
12233b30.31a8: ChangeTime: 2021-05-18T03:34:44.560409000Z
12243b30.31a8: FileAttributes: 0x20
12253b30.31a8: Size: 0x1d028
12263b30.31a8: NT Headers: 0xc8
12273b30.31a8: Timestamp: 0xd6ced080
12283b30.31a8: Machine: 0x8664 - amd64
12293b30.31a8: Timestamp: 0xd6ced080
12303b30.31a8: Image Version: 10.0
12313b30.31a8: SizeOfImage: 0x1e000 (122880)
12323b30.31a8: Resource Dir: 0x1d000 LB 0x408
12333b30.31a8: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
12343b30.31a8: [Raw version resource data: 0x1d060 LB 0x3a8, codepage 0x0 (reserved 0x0)]
12353b30.31a8: ProductName: Microsoft® Windows® Operating System
12363b30.31a8: ProductVersion: 10.0.18362.1
12373b30.31a8: FileVersion: 10.0.18362.1 (WinBuild.160101.0800)
12383b30.31a8: FileDescription: ApiSet Schema DLL
12393b30.31a8: NtOpenDirectoryObject failed on \Driver: 0xc0000022
12403b30.31a8: supR3HardenedWinFindAdversaries: 0x0
12413b30.31a8: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox'
12423b30.31a8: Calling main()
12433b30.31a8: SUPR3HardenedMain: pszProgName=VirtualBoxVM fFlags=0x2
12443b30.31a8: supR3HardenedWinInitAppBin(0x2): '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox'
12453b30.31a8: \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe: Signature #1/2: info status: 24202
12463b30.31a8: '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe' has no imports
12473b30.31a8: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe)
12483b30.31a8: SUPR3HardenedMain: Respawn #2
12493b30.31a8: supR3HardNtEnableThreadCreationEx:
12503b30.31a8: supR3HardenedDllNotificationCallback: load 00007ff9cc2f0000 LB 0x0011f000 C:\Windows\System32\RPCRT4.dll [fFlags=0x0]
12513b30.31a8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume7\Windows\System32\rpcrt4.dll)
12523b30.31a8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume7\Windows\System32\rpcrt4.dll
12533b30.31a8: supR3HardenedDllNotificationCallback: load 00007ff9ccc60000 LB 0x00097000 C:\Windows\System32\sechost.dll [fFlags=0x0]
12543b30.31a8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'rpcrt4.dll'.
12553b30.31a8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume7\Windows\System32\sechost.dll)
12563b30.31a8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume7\Windows\System32\sechost.dll
12573b30.31a8: '\Device\HarddiskVolume7\Windows\System32\ntdll.dll' has no imports
12583b30.31a8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume7\Windows\System32\ntdll.dll)
12593b30.31a8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume7\Windows\System32\ntdll.dll
12603b30.31a8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
12613b30.31a8: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume7\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
12623b30.31a8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
12633b30.31a8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\ntdll.dll (Input=ntdll.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
12643b30.31a8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9cd2e0000 'C:\Windows\System32\ntdll.dll'
12653b30.31a8: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007ff9cd352040 pvNtTerminateThread=00007ff9cd37d8f0
12663b30.31a8: supR3HardenedWinDoReSpawn(2): New child 4238.25cc [kernel32].
12673b30.31a8: supR3HardenedWinReSpawn: NtSetInformationThread/ThreadHideFromDebugger failed: 0xc0000022 (harmless)
12683b30.31a8: supR3HardNtChildGatherData: PebBaseAddress=0000000000f75000 cbPeb=0x388
12693b30.31a8: supR3HardNtPuChFindNtdll: uNtDllParentAddr=00007ff9cd2e0000 uNtDllChildAddr=00007ff9cd2e0000
12703b30.31a8: supR3HardenedWinSetupChildInit: uLdrInitThunk=00007ff9cd352040
12713b30.31a8: supR3HardenedWinSetupChildInit: Initial context:
1272 rax=0000000000000000 rbx=0000000000000000 rcx=00007ff69a9b7900 rdx=0000000000f75000
1273 rsi=0000000000000000 rdi=0000000000000000 r8 =0000000000000000 r9 =0000000000000000
1274 r10=0000000000000000 r11=0000000000000000 r12=0000000000000000 r13=0000000000000000
1275 r14=0000000000000000 r15=0000000000000000 P1=0000000000000000 P2=0000000000000000
1276 rip=00007ff9cd34d700 rsp=00000000010ffb38 rbp=0000000000000000 ctxflags=0010001b
1277 cs=0033 ss=002b ds=0000 es=0000 fs=0000 gs=0000 eflags=00000200 mxcrx=00001f80
1278 P3=0000000000000000 P4=0000000000000000 P5=0000000000000000 P6=0000000000000000
1279 dr0=0000000000000000 dr1=0000000000000000 dr2=0000000000000000 dr3=0000000000000000
1280 dr6=0000000000000000 dr7=0000000000000000 vcr=0000000000000000 dcr=0000000000000000
1281 lbt=0000000000000000 lbf=0000000000000000 lxt=0000000000000000 lxf=0000000000000000
12823b30.31a8: kernel32.dll: timestamp 0x95d197ef (rc=VINF_SUCCESS)
12833b30.31a8: supR3HardenedWinSetupChildInit: Start child.
12843b30.31a8: supR3HardNtChildWaitFor: Found expected request 0 (PurifyChildAndCloseHandles) after 0 ms.
12853b30.31a8: supR3HardNtChildPurify: Startup delay kludge #1/0: 261 ms, 30 sleeps
12863b30.31a8: supHardNtVpScanVirtualMemory: enmKind=CHILD_PURIFICATION
12873b30.31a8: *0000000000000000-0000000000d8ffff 0x0001/0x0000 0x0000000
12883b30.31a8: *0000000000d90000-0000000000daffff 0x0004/0x0004 0x0020000
12893b30.31a8: *0000000000db0000-0000000000dcafff 0x0002/0x0002 0x0040000
12903b30.31a8: 0000000000dcb000-0000000000dcffff 0x0001/0x0000 0x0000000
12913b30.31a8: *0000000000dd0000-0000000000dd3fff 0x0002/0x0002 0x0040000
12923b30.31a8: 0000000000dd4000-0000000000ddffff 0x0001/0x0000 0x0000000
12933b30.31a8: *0000000000de0000-0000000000de1fff 0x0004/0x0004 0x0020000
12943b30.31a8: 0000000000de2000-0000000000deffff 0x0001/0x0000 0x0000000
12953b30.31a8: *0000000000df0000-0000000000df0fff 0x0040/0x0040 0x0020000 !!
12963b30.31a8: supHardNtVpFreeOrReplacePrivateExecMemory: Freeing exec mem at 0000000000df0000 (LB 0x1000, 0000000000df0000 LB 0x1000)
12973b30.31a8: 000000000148db40/0000: 55 48 83 ec 10 48 8b ec-48 81 ec 00 02 00 00 e8 UH...H..H.......
1298000000000148db50/0010: 00 00 00 00 5e 48 81 c6-ac 00 00 00 4c 8d 4d 00 ....^H......L.M.
1299000000000148db60/0020: 4c 8d 46 10 33 d2 33 c9-ff 16 85 c0 75 1c 4c 8d L.F.3.3.....u.L.
1300000000000148db70/0030: 4d 08 45 33 c0 48 8d 56-20 48 8b 4d 00 ff 56 08 M.E3.H.V H.M..V.
1301000000000148db80/0040: 85 c0 75 06 48 8b 45 08-ff d0 48 81 c4 10 02 00 ..u.H.E...H.....
1302000000000148db90/0050: 00 5d c3 66 66 66 90 66-66 66 90 66 66 90 66 90 .].fff.fff.ff.f.
1303000000000148dba0/0060: c3 66 66 66 90 66 66 66-90 66 66 66 90 66 66 90 .fff.fff.fff.ff.
1304000000000148dbb0/0070: 55 8b ec 83 c4 f8 56 e8-00 00 00 00 5e 81 c6 44 U.....V.....^..D
1305000000000148dbc0/0080: 00 00 00 8d 45 fc 50 8d-46 08 50 6a 00 6a 00 2e ....E.P.F.Pj.j..
1306000000000148dbd0/0090: ff 16 85 c0 75 18 8d 45-f8 50 6a 00 8d 46 10 50 ....u..E.Pj..F.P
1307000000000148dbe0/00a0: ff 75 fc 2e ff 56 04 85-c0 75 03 ff 55 f8 5e c9 .u...V...u..U.^.
1308000000000148dbf0/00b0: c2 0c 00 66 66 66 90 66-66 66 90 66 66 90 66 90 ...fff.fff.ff.f.
1309000000000148dc00/00c0: 00 16 30 cd f9 7f 00 00-b0 eb 35 cd f9 7f 00 00 ..0.......5.....
1310000000000148dc10/00d0: 3e 00 3e 00 00 00 00 00-f0 00 df 00 00 00 00 00 >.>.............
1311000000000148dc20/00e0: 09 00 09 00 00 00 00 00-2e 01 df 00 00 00 00 00 ................
1312000000000148dc30/00f0: 43 00 3a 00 5c 00 57 00-69 00 6e 00 64 00 6f 00 C.:.\.W.i.n.d.o.
13133b30.31a8: 000000000148dc40/0000: 77 00 73 00 5c 00 53 00-79 00 73 00 74 00 65 00 w.s.\.S.y.s.t.e.
1314000000000148dc50/0010: 6d 00 33 00 32 00 5c 00-73 00 64 00 63 00 6b 00 m.3.2.\.s.d.c.k.
1315000000000148dc60/0020: 65 00 72 00 6e 00 2e 00-64 00 6c 00 6c 00 45 6e e.r.n...d.l.l.En
1316000000000148dc70/0030: 76 69 72 49 6e 69 74 00-00 00 00 00 00 00 00 00 virInit.........
1317000000000148dc80/0040: 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
1318**************** **** <ditto x 10>
1319000000000148dd30/00f0: 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
13203b30.31a8: supHardNtVpFreeOrReplacePrivateExecMemory: Free attempt #1 succeeded: 0x0 [0000000000df0000/0000000000df0000 LB 0/0x1000]
13213b30.31a8: supHardNtVpFreeOrReplacePrivateExecMemory: QVM after free 0: [0000000000000000]/0000000000df0000 LB 0x10000 s=0x10000 ap=0x0 rp=0x00000000000001
13223b30.31a8: 0000000000df1000-0000000000dfffff 0x0001/0x0000 0x0000000
13233b30.31a8: *0000000000e00000-0000000000f74fff 0x0000/0x0004 0x0020000
13243b30.31a8: 0000000000f75000-0000000000f77fff 0x0004/0x0004 0x0020000
13253b30.31a8: 0000000000f78000-0000000000ffffff 0x0000/0x0004 0x0020000
13263b30.31a8: *0000000001000000-00000000010fafff 0x0000/0x0004 0x0020000
13273b30.31a8: 00000000010fb000-00000000010fdfff 0x0104/0x0004 0x0020000
13283b30.31a8: 00000000010fe000-00000000010fffff 0x0004/0x0004 0x0020000
13293b30.31a8: 0000000001100000-000000007ffdffff 0x0001/0x0000 0x0000000
13303b30.31a8: *000000007ffe0000-000000007ffe0fff 0x0002/0x0002 0x0020000
13313b30.31a8: 000000007ffe1000-000000007ffe8fff 0x0001/0x0000 0x0000000
13323b30.31a8: *000000007ffe9000-000000007ffe9fff 0x0002/0x0002 0x0020000
13333b30.31a8: 000000007ffea000-00007ff52e0effff 0x0001/0x0000 0x0000000
13343b30.31a8: *00007ff52e0f0000-00007ff52e0f0fff 0x0002/0x0002 0x0040000
13353b30.31a8: 00007ff52e0f1000-00007ff52e0fffff 0x0001/0x0000 0x0000000
13363b30.31a8: *00007ff52e100000-00007ff52e132fff 0x0002/0x0002 0x0040000
13373b30.31a8: 00007ff52e133000-00007ff69a9affff 0x0001/0x0000 0x0000000
13383b30.31a8: *00007ff69a9b0000-00007ff69a9b0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
13393b30.31a8: 00007ff69a9b1000-00007ff69aa27fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
13403b30.31a8: 00007ff69aa28000-00007ff69aa28fff 0x0080/0x0080 0x1000000 \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
13413b30.31a8: 00007ff69aa29000-00007ff69aa71fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
13423b30.31a8: 00007ff69aa72000-00007ff69aa72fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
13433b30.31a8: 00007ff69aa73000-00007ff69aa73fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
13443b30.31a8: 00007ff69aa74000-00007ff69aa78fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
13453b30.31a8: 00007ff69aa79000-00007ff69aa79fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
13463b30.31a8: 00007ff69aa7a000-00007ff69aa7afff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
13473b30.31a8: 00007ff69aa7b000-00007ff69aa7efff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
13483b30.31a8: 00007ff69aa7f000-00007ff69aac7fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
13493b30.31a8: 00007ff69aac8000-00007ff9cd2dffff 0x0001/0x0000 0x0000000
13503b30.31a8: *00007ff9cd2e0000-00007ff9cd2e0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\ntdll.dll
13513b30.31a8: 00007ff9cd2e1000-00007ff9cd3f7fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\ntdll.dll
13523b30.31a8: 00007ff9cd3f8000-00007ff9cd43efff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\ntdll.dll
13533b30.31a8: 00007ff9cd43f000-00007ff9cd44afff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\ntdll.dll
13543b30.31a8: 00007ff9cd44b000-00007ff9cd459fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\ntdll.dll
13553b30.31a8: 00007ff9cd45a000-00007ff9cd45afff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\ntdll.dll
13563b30.31a8: 00007ff9cd45b000-00007ff9cd45dfff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\ntdll.dll
13573b30.31a8: 00007ff9cd45e000-00007ff9cd4cffff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\ntdll.dll
13583b30.31a8: 00007ff9cd4d0000-00007ffffffeffff 0x0001/0x0000 0x0000000
13593b30.31a8: VirtualBoxVM.exe: timestamp 0x61018314 (rc=VINF_SUCCESS)
13603b30.31a8: \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe: Signature #1/2: info status: 24202
13613b30.31a8: '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe' has no imports
13623b30.31a8: '\Device\HarddiskVolume7\Windows\System32\ntdll.dll' has no imports
13633b30.31a8: supR3HardNtChildPurify: cFixes=1 g_fSupAdversaries=0x80000000
13643b30.31a8: supR3HardNtChildPurify: Startup delay kludge #1/1: 515 ms, 58 sleeps
13653b30.31a8: supHardNtVpScanVirtualMemory: enmKind=CHILD_PURIFICATION
13663b30.31a8: *0000000000000000-0000000000d8ffff 0x0001/0x0000 0x0000000
13673b30.31a8: *0000000000d90000-0000000000daffff 0x0004/0x0004 0x0020000
13683b30.31a8: *0000000000db0000-0000000000dcafff 0x0002/0x0002 0x0040000
13693b30.31a8: 0000000000dcb000-0000000000dcffff 0x0001/0x0000 0x0000000
13703b30.31a8: *0000000000dd0000-0000000000dd3fff 0x0002/0x0002 0x0040000
13713b30.31a8: 0000000000dd4000-0000000000ddffff 0x0001/0x0000 0x0000000
13723b30.31a8: *0000000000de0000-0000000000de1fff 0x0004/0x0004 0x0020000
13733b30.31a8: 0000000000de2000-0000000000dfffff 0x0001/0x0000 0x0000000
13743b30.31a8: *0000000000e00000-0000000000f74fff 0x0000/0x0004 0x0020000
13753b30.31a8: 0000000000f75000-0000000000f77fff 0x0004/0x0004 0x0020000
13763b30.31a8: 0000000000f78000-0000000000ffffff 0x0000/0x0004 0x0020000
13773b30.31a8: *0000000001000000-00000000010fafff 0x0000/0x0004 0x0020000
13783b30.31a8: 00000000010fb000-00000000010fdfff 0x0104/0x0004 0x0020000
13793b30.31a8: 00000000010fe000-00000000010fffff 0x0004/0x0004 0x0020000
13803b30.31a8: 0000000001100000-000000007ffdffff 0x0001/0x0000 0x0000000
13813b30.31a8: *000000007ffe0000-000000007ffe0fff 0x0002/0x0002 0x0020000
13823b30.31a8: 000000007ffe1000-000000007ffe8fff 0x0001/0x0000 0x0000000
13833b30.31a8: *000000007ffe9000-000000007ffe9fff 0x0002/0x0002 0x0020000
13843b30.31a8: 000000007ffea000-00007ff52e0effff 0x0001/0x0000 0x0000000
13853b30.31a8: *00007ff52e0f0000-00007ff52e0f0fff 0x0002/0x0002 0x0040000
13863b30.31a8: 00007ff52e0f1000-00007ff52e0fffff 0x0001/0x0000 0x0000000
13873b30.31a8: *00007ff52e100000-00007ff52e132fff 0x0002/0x0002 0x0040000
13883b30.31a8: 00007ff52e133000-00007ff69a9affff 0x0001/0x0000 0x0000000
13893b30.31a8: *00007ff69a9b0000-00007ff69a9b0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
13903b30.31a8: 00007ff69a9b1000-00007ff69aa27fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
13913b30.31a8: 00007ff69aa28000-00007ff69aa28fff 0x0040/0x0080 0x1000000 \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
13923b30.31a8: 00007ff69aa29000-00007ff69aa71fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
13933b30.31a8: 00007ff69aa72000-00007ff69aa7efff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
13943b30.31a8: 00007ff69aa7f000-00007ff69aac7fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
13953b30.31a8: 00007ff69aac8000-00007ff9cd2dffff 0x0001/0x0000 0x0000000
13963b30.31a8: *00007ff9cd2e0000-00007ff9cd2e0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\ntdll.dll
13973b30.31a8: 00007ff9cd2e1000-00007ff9cd3f7fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\ntdll.dll
13983b30.31a8: 00007ff9cd3f8000-00007ff9cd43efff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\ntdll.dll
13993b30.31a8: 00007ff9cd43f000-00007ff9cd442fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\ntdll.dll
14003b30.31a8: 00007ff9cd443000-00007ff9cd44afff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\ntdll.dll
14013b30.31a8: 00007ff9cd44b000-00007ff9cd459fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\ntdll.dll
14023b30.31a8: 00007ff9cd45a000-00007ff9cd45afff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\ntdll.dll
14033b30.31a8: 00007ff9cd45b000-00007ff9cd45dfff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\ntdll.dll
14043b30.31a8: 00007ff9cd45e000-00007ff9cd4cffff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume7\Windows\System32\ntdll.dll
14053b30.31a8: 00007ff9cd4d0000-00007ffffffeffff 0x0001/0x0000 0x0000000
14063b30.31a8: supR3HardNtChildPurify: Done after 1068 ms and 1 fixes (loop #1).
14074238.25cc: Log file opened: 6.1.26r145957 g_hStartupLog=000000000000000c g_uNtVerCombined=0xa047bb00
14084238.25cc: supR3HardenedVmProcessInit: uNtDllAddr=00007ff9cd2e0000 g_uNtVerCombined=0xa047bb00 (stack ~00000000010ff5c8)
14094238.25cc: ntdll.dll: timestamp 0xd6055cfe (rc=VINF_SUCCESS)
14104238.25cc: New simple heap: #1 0000000001200000 LB 0x400000 (for 2031616 allocation)
14113b30.31a8: supR3HardenedEarlyCompact: Removed heap 1 (0x00000000e30000 LB 0x400000)
14123b30.31a8: supR3HardNtEnableThreadCreationEx:
14134238.25cc: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox'
14144238.25cc: System32: \Device\HarddiskVolume7\Windows\System32
14154238.25cc: WinSxS: \Device\HarddiskVolume7\Windows\WinSxS
14164238.25cc: KnownDllPath: C:\Windows\System32
14174238.25cc: supR3HardenedVmProcessInit: Opening vboxdrv...
14184238.25cc: supR3HardenedVmProcessInit: Restoring LdrInitializeThunk...
14194238.25cc: supR3HardenedVmProcessInit: Returning to LdrInitializeThunk...
14204238.25cc: Registered Dll notification callback with NTDLL.
14214238.25cc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume7\Windows\System32\kernel32.dll)
14224238.25cc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume7\Windows\System32\kernel32.dll
14234238.25cc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\KERNEL32.DLL (Input=KERNEL32.DLL, rcNtResolve=0xc0150008) *pfFlags=0xffffffff pwszSearchPath=0000000000004001:<flags> [calling]
14244238.25cc: supR3HardenedDllNotificationCallback: load 00007ff9ca480000 LB 0x002a5000 C:\Windows\System32\KERNELBASE.dll [fFlags=0x0]
14254238.25cc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume7\Windows\System32\KernelBase.dll)
14264238.25cc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume7\Windows\System32\KernelBase.dll
14274238.25cc: supR3HardenedDllNotificationCallback: load 00007ff9cc500000 LB 0x000b2000 C:\Windows\System32\KERNEL32.DLL [fFlags=0x0]
14284238.25cc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
14294238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9cc500000 'C:\Windows\System32\KERNEL32.DLL'
14304238.25cc: supR3HardenedDllNotificationCallback: load 00007ff69a9b0000 LB 0x00118000 C:\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe [fFlags=0x0]
14314238.25cc: \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe: Signature #1/2: info status: 24202
14324238.25cc: '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe' has no imports
14334238.25cc: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe)
14344238.25cc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
14354238.25cc: supR3HardenedMonitor_KiUserApcDispatcher_C: pfnRoutine=0000000000df0000 enmState=4 -> supR3HardenedWinDummyApcRoutine
14364238.25cc: supR3HardenedWinDummyApcRoutine: pvArg1=0000000000000000 pvArg2=0000000000000000 pvArg3=0000000000000000
14374238.25cc: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007ff9cd352040 pvNtTerminateThread=00007ff9cd37d8f0
14383b30.31a8: supR3HardNtChildWaitFor: Found expected request 1 (CloseEvents) after 262 ms.
14394238.25cc: \SystemRoot\System32\ntdll.dll:
14404238.25cc: CreationTime: 2021-05-18T03:33:49.382474100Z
14414238.25cc: LastWriteTime: 2021-05-18T03:33:49.420509300Z
14424238.25cc: ChangeTime: 2021-05-18T11:10:36.444488900Z
14434238.25cc: FileAttributes: 0x20
14444238.25cc: Size: 0x1e8068
14454238.25cc: NT Headers: 0xd8
14464238.25cc: Timestamp: 0xd6055cfe
14474238.25cc: Machine: 0x8664 - amd64
14484238.25cc: Timestamp: 0xd6055cfe
14494238.25cc: Image Version: 10.0
14504238.25cc: SizeOfImage: 0x1f0000 (2031616)
14514238.25cc: Resource Dir: 0x17f000 LB 0x6f310
14524238.25cc: [Version info resource found at 0xd8! (ID/Name: 0x1; SubID/SubName: 0x409)]
14534238.25cc: [Raw version resource data: 0x17f0f0 LB 0x380, codepage 0x0 (reserved 0x0)]
14544238.25cc: ProductName: Microsoft® Windows® Operating System
14554238.25cc: ProductVersion: 10.0.18362.1533
14564238.25cc: FileVersion: 10.0.18362.1533 (WinBuild.160101.0800)
14574238.25cc: FileDescription: NT Layer DLL
14584238.25cc: \SystemRoot\System32\kernel32.dll:
14594238.25cc: CreationTime: 2021-04-14T05:23:20.244557900Z
14604238.25cc: LastWriteTime: 2021-04-14T05:23:20.262528100Z
14614238.25cc: ChangeTime: 2021-05-18T03:34:44.587413300Z
14624238.25cc: FileAttributes: 0x20
14634238.25cc: Size: 0xb04a8
14644238.25cc: NT Headers: 0xf8
14654238.25cc: Timestamp: 0x95d197ef
14664238.25cc: Machine: 0x8664 - amd64
14674238.25cc: Timestamp: 0x95d197ef
14684238.25cc: Image Version: 10.0
14694238.25cc: SizeOfImage: 0xb2000 (729088)
14704238.25cc: Resource Dir: 0xb0000 LB 0x520
14714238.25cc: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
14724238.25cc: [Raw version resource data: 0xb00b0 LB 0x3a4, codepage 0x0 (reserved 0x0)]
14734238.25cc: ProductName: Microsoft® Windows® Operating System
14744238.25cc: ProductVersion: 10.0.18362.1500
14754238.25cc: FileVersion: 10.0.18362.1500 (WinBuild.160101.0800)
14764238.25cc: FileDescription: Windows NT BASE API Client DLL
14774238.25cc: \SystemRoot\System32\KernelBase.dll:
14784238.25cc: CreationTime: 2021-04-14T05:23:35.396646700Z
14794238.25cc: LastWriteTime: 2021-04-14T05:23:35.466459500Z
14804238.25cc: ChangeTime: 2021-05-18T03:34:44.914821000Z
14814238.25cc: FileAttributes: 0x20
14824238.25cc: Size: 0x2a5888
14834238.25cc: NT Headers: 0x100
14844238.25cc: Timestamp: 0x5ae7af90
14854238.25cc: Machine: 0x8664 - amd64
14864238.25cc: Timestamp: 0x5ae7af90
14874238.25cc: Image Version: 10.0
14884238.25cc: SizeOfImage: 0x2a5000 (2772992)
14894238.25cc: Resource Dir: 0x27f000 LB 0x548
14904238.25cc: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
14914238.25cc: [Raw version resource data: 0x27f0b0 LB 0x3bc, codepage 0x0 (reserved 0x0)]
14924238.25cc: ProductName: Microsoft® Windows® Operating System
14934238.25cc: ProductVersion: 10.0.18362.1474
14944238.25cc: FileVersion: 10.0.18362.1474 (WinBuild.160101.0800)
14954238.25cc: FileDescription: Windows NT BASE API Client DLL
14964238.25cc: \SystemRoot\System32\apisetschema.dll:
14974238.25cc: CreationTime: 2019-03-19T04:43:54.837151500Z
14984238.25cc: LastWriteTime: 2019-03-19T04:43:54.837151500Z
14994238.25cc: ChangeTime: 2021-05-18T03:34:44.560409000Z
15004238.25cc: FileAttributes: 0x20
15014238.25cc: Size: 0x1d028
15024238.25cc: NT Headers: 0xc8
15034238.25cc: Timestamp: 0xd6ced080
15044238.25cc: Machine: 0x8664 - amd64
15054238.25cc: Timestamp: 0xd6ced080
15064238.25cc: Image Version: 10.0
15074238.25cc: SizeOfImage: 0x1e000 (122880)
15084238.25cc: Resource Dir: 0x1d000 LB 0x408
15094238.25cc: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
15104238.25cc: [Raw version resource data: 0x1d060 LB 0x3a8, codepage 0x0 (reserved 0x0)]
15114238.25cc: ProductName: Microsoft® Windows® Operating System
15124238.25cc: ProductVersion: 10.0.18362.1
15134238.25cc: FileVersion: 10.0.18362.1 (WinBuild.160101.0800)
15144238.25cc: FileDescription: ApiSet Schema DLL
15154238.25cc: NtOpenDirectoryObject failed on \Driver: 0xc0000022
15164238.25cc: supR3HardenedWinFindAdversaries: 0x0
15174238.25cc: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox'
15184238.25cc: Calling main()
15194238.25cc: SUPR3HardenedMain: pszProgName=VirtualBoxVM fFlags=0x2
15204238.25cc: supR3HardenedWinInitAppBin(0x2): '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox'
15214238.25cc: \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe: Signature #1/2: info status: 24202
15224238.25cc: '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe' has no imports
15234238.25cc: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe)
15244238.25cc: SUPR3HardenedMain: Final process, opening VBoxDrv...
15254238.25cc: supR3HardenedEarlyCompact: Removed heap 1 (0x00000001200000 LB 0x400000)
15264238.25cc: supR3HardNtEnableThreadCreationEx:
15274238.25cc: \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\VBoxSupLib.dll: Signature #1/2: info status: 24202
15284238.25cc: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\VBoxSupLib.dll)
15294238.25cc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\VBoxSupLib.dll
15304238.25cc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
15314238.25cc: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\VBoxSupLib.dll [lacks WinVerifyTrust]
15324238.25cc: supR3HardenedDllNotificationCallback: load 00007ff9c3550000 LB 0x00005000 C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL [fFlags=0x0]
15334238.25cc: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\VBoxSupLib.dll [lacks WinVerifyTrust]
15344238.25cc: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\VBoxSupLib.dll [lacks WinVerifyTrust]
15354238.25cc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
15364238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9c3550000 'C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL'
15374238.25cc: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\VBoxSupLib.dll [lacks WinVerifyTrust]
15384238.25cc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
15394238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9c3550000 'C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL'
15404238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9c3550000 'C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL'
15414238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
15424238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msasn1.dll'.
15434238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'crypt32.dll'.
15444238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #28 'rpcrt4.dll'.
15454238.25cc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume7\Windows\System32\wintrust.dll)
15464238.25cc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume7\Windows\System32\wintrust.dll
15474238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
15484238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume7\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
15494238.25cc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume7\Windows\System32\rpcrt4.dll)
15504238.25cc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume7\Windows\System32\rpcrt4.dll
15514238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'crypt32.dll'...
15524238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'crypt32.dll' -> '\Device\HarddiskVolume7\Windows\System32\crypt32.dll' [rcNtRedir=0xc0150008]
15534238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #33 'msasn1.dll'.
15544238.25cc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume7\Windows\System32\crypt32.dll)
15554238.25cc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume7\Windows\System32\crypt32.dll
15564238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msasn1.dll'...
15574238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msasn1.dll' -> '\Device\HarddiskVolume7\Windows\System32\msasn1.dll' [rcNtRedir=0xc0150008]
15584238.25cc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume7\Windows\System32\msasn1.dll)
15594238.25cc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume7\Windows\System32\msasn1.dll
15604238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
15614238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume7\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
15624238.25cc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume7\Windows\System32\msvcrt.dll)
15634238.25cc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume7\Windows\System32\msvcrt.dll
15644238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msasn1.dll'...
15654238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msasn1.dll' -> '\Device\HarddiskVolume7\Windows\System32\msasn1.dll' [rcNtRedir=0xc0150008]
15664238.25cc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\msasn1.dll [lacks WinVerifyTrust]
15674238.25cc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\Wintrust.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
15684238.25cc: supR3HardenedDllNotificationCallback: load 00007ff9cb400000 LB 0x0009e000 C:\Windows\System32\msvcrt.dll [fFlags=0x0]
15694238.25cc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
15704238.25cc: supR3HardenedDllNotificationCallback: load 00007ff9ca1a0000 LB 0x00012000 C:\Windows\System32\MSASN1.dll [fFlags=0x0]
15714238.25cc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\msasn1.dll [lacks WinVerifyTrust]
15724238.25cc: supR3HardenedDllNotificationCallback: load 00007ff9cb260000 LB 0x000fa000 C:\Windows\System32\ucrtbase.dll [fFlags=0x0]
15734238.25cc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume7\Windows\System32\ucrtbase.dll)
15744238.25cc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume7\Windows\System32\ucrtbase.dll
15754238.25cc: supR3HardenedDllNotificationCallback: load 00007ff9cb050000 LB 0x00151000 C:\Windows\System32\CRYPT32.dll [fFlags=0x0]
15764238.25cc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\crypt32.dll [lacks WinVerifyTrust]
15774238.25cc: supR3HardenedDllNotificationCallback: load 00007ff9cc2f0000 LB 0x0011f000 C:\Windows\System32\RPCRT4.dll [fFlags=0x0]
15784238.25cc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
15794238.25cc: supR3HardenedDllNotificationCallback: load 00007ff9ca730000 LB 0x0005c000 C:\Windows\System32\Wintrust.dll [fFlags=0x0]
15804238.25cc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
15814238.25cc: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-synch-l1-2-0) -> 0x0, fPresent=1
15824238.25cc: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-synch-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
15834238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9ca480000 'api-ms-win-core-synch-l1-2-0'
15844238.25cc: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-fibers-l1-1-1) -> 0x0, fPresent=1
15854238.25cc: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-fibers-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
15864238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9ca480000 'api-ms-win-core-fibers-l1-1-1'
15874238.25cc: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-fibers-l1-1-1) -> 0x0, fPresent=1
15884238.25cc: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-fibers-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
15894238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9ca480000 'api-ms-win-core-fibers-l1-1-1'
15904238.25cc: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-synch-l1-2-0) -> 0x0, fPresent=1
15914238.25cc: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-synch-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
15924238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9ca480000 'api-ms-win-core-synch-l1-2-0'
15934238.25cc: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-localization-l1-2-1) -> 0x0, fPresent=1
15944238.25cc: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-l1-2-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
15954238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9ca480000 'api-ms-win-core-localization-l1-2-1'
15964238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9ca730000 'C:\Windows\system32\Wintrust.dll'
15974238.25cc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume7\Windows\System32\bcrypt.dll)
15984238.25cc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume7\Windows\System32\bcrypt.dll
15994238.25cc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\bcrypt.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
16004238.25cc: supR3HardenedDllNotificationCallback: load 00007ff9ca790000 LB 0x00026000 C:\Windows\System32\bcrypt.dll [fFlags=0x0]
16014238.25cc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\bcrypt.dll [lacks WinVerifyTrust]
16024238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9ca790000 'C:\Windows\system32\bcrypt.dll'
16034238.25cc: bcrypt.dll loaded at 00007ff9ca790000, BCryptOpenAlgorithmProvider at 00007ff9ca794c70, preloading providers:
16044238.25cc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume7\Windows\System32\bcryptprimitives.dll)
16054238.25cc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume7\Windows\System32\bcryptprimitives.dll
16064238.25cc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\bcryptprimitives.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
16074238.25cc: supR3HardenedDllNotificationCallback: load 00007ff9ca250000 LB 0x00081000 C:\Windows\System32\bcryptprimitives.dll [fFlags=0x0]
16084238.25cc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\bcryptprimitives.dll [lacks WinVerifyTrust]
16094238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9ca250000 'C:\Windows\system32\bcryptprimitives.dll'
16104238.25cc: BCryptOpenAlgorithmProvider(,'MD2',0,0) -> 0x0 (hAlgo=000000000164fd30)
16114238.25cc: BCryptOpenAlgorithmProvider(,'MD4',0,0) -> 0x0 (hAlgo=0000000001650bb0)
16124238.25cc: BCryptOpenAlgorithmProvider(,'MD5',0,0) -> 0x0 (hAlgo=0000000001650eb0)
16134238.25cc: BCryptOpenAlgorithmProvider(,'SHA1',0,0) -> 0x0 (hAlgo=00000000016511b0)
16144238.25cc: BCryptOpenAlgorithmProvider(,'SHA256',0,0) -> 0x0 (hAlgo=00000000016514b0)
16154238.25cc: BCryptOpenAlgorithmProvider(,'SHA512',0,0) -> 0x0 (hAlgo=00000000016517b0)
16164238.25cc: BCryptOpenAlgorithmProvider(,'RSA',0,0) -> 0x0 (hAlgo=0000000001651ab0)
16174238.25cc: BCryptOpenAlgorithmProvider(,'DSA',0,0) -> 0x0 (hAlgo=0000000001651db0)
16184238.25cc: supR3HardenedDllNotificationCallback: load 00007ff9caf40000 LB 0x00017000 C:\Windows\System32\CRYPTSP.dll [fFlags=0x0]
16194238.25cc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume7\Windows\System32\cryptsp.dll)
16204238.25cc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume7\Windows\System32\cryptsp.dll
16214238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #18 'bcrypt.dll'.
16224238.25cc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume7\Windows\System32\rsaenh.dll)
16234238.25cc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume7\Windows\System32\rsaenh.dll
16244238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcrypt.dll'...
16254238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcrypt.dll' -> '\Device\HarddiskVolume7\Windows\System32\bcrypt.dll' [rcNtRedir=0xc0150008]
16264238.25cc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\bcrypt.dll [lacks WinVerifyTrust]
16274238.25cc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
16284238.25cc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
16294238.25cc: supR3HardenedDllNotificationCallback: load 00007ff9c9550000 LB 0x00033000 C:\Windows\system32\rsaenh.dll [fFlags=0x0]
16304238.25cc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
16314238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9c9550000 'C:\Windows\system32\rsaenh.dll'
16324238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'bcryptprimitives.dll'.
16334238.25cc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume7\Windows\System32\cryptbase.dll)
16344238.25cc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume7\Windows\System32\cryptbase.dll
16354238.25cc: supR3HardenedDllNotificationCallback: load 00007ff9c9ba0000 LB 0x0000c000 C:\Windows\SYSTEM32\CRYPTBASE.dll [fFlags=0x0]
16364238.25cc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\cryptbase.dll [lacks WinVerifyTrust]
16374238.25cc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
16384238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcryptprimitives.dll'...
16394238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcryptprimitives.dll' -> '\Device\HarddiskVolume7\Windows\System32\bcryptprimitives.dll' [rcNtRedir=0xc0150008]
16404238.25cc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\bcryptprimitives.dll [lacks WinVerifyTrust]
16414238.25cc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\kernel32.dll (Input=kernel32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
16424238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9cc500000 'C:\Windows\System32\kernel32.dll'
16434238.25cc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
16444238.25cc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\WINTRUST.DLL (Input=WINTRUST.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
16454238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9ca730000 'C:\Windows\System32\WINTRUST.DLL'
16464238.25cc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\crypt32.dll [lacks WinVerifyTrust]
16474238.25cc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\CRYPT32.dll (rcNtResolve=0xc0150008) *pfFlags=0x2 pwszSearchPath=0000000000000001:<flags> [calling]
16484238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9cb050000 'C:\Windows\System32\CRYPT32.dll'
16494238.25cc: supR3HardenedDllNotificationCallback: load 00007ff9cb4a0000 LB 0x0001d000 C:\Windows\System32\imagehlp.dll [fFlags=0x0]
16504238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #20 'rpcrt4.dll'.
16514238.25cc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume7\Windows\System32\imagehlp.dll)
16524238.25cc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume7\Windows\System32\imagehlp.dll
16534238.25cc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
16544238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
16554238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume7\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
16564238.25cc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
16574238.25cc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
16584238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9c9550000 'C:\Windows\system32\rsaenh.dll'
16594238.25cc: supR3HardenedDllNotificationCallback: load 00007ff9ccc60000 LB 0x00097000 C:\Windows\System32\sechost.dll [fFlags=0x0]
16604238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'rpcrt4.dll'.
16614238.25cc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume7\Windows\System32\sechost.dll)
16624238.25cc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume7\Windows\System32\sechost.dll
16634238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
16644238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'rpcrt4.dll'.
16654238.25cc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume7\Windows\System32\gpapi.dll)
16664238.25cc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume7\Windows\System32\gpapi.dll
16674238.25cc: supR3HardenedDllNotificationCallback: load 00007ff9c8d80000 LB 0x00022000 C:\Windows\SYSTEM32\gpapi.dll [fFlags=0x0]
16684238.25cc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\gpapi.dll [lacks WinVerifyTrust]
16694238.25cc: supR3HardenedDllNotificationCallback: load 00007ff9ca230000 LB 0x0001e000 C:\Windows\System32\profapi.dll [fFlags=0x0]
16704238.25cc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume7\Windows\System32\profapi.dll)
16714238.25cc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume7\Windows\System32\profapi.dll
16724238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
16734238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'crypt32.dll'.
16744238.25cc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume7\Windows\System32\cryptnet.dll)
16754238.25cc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume7\Windows\System32\cryptnet.dll
16764238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'crypt32.dll'...
16774238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'crypt32.dll' -> '\Device\HarddiskVolume7\Windows\System32\crypt32.dll' [rcNtRedir=0xc0150008]
16784238.25cc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\crypt32.dll [lacks WinVerifyTrust]
16794238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
16804238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume7\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
16814238.25cc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
16824238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
16834238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume7\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
16844238.25cc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
16854238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
16864238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume7\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
16874238.25cc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
16884238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
16894238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume7\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
16904238.25cc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
16914238.25cc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\cryptnet.dll (Input=cryptnet.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
16924238.25cc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
16934238.25cc: supR3HardenedDllNotificationCallback: load 00007ff9b9300000 LB 0x0002f000 C:\Windows\System32\cryptnet.dll [fFlags=0x0]
16944238.25cc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
16954238.25cc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
16964238.25cc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x2 pwszSearchPath=0000000000000001:<flags> [calling]
16974238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9b9300000 'C:\Windows\System32\cryptnet.dll'
16984238.25cc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
16994238.25cc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x2 pwszSearchPath=0000000000000001:<flags> [calling]
17004238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9b9300000 'C:\Windows\System32\cryptnet.dll'
17014238.25cc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
17024238.25cc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x2 pwszSearchPath=0000000000000001:<flags> [calling]
17034238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9b9300000 'C:\Windows\System32\cryptnet.dll'
17044238.25cc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
17054238.25cc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x2 pwszSearchPath=0000000000000001:<flags> [calling]
17064238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9b9300000 'C:\Windows\System32\cryptnet.dll'
17074238.25cc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
17084238.25cc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x2 pwszSearchPath=0000000000000001:<flags> [calling]
17094238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9b9300000 'C:\Windows\System32\cryptnet.dll'
17104238.25cc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
17114238.25cc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x2 pwszSearchPath=0000000000000001:<flags> [calling]
17124238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9b9300000 'C:\Windows\System32\cryptnet.dll'
17134238.25cc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
17144238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9b9300000 'C:\Windows\System32\cryptnet.dll'
17154238.25cc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
17164238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9b9300000 'C:\Windows\System32\cryptnet.dll'
17174238.25cc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
17184238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9b9300000 'C:\Windows\System32\cryptnet.dll'
17194238.25cc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
17204238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9b9300000 'C:\Windows\System32\cryptnet.dll'
17214238.25cc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
17224238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9b9300000 'C:\Windows\System32\cryptnet.dll'
17234238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9b9300000 'C:\Windows\System32\cryptnet.dll'
17244238.25cc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
17254238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9b9300000 'C:\Windows\System32\cryptnet.dll'
17264238.25cc: supR3HardenedDllNotificationCallback: load 00007ff9cca50000 LB 0x000a3000 C:\Windows\System32\advapi32.dll [fFlags=0x0]
17274238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
17284238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'sechost.dll'.
17294238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #27 'rpcrt4.dll'.
17304238.25cc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume7\Windows\System32\advapi32.dll)
17314238.25cc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume7\Windows\System32\advapi32.dll
17324238.25cc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
17334238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
17344238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume7\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
17354238.25cc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
17364238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'sechost.dll'...
17374238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'sechost.dll' -> '\Device\HarddiskVolume7\Windows\System32\sechost.dll' [rcNtRedir=0xc0150008]
17384238.25cc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\sechost.dll [lacks WinVerifyTrust]
17394238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
17404238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume7\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
17414238.25cc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
17424238.25cc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
17434238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9c9550000 'C:\Windows\system32\rsaenh.dll'
17444238.25cc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\crypt32.dll [lacks WinVerifyTrust]
17454238.25cc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\crypt32.dll (Input=crypt32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
17464238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9cb050000 'C:\Windows\System32\crypt32.dll'
17474238.25cc: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000000 pwszName=\SystemRoot\System32\ntdll.dll
17484238.25cc: supR3HardNtViCallWinVerifyTrustCatFile: New context 00000000016bc5f0
17494238.25cc: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000016bc5f0
17504238.25cc: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=4044D8621CE16C0178F547933E2F70E42AB36982
17514238.25cc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
17524238.25cc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\rpcrt4.dll (Input=rpcrt4.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
17534238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9cc2f0000 'C:\Windows\System32\rpcrt4.dll'
17544238.25cc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
17554238.25cc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
17564238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9c9550000 'C:\Windows\system32\rsaenh.dll'
17574238.25cc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\crypt32.dll [lacks WinVerifyTrust]
17584238.25cc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\crypt32.dll (Input=crypt32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
17594238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9cb050000 'C:\Windows\System32\crypt32.dll'
17604238.25cc: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.18362.1556.cat'; file='\SystemRoot\System32\ntdll.dll'
17614238.25cc: g_pfnWinVerifyTrust=00007ff9ca731d30
17624238.25cc: supR3HardenedScreenImage/preload: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\crypt32.dll [redoing WinVerifyTrust]
17634238.25cc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
17644238.25cc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
17654238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9c9550000 'C:\Windows\system32\rsaenh.dll'
17664238.25cc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\crypt32.dll [lacks WinVerifyTrust]
17674238.25cc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\crypt32.dll (Input=crypt32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
17684238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9cb050000 'C:\Windows\System32\crypt32.dll'
17694238.25cc: supR3HardenedScreenImage/preload: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume7\Windows\System32\crypt32.dll'
17704238.25cc: supR3HardenedScreenImage/preload: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\wintrust.dll [redoing WinVerifyTrust]
17714238.25cc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
17724238.25cc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
17734238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9c9550000 'C:\Windows\system32\rsaenh.dll'
17744238.25cc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\crypt32.dll
17754238.25cc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\crypt32.dll (Input=crypt32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
17764238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9cb050000 'C:\Windows\System32\crypt32.dll'
17774238.25cc: supR3HardenedScreenImage/preload: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume7\Windows\System32\wintrust.dll'
17784238.25cc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
17794238.25cc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
17804238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9c9550000 'C:\Windows\system32\rsaenh.dll'
17814238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9cb050000 'C:\Windows\System32\crypt32.dll'
17824238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume7\Windows\System32\advapi32.dll'
17834238.25cc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
17844238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9c9550000 'C:\Windows\system32\rsaenh.dll'
17854238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9cb050000 'C:\Windows\System32\crypt32.dll'
17864238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume7\Windows\System32\cryptnet.dll'
17874238.25cc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
17884238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9c9550000 'C:\Windows\system32\rsaenh.dll'
17894238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9cb050000 'C:\Windows\System32\crypt32.dll'
17904238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume7\Windows\System32\profapi.dll'
17914238.25cc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
17924238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9c9550000 'C:\Windows\system32\rsaenh.dll'
17934238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9cb050000 'C:\Windows\System32\crypt32.dll'
17944238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume7\Windows\System32\gpapi.dll'
17954238.25cc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
17964238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9c9550000 'C:\Windows\system32\rsaenh.dll'
17974238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9cb050000 'C:\Windows\System32\crypt32.dll'
17984238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume7\Windows\System32\sechost.dll'
17994238.25cc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
18004238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9c9550000 'C:\Windows\system32\rsaenh.dll'
18014238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9cb050000 'C:\Windows\System32\crypt32.dll'
18024238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume7\Windows\System32\imagehlp.dll'
18034238.25cc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
18044238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9c9550000 'C:\Windows\system32\rsaenh.dll'
18054238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9cb050000 'C:\Windows\System32\crypt32.dll'
18064238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume7\Windows\System32\cryptbase.dll'
18074238.25cc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
18084238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9c9550000 'C:\Windows\system32\rsaenh.dll'
18094238.25cc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\crypt32.dll
18104238.25cc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\crypt32.dll (Input=crypt32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
18114238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9cb050000 'C:\Windows\System32\crypt32.dll'
18124238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume7\Windows\System32\rsaenh.dll'
18134238.25cc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\rsaenh.dll
18144238.25cc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
18154238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9c9550000 'C:\Windows\system32\rsaenh.dll'
18164238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9cb050000 'C:\Windows\System32\crypt32.dll'
18174238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume7\Windows\System32\cryptsp.dll'
18184238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9c9550000 'C:\Windows\system32\rsaenh.dll'
18194238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9cb050000 'C:\Windows\System32\crypt32.dll'
18204238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume7\Windows\System32\bcryptprimitives.dll'
18214238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9c9550000 'C:\Windows\system32\rsaenh.dll'
18224238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9cb050000 'C:\Windows\System32\crypt32.dll'
18234238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume7\Windows\System32\bcrypt.dll'
18244238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9c9550000 'C:\Windows\system32\rsaenh.dll'
18254238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9cb050000 'C:\Windows\System32\crypt32.dll'
18264238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume7\Windows\System32\ucrtbase.dll'
18274238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9c9550000 'C:\Windows\system32\rsaenh.dll'
18284238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9cb050000 'C:\Windows\System32\crypt32.dll'
18294238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume7\Windows\System32\msvcrt.dll'
18304238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9c9550000 'C:\Windows\system32\rsaenh.dll'
18314238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9cb050000 'C:\Windows\System32\crypt32.dll'
18324238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume7\Windows\System32\msasn1.dll'
18334238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9c9550000 'C:\Windows\system32\rsaenh.dll'
18344238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9cb050000 'C:\Windows\System32\crypt32.dll'
18354238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume7\Windows\System32\rpcrt4.dll'
18364238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9c9550000 'C:\Windows\system32\rsaenh.dll'
18374238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 24202) fWinVerifyTrust=1 for '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\VBoxSupLib.dll'
18384238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9c9550000 'C:\Windows\system32\rsaenh.dll'
18394238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 24202) fWinVerifyTrust=1 for '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe'
18404238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9c9550000 'C:\Windows\system32\rsaenh.dll'
18414238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9cb050000 'C:\Windows\System32\crypt32.dll'
18424238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume7\Windows\System32\KernelBase.dll'
18434238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9c9550000 'C:\Windows\system32\rsaenh.dll'
18444238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9cb050000 'C:\Windows\System32\crypt32.dll'
18454238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume7\Windows\System32\kernel32.dll'
18464238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9cb050000 'C:\Windows\system32\crypt32.dll'
18474238.25cc: supR3HardenedWinIsDesiredRootCA: Adding 0x5ad46780fa5df300 DC=com, DC=microsoft, CN=Microsoft Root Certificate Authority
18484238.25cc: supR3HardenedWinIsDesiredRootCA: Adding 0xea5386456178582b C=ZA, ST=Western Cape, L=Durbanville, O=Thawte, OU=Thawte Certification, CN=Thawte Timestamping CA
18494238.25cc: supR3HardenedWinIsDesiredRootCA: Adding 0x3be670c1bd02a900 OU=Copyright (c) 1997 Microsoft Corp., OU=Microsoft Corporation, CN=Microsoft Root Authority
18504238.25cc: supR3HardenedWinIsDesiredRootCA: Adding 0xe991ee72b03db500 C=US, O=Symantec Corporation, CN=Symantec Enterprise Mobile Root for Microsoft
18514238.25cc: supR3HardenedWinIsDesiredRootCA: Adding 0x4d3835aa4180b200 C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Root Certificate Authority 2011
18524238.25cc: supR3HardenedWinIsDesiredRootCA: Adding 0x646e3fe3ba08df00 C=US, O=MSFT, CN=Microsoft Authenticode(tm) Root Authority
18534238.25cc: supR3HardenedWinIsDesiredRootCA: Adding 0xece4e4289e08b900 C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Root Certificate Authority 2010
18544238.25cc: supR3HardenedWinIsDesiredRootCA: Adding 0xf3bb4d7e894b420 C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft ECC TS Root Certificate Authority 2018
18554238.25cc: supR3HardenedWinIsDesiredRootCA: Adding 0x43a9cc371ff5385a O=Microsoft Trust Network, OU=Microsoft Corporation, OU=Microsoft Time Stamping Service Root, OU=Copyright (c) 1997 Microsoft Corp.
18564238.25cc: supR3HardenedWinIsDesiredRootCA: Adding 0x2e2d2c7c68f0202e O=VeriSign Trust Network, OU=VeriSign, Inc., OU=VeriSign Time Stamping Service Root, OU=NO LIABILITY ACCEPTED, (c)97 VeriSign, Inc.
18574238.25cc: supR3HardenedWinIsDesiredRootCA: Adding 0x7a2218db7382ca00 CN=Razer Chroma SDK, OU=Chroma, O=Razer Inc
18584238.25cc: supR3HardenedWinIsDesiredRootCA: Adding 0xcec3d46562b9be8e C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft ECC Product Root Certificate Authority 2018
18594238.25cc: supR3HardenedWinIsDesiredRootCA: Adding 0xca58a05dd401ae00 C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Time Stamp Root Certificate Authority 2014
18604238.25cc: supR3HardenedWinIsDesiredRootCA: Adding 0x2ca429a5c4c6a700 C=IT, L=Milan, O=Actalis S.p.A./03358520967, CN=Actalis Authentication Root CA
18614238.25cc: supR3HardenedWinIsDesiredRootCA: Adding 0x61a3a33f81aace00 C=US, ST=UT, L=Salt Lake City, O=The USERTRUST Network, OU=http://www.usertrust.com, CN=UTN-USERFirst-Object
18624238.25cc: supR3HardenedWinIsDesiredRootCA: Adding 0x6b7bdc34cd37bb00 C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root G2
18634238.25cc: supR3HardenedWinIsDesiredRootCA: Adding 0x57ba5395b561bf00 C=BM, O=QuoVadis Limited, OU=Root Certification Authority, CN=QuoVadis Root Certification Authority
18644238.25cc: supR3HardenedWinIsDesiredRootCA: Adding 0x83085097e9afdf00 O=Digital Signature Trust Co., CN=DST Root CA X3
18654238.25cc: supR3HardenedWinIsDesiredRootCA: Adding 0x780679907625cc00 OU=GlobalSign Root CA - R3, O=GlobalSign, CN=GlobalSign
18664238.25cc: supR3HardenedWinIsDesiredRootCA: Adding 0x3d98ab22bb04a300 C=IE, O=Baltimore, OU=CyberTrust, CN=Baltimore CyberTrust Root
18674238.25cc: supR3HardenedWinIsDesiredRootCA: Adding 0xeae16ef49d40be00 C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services
18684238.25cc: supR3HardenedWinIsDesiredRootCA: Adding 0x1591b8ac8dcabd00 C=CN, O=WoSign CA Limited, CN=Certification Authority of WoSign
18694238.25cc: supR3HardenedWinIsDesiredRootCA: Adding 0xc6fa4243b695b600 C=US, O=Entrust, Inc., OU=www.entrust.net/CPS is incorporated by reference, OU=(c) 2006 Entrust, Inc., CN=Entrust Root Certification Authority
18704238.25cc: supR3HardenedWinIsDesiredRootCA: Adding 0xa3ce8d99e60eda00 C=BE, O=GlobalSign nv-sa, OU=Root CA, CN=GlobalSign Root CA
18714238.25cc: supR3HardenedWinIsDesiredRootCA: Adding 0x560ad29254e89100 C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO RSA Certification Authority
18724238.25cc: supR3HardenedWinIsDesiredRootCA: Adding 0xa671e9fec832b700 C=US, O=Starfield Technologies, Inc., OU=Starfield Class 2 Certification Authority
18734238.25cc: supR3HardenedWinIsDesiredRootCA: Adding 0xa8de7211e13be200 C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root CA
18744238.25cc: supR3HardenedWinIsDesiredRootCA: Adding 0xd45980fbf0a0ac00 C=US, O=thawte, Inc., OU=Certification Services Division, OU=(c) 2006 thawte, Inc. - For authorized use only, CN=thawte Primary Root CA
18754238.25cc: supR3HardenedWinIsDesiredRootCA: Adding 0xc9edb72b684ba00 C=US, O=Entrust, Inc., OU=See www.entrust.net/legal-terms, OU=(c) 2009 Entrust, Inc. - for authorized use only, CN=Entrust Root Certification Authority - G2
18764238.25cc: supR3HardenedWinIsDesiredRootCA: Adding 0xf5cd95e581a4ab00 C=US, O=SecureTrust Corporation, CN=SecureTrust CA
18774238.25cc: supR3HardenedWinIsDesiredRootCA: Adding 0x6f2ebe0e24cfa600 OU=GlobalSign Root CA - R2, O=GlobalSign, CN=GlobalSign
18784238.25cc: supR3HardenedWinIsDesiredRootCA: Adding 0x14018a1bf29e595c C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification Authority
18794238.25cc: supR3HardenedWinIsDesiredRootCA: Adding 0x7c4fd32ec1b1ce00 C=PL, O=Unizeto Sp. z o.o., CN=Certum CA
18804238.25cc: supR3HardenedWinIsDesiredRootCA: Adding 0xd4fbe673e5ccc600 C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert High Assurance EV Root CA
18814238.25cc: supR3HardenedWinIsDesiredRootCA: Adding 0x1b8578514b74ac00 C=US, O=WFA Hotspot 2.0, CN=Hotspot 2.0 Trust Root CA - 03
18824238.25cc: supR3HardenedWinIsDesiredRootCA: Adding 0xb28612a94b4dad00 O=Entrust.net, OU=www.entrust.net/CPS_2048 incorp. by ref. (limits liab.), OU=(c) 1999 Entrust.net Limited, CN=Entrust.net Certification Authority (2048)
18834238.25cc: supR3HardenedWinIsDesiredRootCA: Adding 0x357a29080824af00 C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. - For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority - G5
18844238.25cc: supR3HardenedWinIsDesiredRootCA: Adding 0x59faf1086271bf00 C=US, ST=Arizona, L=Scottsdale, O=GoDaddy.com, Inc., CN=Go Daddy Root Certificate Authority - G2
18854238.25cc: supR3HardenedWinIsDesiredRootCA: Adding 0x466cbc09db88c100 C=IL, O=StartCom Ltd., OU=Secure Digital Certificate Signing, CN=StartCom Certification Authority
18864238.25cc: supR3HardenedWinIsDesiredRootCA: Adding 0xb16dd37ffeb3b300 C=JP, O=SECOM Trust.net, OU=Security Communication RootCA1
18874238.25cc: supR3HardenedWinIsDesiredRootCA: Adding 0x3401b15e3761c700 C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2008 VeriSign, Inc. - For authorized use only, CN=VeriSign Universal Root Certification Authority
18884238.25cc: supR3HardenedWinIsDesiredRootCA: Adding 0xc30e361765128000 C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority
18894238.25cc: supR3HardenedWinIsDesiredRootCA: Adding 0x491857ead79dde00 C=US, O=The Go Daddy Group, Inc., OU=Go Daddy Class 2 Certification Authority
18904238.25cc: supR3HardenedWinIsDesiredRootCA: Adding 0xb9ff821d139e9bf OU=GlobalSign ECC Root CA - R5, O=GlobalSign, CN=GlobalSign
18914238.25cc: supR3HardenedWinIsDesiredRootCA: Adding 0x87fc251e2149d000 C=CN, O=WoSign CA Limited, CN=CA 沃通根证书
18924238.25cc: supR3HardenedWinIsDesiredRootCA: Adding 0xc2ba72a37dfbe300 C=PL, O=Unizeto Technologies S.A., OU=Certum Certification Authority, CN=Certum Trusted Network CA
18934238.25cc: supR3HardenedWinIsDesiredRootCA: Adding 0x8043e4ce150ead00 C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Assured ID Root CA
18944238.25cc: supR3HardenedWinIsDesiredRootCA: Adding 0xf2e6331af7b700 C=SE, O=AddTrust AB, OU=AddTrust External TTP Network, CN=AddTrust External CA Root
18954238.25cc: supR3HardenedWinRetrieveTrustedRootCAs: cAdded=48
18964238.25cc: SUPR3HardenedMain: Load Runtime...
18974238.25cc: \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\VBoxRT.dll: Signature #1/2: info status: 24202
18984238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9c9550000 'C:\Windows\system32\rsaenh.dll'
18994238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
19004238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp100.dll'.
19014238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'rpcrt4.dll'.
19024238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'ws2_32.dll'.
19034238.25cc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\VBoxRT.dll) WinVerifyTrust
19044238.25cc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\VBoxRT.dll
19054238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
19064238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume7\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
19074238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9c9550000 'C:\Windows\system32\rsaenh.dll'
19084238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9cb050000 'C:\Windows\System32\crypt32.dll'
19094238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #26 'rpcrt4.dll'.
19104238.25cc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume7\Windows\System32\ws2_32.dll) WinVerifyTrust
19114238.25cc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume7\Windows\System32\ws2_32.dll
19124238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
19134238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume7\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
19144238.25cc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\rpcrt4.dll
19154238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
19164238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
19174238.25cc: \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcp100.dll: Signature #1/2: info status: 24202
19184238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
19194238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume7\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
19204238.25cc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\rpcrt4.dll
19214238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9c9550000 'C:\Windows\system32\rsaenh.dll'
19224238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
19234238.25cc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcp100.dll) WinVerifyTrust
19244238.25cc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcp100.dll
19254238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
19264238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
19274238.25cc: \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll: Signature #1/2: info status: 24202
19284238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
19294238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
19304238.25cc: \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll: Signature #1/2: info status: 24202
19314238.25cc: Detected WinVerifyTrust recursion: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll'.
19324238.25cc: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll)
19334238.25cc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll
19344238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9c9550000 'C:\Windows\system32\rsaenh.dll'
19354238.25cc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll) WinVerifyTrust
19364238.25cc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000a01:<flags> [calling]
19374238.25cc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\VBoxRT.dll
19384238.25cc: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll [avoiding WinVerifyTrust]
19394238.25cc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcp100.dll
19404238.25cc: supR3HardenedDllNotificationCallback: load 0000000064ef0000 LB 0x000d2000 C:\Program Files\Oracle\VirtualBox\MSVCR100.dll [fFlags=0x0]
19414238.25cc: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll [avoiding WinVerifyTrust]
19424238.25cc: supR3HardenedDllNotificationCallback: load 0000000064e50000 LB 0x00098000 C:\Program Files\Oracle\VirtualBox\MSVCP100.dll [fFlags=0x0]
19434238.25cc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcp100.dll
19444238.25cc: supR3HardenedDllNotificationCallback: load 00007ff9cc410000 LB 0x0006f000 C:\Windows\System32\WS2_32.dll [fFlags=0x0]
19454238.25cc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\ws2_32.dll
19464238.25cc: supR3HardenedDllNotificationCallback: load 00007ff975270000 LB 0x005e0000 C:\Program Files\Oracle\VirtualBox\VBoxRT.dll [fFlags=0x0]
19474238.25cc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\VBoxRT.dll
19484238.25cc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll'.
19494238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
19504238.25cc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\VBoxRT.dll
19514238.25cc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
19524238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff975270000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
19534238.25cc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll'.
19544238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
19554238.25cc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll'.
19564238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
19574238.25cc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\VBoxRT.dll
19584238.25cc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
19594238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff975270000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
19604238.25cc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll'.
19614238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
19624238.25cc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll'.
19634238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
19644238.25cc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\VBoxRT.dll
19654238.25cc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
19664238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff975270000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
19674238.25cc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll'.
19684238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
19694238.25cc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll'.
19704238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
19714238.25cc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\VBoxRT.dll
19724238.25cc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
19734238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff975270000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
19744238.25cc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll'.
19754238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
19764238.25cc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll'.
19774238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
19784238.25cc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\VBoxRT.dll
19794238.25cc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
19804238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff975270000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
19814238.25cc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll'.
19824238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
19834238.25cc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll'.
19844238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
19854238.25cc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\VBoxRT.dll
19864238.25cc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
19874238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff975270000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
19884238.25cc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll'.
19894238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
19904238.25cc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll'.
19914238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
19924238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff975270000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
19934238.25cc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll'.
19944238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
19954238.25cc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll'.
19964238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
19974238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff975270000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
19984238.25cc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll'.
19994238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
20004238.25cc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll'.
20014238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
20024238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff975270000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
20034238.25cc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll'.
20044238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
20054238.25cc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll'.
20064238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
20074238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff975270000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
20084238.25cc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll'.
20094238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
20104238.25cc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll'.
20114238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
20124238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff975270000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
20134238.25cc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll'.
20144238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
20154238.25cc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll'.
20164238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
20174238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff975270000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
20184238.25cc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll'.
20194238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
20204238.25cc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll'.
20214238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
20224238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff975270000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
20234238.25cc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll'.
20244238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
20254238.25cc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll'.
20264238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
20274238.25cc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\VBoxRT.dll
20284238.25cc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
20294238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff975270000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
20304238.25cc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll'.
20314238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
20324238.25cc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll'.
20334238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
20344238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff975270000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
20354238.25cc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll'.
20364238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
20374238.25cc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll'.
20384238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
20394238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff975270000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
20404238.25cc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll'.
20414238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
20424238.25cc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll'.
20434238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
20444238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff975270000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
20454238.25cc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll'.
20464238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
20474238.25cc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll'.
20484238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
20494238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff975270000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
20504238.25cc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll'.
20514238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
20524238.25cc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll'.
20534238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
20544238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff975270000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
20554238.25cc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll'.
20564238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
20574238.25cc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll'.
20584238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
20594238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff975270000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
20604238.25cc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll'.
20614238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
20624238.25cc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll'.
20634238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
20644238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff975270000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
20654238.25cc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll'.
20664238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
20674238.25cc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll'.
20684238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
20694238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff975270000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
20704238.25cc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll'.
20714238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
20724238.25cc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll'.
20734238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
20744238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff975270000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
20754238.25cc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll'.
20764238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
20774238.25cc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll'.
20784238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
20794238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff975270000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
20804238.25cc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll'.
20814238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
20824238.25cc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll'.
20834238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
20844238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff975270000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
20854238.25cc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll'.
20864238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
20874238.25cc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll'.
20884238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
20894238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff975270000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
20904238.25cc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll'.
20914238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
20924238.25cc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll'.
20934238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
20944238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff975270000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
20954238.25cc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll'.
20964238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
20974238.25cc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll'.
20984238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
20994238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff975270000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
21004238.25cc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll'.
21014238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
21024238.25cc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll'.
21034238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
21044238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff975270000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
21054238.25cc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll'.
21064238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
21074238.25cc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll'.
21084238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
21094238.25cc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\VBoxRT.dll
21104238.25cc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
21114238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff975270000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
21124238.25cc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll'.
21134238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
21144238.25cc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll'.
21154238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
21164238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff975270000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
21174238.25cc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll'.
21184238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
21194238.25cc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll'.
21204238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
21214238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff975270000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
21224238.25cc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll'.
21234238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
21244238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff975270000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
21254238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9c9550000 'C:\Windows\system32\rsaenh.dll'
21264238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 24202) fWinVerifyTrust=1 for '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll'
21274238.25cc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\wintrust.dll
21284238.25cc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\Wintrust.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
21294238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9ca730000 'C:\Windows\system32\Wintrust.dll'
21304238.25cc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\rsaenh.dll
21314238.25cc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
21324238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9c9550000 'C:\Windows\system32\rsaenh.dll'
21334238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9cb050000 'C:\Windows\System32\crypt32.dll'
21344238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9c9550000 'C:\Windows\system32\rsaenh.dll'
21354238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9cb050000 'C:\Windows\System32\crypt32.dll'
21364238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9cb050000 'C:\Windows\system32\crypt32.dll'
21374238.25cc: SUPR3HardenedMain: Load TrustedMain...
21384238.25cc: \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll: Signature #1/2: info status: 24202
21394238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9c9550000 'C:\Windows\system32\rsaenh.dll'
21404238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'opengl32.dll'.
21414238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'uicommon.dll'.
21424238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxrt.dll'.
21434238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'msvcp100.dll'.
21444238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'msvcr100.dll'.
21454238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'qt5corevbox.dll'.
21464238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'qt5guivbox.dll'.
21474238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'qt5widgetsvbox.dll'.
21484238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'qt5openglvbox.dll'.
21494238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'user32.dll'.
21504238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'ole32.dll'.
21514238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'oleaut32.dll'.
21524238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #13 'winmm.dll'.
21534238.25cc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll) WinVerifyTrust
21544238.25cc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll
21554238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
21564238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume7\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008]
21574238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9c9550000 'C:\Windows\system32\rsaenh.dll'
21584238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9cb050000 'C:\Windows\System32\crypt32.dll'
21594238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'winmmbase.dll'.
21604238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'msvcrt.dll'.
21614238.25cc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume7\Windows\System32\winmm.dll) WinVerifyTrust
21624238.25cc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume7\Windows\System32\winmm.dll
21634238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
21644238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume7\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
21654238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
21664238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume7\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
21674238.25cc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\msvcrt.dll
21684238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmmbase.dll'...
21694238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmmbase.dll' -> '\Device\HarddiskVolume7\Windows\System32\winmmbase.dll' [rcNtRedir=0xc0150008]
21704238.25cc: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\winmmbase.dll'.
21714238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
21724238.25cc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume7\Windows\System32\winmmbase.dll)
21734238.25cc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume7\Windows\System32\winmmbase.dll
21744238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
21754238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume7\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
21764238.25cc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\msvcrt.dll
21774238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9c9550000 'C:\Windows\system32\rsaenh.dll'
21784238.25cc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\crypt32.dll
21794238.25cc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\crypt32.dll (Input=crypt32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
21804238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9cb050000 'C:\Windows\System32\crypt32.dll'
21814238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcp_win.dll'.
21824238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'combase.dll'.
21834238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #23 'rpcrt4.dll'.
21844238.25cc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume7\Windows\System32\oleaut32.dll) WinVerifyTrust
21854238.25cc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume7\Windows\System32\oleaut32.dll
21864238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
21874238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume7\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
21884238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
21894238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume7\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
21904238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
21914238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume7\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
21924238.25cc: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\combase.dll'.
21934238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'rpcrt4.dll'.
21944238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #47 'bcryptprimitives.dll'.
21954238.25cc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume7\Windows\System32\combase.dll)
21964238.25cc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume7\Windows\System32\combase.dll
21974238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
21984238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume7\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
21994238.25cc: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\msvcp_win.dll'.
22004238.25cc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume7\Windows\System32\msvcp_win.dll)
22014238.25cc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume7\Windows\System32\msvcp_win.dll
22024238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcryptprimitives.dll'...
22034238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcryptprimitives.dll' -> '\Device\HarddiskVolume7\Windows\System32\bcryptprimitives.dll' [rcNtRedir=0xc0150008]
22044238.25cc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\bcryptprimitives.dll
22054238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
22064238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume7\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
22074238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9c9550000 'C:\Windows\system32\rsaenh.dll'
22084238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9cb050000 'C:\Windows\System32\crypt32.dll'
22094238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #22 'rpcrt4.dll'.
22104238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #56 'gdi32.dll'.
22114238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #57 'user32.dll'.
22124238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #58 'combase.dll'.
22134238.25cc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume7\Windows\System32\ole32.dll) WinVerifyTrust
22144238.25cc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume7\Windows\System32\ole32.dll
22154238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
22164238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume7\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
22174238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
22184238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume7\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
22194238.25cc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\combase.dll [lacks WinVerifyTrust]
22204238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
22214238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume7\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
22224238.25cc: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\user32.dll'.
22234238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'win32u.dll'.
22244238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #34 'gdi32.dll'.
22254238.25cc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume7\Windows\System32\user32.dll)
22264238.25cc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume7\Windows\System32\user32.dll
22274238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
22284238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume7\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
22294238.25cc: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\gdi32.dll'.
22304238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'win32u.dll'.
22314238.25cc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume7\Windows\System32\gdi32.dll)
22324238.25cc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume7\Windows\System32\gdi32.dll
22334238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
22344238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume7\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
22354238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
22364238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume7\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
22374238.25cc: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\win32u.dll'.
22384238.25cc: '\Device\HarddiskVolume7\Windows\System32\win32u.dll' has no imports
22394238.25cc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume7\Windows\System32\win32u.dll)
22404238.25cc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume7\Windows\System32\win32u.dll
22414238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
22424238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume7\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
22434238.25cc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
22444238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
22454238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume7\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
22464238.25cc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\win32u.dll [lacks WinVerifyTrust]
22474238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9c9550000 'C:\Windows\system32\rsaenh.dll'
22484238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9cb050000 'C:\Windows\System32\crypt32.dll'
22494238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'win32u.dll'.
22504238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #34 'gdi32.dll'.
22514238.25cc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume7\Windows\System32\user32.dll) WinVerifyTrust
22524238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5openglvbox.dll'...
22534238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5openglvbox.dll' -> '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\qt5openglvbox.dll' [rcNtRedir=0xc0150008]
22544238.25cc: \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll: Signature #1/2: info status: 24202
22554238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
22564238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume7\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
22574238.25cc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
22584238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
22594238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume7\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
22604238.25cc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\win32u.dll [lacks WinVerifyTrust]
22614238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9c9550000 'C:\Windows\system32\rsaenh.dll'
22624238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'qt5widgetsvbox.dll'.
22634238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'qt5guivbox.dll'.
22644238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5corevbox.dll'.
22654238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'msvcr100.dll'.
22664238.25cc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll) WinVerifyTrust
22674238.25cc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll
22684238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5widgetsvbox.dll'...
22694238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll' -> '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\qt5widgetsvbox.dll' [rcNtRedir=0xc0150008]
22704238.25cc: \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll: Signature #1/2: info status: 24202
22714238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
22724238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
22734238.25cc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll
22744238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
22754238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
22764238.25cc: \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll: Signature #1/2: info status: 24202
22774238.25cc: Detected WinVerifyTrust recursion: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll'.
22784238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'.
22794238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'shell32.dll'.
22804238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'ole32.dll'.
22814238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'advapi32.dll'.
22824238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'ws2_32.dll'.
22834238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'mpr.dll'.
22844238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'msvcp100.dll'.
22854238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'msvcr100.dll'.
22864238.25cc: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll)
22874238.25cc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll
22884238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
22894238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
22904238.25cc: \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll: Signature #1/2: info status: 24202
22914238.25cc: Detected WinVerifyTrust recursion: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll'.
22924238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'ole32.dll'.
22934238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'opengl32.dll'.
22944238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'gdi32.dll'.
22954238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
22964238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'qt5corevbox.dll'.
22974238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'msvcp100.dll'.
22984238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msvcr100.dll'.
22994238.25cc: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll)
23004238.25cc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll
23014238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5widgetsvbox.dll'...
23024238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll' -> '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\qt5widgetsvbox.dll' [rcNtRedir=0xc0150008]
23034238.25cc: \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll: Signature #1/2: info status: 24202
23044238.25cc: Detected WinVerifyTrust recursion: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'.
23054238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'gdi32.dll'.
23064238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'.
23074238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5guivbox.dll'.
23084238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'qt5corevbox.dll'.
23094238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'shell32.dll'.
23104238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'msvcp100.dll'.
23114238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msvcr100.dll'.
23124238.25cc: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll)
23134238.25cc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll
23144238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
23154238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
23164238.25cc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll
23174238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
23184238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
23194238.25cc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcp100.dll
23204238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
23214238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume7\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
23224238.25cc: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\shell32.dll'.
23234238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #77 'user32.dll'.
23244238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #79 'gdi32.dll'.
23254238.25cc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume7\Windows\System32\shell32.dll)
23264238.25cc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume7\Windows\System32\shell32.dll
23274238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
23284238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
23294238.25cc: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
23304238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
23314238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
23324238.25cc: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
23334238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
23344238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume7\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
23354238.25cc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\user32.dll [lacks WinVerifyTrust]
23364238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
23374238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume7\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
23384238.25cc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
23394238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
23404238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
23414238.25cc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll
23424238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
23434238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
23444238.25cc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcp100.dll
23454238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
23464238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
23474238.25cc: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
23484238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
23494238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume7\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
23504238.25cc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\user32.dll [lacks WinVerifyTrust]
23514238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
23524238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume7\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
23534238.25cc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
23544238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
23554238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume7\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008]
23564238.25cc: Detected WinVerifyTrust recursion: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume7\Windows\System32\opengl32.dll'.
23574238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
23584238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'advapi32.dll'.
23594238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
23604238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'gdi32.dll'.
23614238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'glu32.dll'.
23624238.25cc: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume7\Windows\System32\opengl32.dll)
23634238.25cc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume7\Windows\System32\opengl32.dll
23644238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
23654238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume7\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
23664238.25cc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\ole32.dll
23674238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
23684238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
23694238.25cc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll
23704238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
23714238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
23724238.25cc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcp100.dll
23734238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mpr.dll'...
23744238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'mpr.dll' -> '\Device\HarddiskVolume7\Windows\System32\mpr.dll' [rcNtRedir=0xc0150008]
23754238.25cc: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\mpr.dll'.
23764238.25cc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume7\Windows\System32\mpr.dll)
23774238.25cc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume7\Windows\System32\mpr.dll
23784238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
23794238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume7\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
23804238.25cc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\ws2_32.dll
23814238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
23824238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume7\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
23834238.25cc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\advapi32.dll
23844238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
23854238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume7\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
23864238.25cc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\ole32.dll
23874238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
23884238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume7\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
23894238.25cc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\shell32.dll [lacks WinVerifyTrust]
23904238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
23914238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume7\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
23924238.25cc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\user32.dll [lacks WinVerifyTrust]
23934238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'glu32.dll'...
23944238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'glu32.dll' -> '\Device\HarddiskVolume7\Windows\System32\glu32.dll' [rcNtRedir=0xc0150008]
23954238.25cc: Detected WinVerifyTrust recursion: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume7\Windows\System32\glu32.dll'.
23964238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
23974238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'user32.dll'.
23984238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'opengl32.dll'.
23994238.25cc: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume7\Windows\System32\glu32.dll)
24004238.25cc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume7\Windows\System32\glu32.dll
24014238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
24024238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume7\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
24034238.25cc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
24044238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
24054238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume7\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
24064238.25cc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\user32.dll [lacks WinVerifyTrust]
24074238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
24084238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume7\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
24094238.25cc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\advapi32.dll
24104238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
24114238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume7\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
24124238.25cc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\msvcrt.dll
24134238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
24144238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume7\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
24154238.25cc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
24164238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
24174238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume7\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
24184238.25cc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\user32.dll [lacks WinVerifyTrust]
24194238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
24204238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume7\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008]
24214238.25cc: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume7\Windows\System32\opengl32.dll [lacks WinVerifyTrust]
24224238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
24234238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume7\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
24244238.25cc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\user32.dll [lacks WinVerifyTrust]
24254238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
24264238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume7\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
24274238.25cc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\msvcrt.dll
24284238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9c9550000 'C:\Windows\system32\rsaenh.dll'
24294238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'gdi32.dll'.
24304238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'.
24314238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5guivbox.dll'.
24324238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'qt5corevbox.dll'.
24334238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'shell32.dll'.
24344238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'msvcp100.dll'.
24354238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msvcr100.dll'.
24364238.25cc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll) WinVerifyTrust
24374238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
24384238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
24394238.25cc: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [redoing WinVerifyTrust]
24404238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
24414238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
24424238.25cc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll
24434238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
24444238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
24454238.25cc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcp100.dll
24464238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
24474238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume7\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
24484238.25cc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\shell32.dll [lacks WinVerifyTrust]
24494238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
24504238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
24514238.25cc: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
24524238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
24534238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
24544238.25cc: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
24554238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
24564238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume7\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
24574238.25cc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\user32.dll [lacks WinVerifyTrust]
24584238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
24594238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume7\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
24604238.25cc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
24614238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9c9550000 'C:\Windows\system32\rsaenh.dll'
24624238.25cc: supR3HardenedScreenImage/Imports: 0 (was 24202) fWinVerifyTrust=1 for '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll'
24634238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
24644238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
24654238.25cc: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [redoing WinVerifyTrust]
24664238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9c9550000 'C:\Windows\system32\rsaenh.dll'
24674238.25cc: supR3HardenedScreenImage/Imports: 0 (was 24202) fWinVerifyTrust=1 for '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll'
24684238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
24694238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
24704238.25cc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll
24714238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
24724238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
24734238.25cc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcp100.dll
24744238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
24754238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
24764238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'uicommon.dll'...
24774238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'uicommon.dll' -> '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\uicommon.dll' [rcNtRedir=0xc0150008]
24784238.25cc: \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\UICommon.dll: Signature #1/2: info status: 24202
24794238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9c9550000 'C:\Windows\system32\rsaenh.dll'
24804238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'vboxrt.dll'.
24814238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcr100.dll'.
24824238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5corevbox.dll'.
24834238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'qt5guivbox.dll'.
24844238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'qt5widgetsvbox.dll'.
24854238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'user32.dll'.
24864238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'advapi32.dll'.
24874238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'ole32.dll'.
24884238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'oleaut32.dll'.
24894238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'rpcrt4.dll'.
24904238.25cc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\UICommon.dll) WinVerifyTrust
24914238.25cc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\UICommon.dll
24924238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
24934238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume7\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008]
24944238.25cc: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume7\Windows\System32\opengl32.dll [redoing WinVerifyTrust]
24954238.25cc: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000550 pwszName=\Device\HarddiskVolume7\Windows\System32\opengl32.dll
24964238.25cc: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000016bc5f0
24974238.25cc: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000016bc5f0
24984238.25cc: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=7752902DD32368EC88BBBCB0096DB01866F3F6C6
24994238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
25004238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume7\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
25014238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
25024238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume7\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
25034238.25cc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\oleaut32.dll
25044238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
25054238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume7\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
25064238.25cc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\ole32.dll
25074238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
25084238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume7\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
25094238.25cc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\advapi32.dll
25104238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
25114238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume7\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
25124238.25cc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\user32.dll [lacks WinVerifyTrust]
25134238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5widgetsvbox.dll'...
25144238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll' -> '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\qt5widgetsvbox.dll' [rcNtRedir=0xc0150008]
25154238.25cc: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [lacks WinVerifyTrust]
25164238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
25174238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
25184238.25cc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll
25194238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
25204238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
25214238.25cc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll
25224238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
25234238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
25244238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
25254238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
25264238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9c9550000 'C:\Windows\system32\rsaenh.dll'
25274238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9cb050000 'C:\Windows\System32\crypt32.dll'
25284238.25cc: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0212~31bf3856ad364e35~amd64~~10.0.18362.1533.cat'; file='\Device\HarddiskVolume7\Windows\System32\opengl32.dll'
25294238.25cc: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
25304238.25cc: supR3HardenedScreenImage/Imports: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume7\Windows\System32\opengl32.dll'
25314238.25cc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000a01:<flags> [calling]
25324238.25cc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll
25334238.25cc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\opengl32.dll
25344238.25cc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\UICommon.dll
25354238.25cc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll
25364238.25cc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll
25374238.25cc: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [avoiding WinVerifyTrust]
25384238.25cc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll
25394238.25cc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\winmm.dll
25404238.25cc: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume7\Windows\System32\glu32.dll [avoiding WinVerifyTrust]
25414238.25cc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\mpr.dll [avoiding WinVerifyTrust]
25424238.25cc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\winmmbase.dll [avoiding WinVerifyTrust]
25434238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcp_win.dll'.
25444238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #22 'win32u.dll'.
25454238.25cc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume7\Windows\System32\DXCore.dll)
25464238.25cc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume7\Windows\System32\DXCore.dll
25474238.25cc: supR3HardenedDllNotificationCallback: load 00007ff9cb360000 LB 0x00021000 C:\Windows\System32\win32u.dll [fFlags=0x0]
25484238.25cc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\win32u.dll [avoiding WinVerifyTrust]
25494238.25cc: supR3HardenedDllNotificationCallback: load 00007ff9caf60000 LB 0x0009e000 C:\Windows\System32\msvcp_win.dll [fFlags=0x0]
25504238.25cc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\msvcp_win.dll [avoiding WinVerifyTrust]
25514238.25cc: supR3HardenedDllNotificationCallback: load 00007ff9ca2e0000 LB 0x00198000 C:\Windows\System32\gdi32full.dll [fFlags=0x0]
25524238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcp_win.dll'.
25534238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #33 'gdi32.dll'.
25544238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #35 'user32.dll'.
25554238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #36 'win32u.dll'.
25564238.25cc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume7\Windows\System32\gdi32full.dll)
25574238.25cc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume7\Windows\System32\gdi32full.dll
25584238.25cc: supR3HardenedDllNotificationCallback: load 00007ff9cb9e0000 LB 0x00026000 C:\Windows\System32\GDI32.dll [fFlags=0x0]
25594238.25cc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\gdi32.dll [avoiding WinVerifyTrust]
25604238.25cc: supR3HardenedDllNotificationCallback: load 00007ff9cc8b0000 LB 0x00194000 C:\Windows\System32\USER32.dll [fFlags=0x0]
25614238.25cc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\user32.dll [avoiding WinVerifyTrust]
25624238.25cc: supR3HardenedDllNotificationCallback: load 00007ff9ccf50000 LB 0x00336000 C:\Windows\System32\combase.dll [fFlags=0x0]
25634238.25cc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\combase.dll [avoiding WinVerifyTrust]
25644238.25cc: supR3HardenedDllNotificationCallback: load 00007ff9cb000000 LB 0x0004a000 C:\Windows\System32\cfgmgr32.dll [fFlags=0x0]
25654238.25cc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume7\Windows\System32\cfgmgr32.dll)
25664238.25cc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume7\Windows\System32\cfgmgr32.dll
25674238.25cc: supR3HardenedDllNotificationCallback: load 00007ff9c8dd0000 LB 0x00020000 C:\Windows\SYSTEM32\dxcore.dll [fFlags=0x0]
25684238.25cc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\DXCore.dll [avoiding WinVerifyTrust]
25694238.25cc: supR3HardenedDllNotificationCallback: load 00007ff996e00000 LB 0x0002c000 C:\Windows\SYSTEM32\GLU32.dll [fFlags=0x0]
25704238.25cc: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume7\Windows\System32\glu32.dll [avoiding WinVerifyTrust]
25714238.25cc: supR3HardenedDllNotificationCallback: load 00007ff991ac0000 LB 0x00156000 C:\Windows\SYSTEM32\OPENGL32.dll [fFlags=0x0]
25724238.25cc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\opengl32.dll
25734238.25cc: supR3HardenedDllNotificationCallback: load 00007ff9ccdd0000 LB 0x000a8000 C:\Windows\System32\shcore.dll [fFlags=0x0]
25744238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
25754238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #36 'rpcrt4.dll'.
25764238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #43 'combase.dll'.
25774238.25cc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume7\Windows\System32\SHCore.dll)
25784238.25cc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume7\Windows\System32\SHCore.dll
25794238.25cc: supR3HardenedDllNotificationCallback: load 00007ff9ca190000 LB 0x00010000 C:\Windows\System32\UMPDC.dll [fFlags=0x0]
25804238.25cc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume7\Windows\System32\umpdc.dll)
25814238.25cc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume7\Windows\System32\umpdc.dll
25824238.25cc: supR3HardenedDllNotificationCallback: load 00007ff9ca1c0000 LB 0x0004a000 C:\Windows\System32\powrprof.dll [fFlags=0x0]
25834238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'rpcrt4.dll'.
25844238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #19 'umpdc.dll'.
25854238.25cc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume7\Windows\System32\powrprof.dll)
25864238.25cc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume7\Windows\System32\powrprof.dll
25874238.25cc: supR3HardenedDllNotificationCallback: load 00007ff9cb390000 LB 0x00052000 C:\Windows\System32\shlwapi.dll [fFlags=0x0]
25884238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcrt.dll'.
25894238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #44 'gdi32.dll'.
25904238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #45 'user32.dll'.
25914238.25cc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume7\Windows\System32\shlwapi.dll)
25924238.25cc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume7\Windows\System32\shlwapi.dll
25934238.25cc: supR3HardenedDllNotificationCallback: load 00007ff9ca210000 LB 0x00011000 C:\Windows\System32\kernel.appcore.dll [fFlags=0x0]
25944238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'msvcrt.dll'.
25954238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'rpcrt4.dll'.
25964238.25cc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume7\Windows\System32\kernel.appcore.dll)
25974238.25cc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume7\Windows\System32\kernel.appcore.dll
25984238.25cc: supR3HardenedDllNotificationCallback: load 00007ff9ca7c0000 LB 0x0077b000 C:\Windows\System32\windows.storage.dll [fFlags=0x0]
25994238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #31 'combase.dll'.
26004238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #32 'msvcp_win.dll'.
26014238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #39 'rpcrt4.dll'.
26024238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #56 'profapi.dll'.
26034238.25cc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume7\Windows\System32\windows.storage.dll)
26044238.25cc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume7\Windows\System32\windows.storage.dll
26054238.25cc: supR3HardenedDllNotificationCallback: load 00007ff9cbb50000 LB 0x006e7000 C:\Windows\System32\SHELL32.dll [fFlags=0x0]
26064238.25cc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\shell32.dll [avoiding WinVerifyTrust]
26074238.25cc: supR3HardenedDllNotificationCallback: load 00007ff9ccb00000 LB 0x00157000 C:\Windows\System32\ole32.dll [fFlags=0x0]
26084238.25cc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\ole32.dll
26094238.25cc: supR3HardenedDllNotificationCallback: load 00007ff9a6ef0000 LB 0x0001b000 C:\Windows\SYSTEM32\MPR.dll [fFlags=0x0]
26104238.25cc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\mpr.dll [avoiding WinVerifyTrust]
26114238.25cc: supR3HardenedDllNotificationCallback: load 0000000063620000 LB 0x00565000 C:\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [fFlags=0x0]
26124238.25cc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll
26134238.25cc: supR3HardenedDllNotificationCallback: load 00007ff97f470000 LB 0x005f7000 C:\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [fFlags=0x0]
26144238.25cc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll
26154238.25cc: supR3HardenedDllNotificationCallback: load 00000000630b0000 LB 0x00561000 C:\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [fFlags=0x0]
26164238.25cc: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [avoiding WinVerifyTrust]
26174238.25cc: supR3HardenedDllNotificationCallback: load 00007ff9cce80000 LB 0x000c5000 C:\Windows\System32\OLEAUT32.dll [fFlags=0x0]
26184238.25cc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\oleaut32.dll
26194238.25cc: supR3HardenedDllNotificationCallback: load 00007ff961090000 LB 0x02316000 C:\Program Files\Oracle\VirtualBox\UICommon.dll [fFlags=0x0]
26204238.25cc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\UICommon.dll
26214238.25cc: supR3HardenedDllNotificationCallback: load 0000000064d60000 LB 0x00054000 C:\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll [fFlags=0x0]
26224238.25cc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll
26234238.25cc: supR3HardenedDllNotificationCallback: load 00007ff9c3cd0000 LB 0x0002d000 C:\Windows\SYSTEM32\WINMMBASE.dll [fFlags=0x0]
26244238.25cc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\winmmbase.dll [avoiding WinVerifyTrust]
26254238.25cc: supR3HardenedDllNotificationCallback: load 00007ff9c4160000 LB 0x00024000 C:\Windows\SYSTEM32\WINMM.dll [fFlags=0x0]
26264238.25cc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\winmm.dll
26274238.25cc: supR3HardenedDllNotificationCallback: load 00007ff950230000 LB 0x001c8000 C:\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll [fFlags=0x0]
26284238.25cc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll
26294238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\windows.storage.dll'.
26304238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\windows.storage.dll' [rescheduled]
26314238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\kernel.appcore.dll'.
26324238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\kernel.appcore.dll' [rescheduled]
26334238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\shlwapi.dll'.
26344238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\shlwapi.dll' [rescheduled]
26354238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\powrprof.dll'.
26364238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\powrprof.dll' [rescheduled]
26374238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\umpdc.dll'.
26384238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\umpdc.dll' [rescheduled]
26394238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\SHCore.dll'.
26404238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\SHCore.dll' [rescheduled]
26414238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\cfgmgr32.dll'.
26424238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\cfgmgr32.dll' [rescheduled]
26434238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\gdi32full.dll'.
26444238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\gdi32full.dll' [rescheduled]
26454238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\DXCore.dll'.
26464238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\DXCore.dll' [rescheduled]
26474238.25cc: Detected loader lock ownership: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume7\Windows\System32\glu32.dll'.
26484238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 22900 (was 22900) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\glu32.dll' [rescheduled]
26494238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\mpr.dll'.
26504238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\mpr.dll' [rescheduled]
26514238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\shell32.dll'.
26524238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\shell32.dll' [rescheduled]
26534238.25cc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'.
26544238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll' [rescheduled]
26554238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\win32u.dll'.
26564238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\win32u.dll' [rescheduled]
26574238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\gdi32.dll'.
26584238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\gdi32.dll' [rescheduled]
26594238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\user32.dll'.
26604238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\user32.dll' [rescheduled]
26614238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\msvcp_win.dll'.
26624238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\msvcp_win.dll' [rescheduled]
26634238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\combase.dll'.
26644238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\combase.dll' [rescheduled]
26654238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\winmmbase.dll'.
26664238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\winmmbase.dll' [rescheduled]
26674238.25cc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\kernel32.dll
26684238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'profapi.dll'...
26694238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'profapi.dll' -> '\Device\HarddiskVolume7\Windows\System32\profapi.dll' [rcNtRedir=0xc0150008]
26704238.25cc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\profapi.dll
26714238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
26724238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume7\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
26734238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
26744238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume7\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
26754238.25cc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\msvcp_win.dll [redoing WinVerifyTrust]
26764238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\msvcp_win.dll'.
26774238.25cc: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume7\Windows\System32\msvcp_win.dll
26784238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
26794238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume7\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
26804238.25cc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\combase.dll [redoing WinVerifyTrust]
26814238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\combase.dll'.
26824238.25cc: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume7\Windows\System32\combase.dll
26834238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
26844238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume7\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
26854238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
26864238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume7\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
26874238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
26884238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume7\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
26894238.25cc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\user32.dll [redoing WinVerifyTrust]
26904238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\user32.dll'.
26914238.25cc: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume7\Windows\System32\user32.dll
26924238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
26934238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume7\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
26944238.25cc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\gdi32.dll [redoing WinVerifyTrust]
26954238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\gdi32.dll'.
26964238.25cc: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume7\Windows\System32\gdi32.dll
26974238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
26984238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume7\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
26994238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'umpdc.dll'...
27004238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'umpdc.dll' -> '\Device\HarddiskVolume7\Windows\System32\umpdc.dll' [rcNtRedir=0xc0150008]
27014238.25cc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\umpdc.dll [redoing WinVerifyTrust]
27024238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\umpdc.dll'.
27034238.25cc: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume7\Windows\System32\umpdc.dll
27044238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
27054238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume7\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
27064238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
27074238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume7\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
27084238.25cc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\combase.dll [redoing WinVerifyTrust]
27094238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\combase.dll'.
27104238.25cc: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume7\Windows\System32\combase.dll
27114238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
27124238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume7\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
27134238.25cc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\rpcrt4.dll
27144238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
27154238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume7\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
27164238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
27174238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume7\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
27184238.25cc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\win32u.dll [redoing WinVerifyTrust]
27194238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\win32u.dll'.
27204238.25cc: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume7\Windows\System32\win32u.dll
27214238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
27224238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume7\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
27234238.25cc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\user32.dll [redoing WinVerifyTrust]
27244238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\user32.dll'.
27254238.25cc: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume7\Windows\System32\user32.dll
27264238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
27274238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume7\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
27284238.25cc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\gdi32.dll [redoing WinVerifyTrust]
27294238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\gdi32.dll'.
27304238.25cc: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume7\Windows\System32\gdi32.dll
27314238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
27324238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume7\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
27334238.25cc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\msvcp_win.dll [redoing WinVerifyTrust]
27344238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\msvcp_win.dll'.
27354238.25cc: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume7\Windows\System32\msvcp_win.dll
27364238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
27374238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume7\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
27384238.25cc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\win32u.dll [redoing WinVerifyTrust]
27394238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\win32u.dll'.
27404238.25cc: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume7\Windows\System32\win32u.dll
27414238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
27424238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume7\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
27434238.25cc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\msvcp_win.dll [redoing WinVerifyTrust]
27444238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\msvcp_win.dll'.
27454238.25cc: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume7\Windows\System32\msvcp_win.dll
27464238.25cc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\kernel32.dll (Input=kernel32, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
27474238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9cc500000 'C:\Windows\System32\kernel32.dll'
27484238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\windows.storage.dll'.
27494238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\windows.storage.dll' [rescheduled]
27504238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\kernel.appcore.dll'.
27514238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\kernel.appcore.dll' [rescheduled]
27524238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\shlwapi.dll'.
27534238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\shlwapi.dll' [rescheduled]
27544238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\powrprof.dll'.
27554238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\powrprof.dll' [rescheduled]
27564238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\umpdc.dll'.
27574238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\umpdc.dll' [rescheduled]
27584238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\SHCore.dll'.
27594238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\SHCore.dll' [rescheduled]
27604238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\cfgmgr32.dll'.
27614238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\cfgmgr32.dll' [rescheduled]
27624238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\gdi32full.dll'.
27634238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\gdi32full.dll' [rescheduled]
27644238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\DXCore.dll'.
27654238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\DXCore.dll' [rescheduled]
27664238.25cc: Detected loader lock ownership: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume7\Windows\System32\glu32.dll'.
27674238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 22900 (was 22900) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\glu32.dll' [rescheduled]
27684238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\mpr.dll'.
27694238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\mpr.dll' [rescheduled]
27704238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\shell32.dll'.
27714238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\shell32.dll' [rescheduled]
27724238.25cc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'.
27734238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll' [rescheduled]
27744238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\win32u.dll'.
27754238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\win32u.dll' [rescheduled]
27764238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\gdi32.dll'.
27774238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\gdi32.dll' [rescheduled]
27784238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\user32.dll'.
27794238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\user32.dll' [rescheduled]
27804238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\msvcp_win.dll'.
27814238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\msvcp_win.dll' [rescheduled]
27824238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\combase.dll'.
27834238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\combase.dll' [rescheduled]
27844238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\winmmbase.dll'.
27854238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\winmmbase.dll' [rescheduled]
27864238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\windows.storage.dll'.
27874238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\windows.storage.dll' [rescheduled]
27884238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\kernel.appcore.dll'.
27894238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\kernel.appcore.dll' [rescheduled]
27904238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\shlwapi.dll'.
27914238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\shlwapi.dll' [rescheduled]
27924238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\powrprof.dll'.
27934238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\powrprof.dll' [rescheduled]
27944238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\umpdc.dll'.
27954238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\umpdc.dll' [rescheduled]
27964238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\SHCore.dll'.
27974238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\SHCore.dll' [rescheduled]
27984238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\cfgmgr32.dll'.
27994238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\cfgmgr32.dll' [rescheduled]
28004238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\gdi32full.dll'.
28014238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\gdi32full.dll' [rescheduled]
28024238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\DXCore.dll'.
28034238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\DXCore.dll' [rescheduled]
28044238.25cc: Detected loader lock ownership: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume7\Windows\System32\glu32.dll'.
28054238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 22900 (was 22900) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\glu32.dll' [rescheduled]
28064238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\mpr.dll'.
28074238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\mpr.dll' [rescheduled]
28084238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\shell32.dll'.
28094238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\shell32.dll' [rescheduled]
28104238.25cc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'.
28114238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll' [rescheduled]
28124238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\win32u.dll'.
28134238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\win32u.dll' [rescheduled]
28144238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\gdi32.dll'.
28154238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\gdi32.dll' [rescheduled]
28164238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\user32.dll'.
28174238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\user32.dll' [rescheduled]
28184238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\msvcp_win.dll'.
28194238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\msvcp_win.dll' [rescheduled]
28204238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\combase.dll'.
28214238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\combase.dll' [rescheduled]
28224238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\winmmbase.dll'.
28234238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\winmmbase.dll' [rescheduled]
28244238.25cc: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-string-l1-1-0) -> 0x0, fPresent=1
28254238.25cc: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-string-l1-1-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
28264238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9ca480000 'api-ms-win-core-string-l1-1-0'
28274238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\windows.storage.dll'.
28284238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\windows.storage.dll' [rescheduled]
28294238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\kernel.appcore.dll'.
28304238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\kernel.appcore.dll' [rescheduled]
28314238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\shlwapi.dll'.
28324238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\shlwapi.dll' [rescheduled]
28334238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\powrprof.dll'.
28344238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\powrprof.dll' [rescheduled]
28354238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\umpdc.dll'.
28364238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\umpdc.dll' [rescheduled]
28374238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\SHCore.dll'.
28384238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\SHCore.dll' [rescheduled]
28394238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\cfgmgr32.dll'.
28404238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\cfgmgr32.dll' [rescheduled]
28414238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\gdi32full.dll'.
28424238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\gdi32full.dll' [rescheduled]
28434238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\DXCore.dll'.
28444238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\DXCore.dll' [rescheduled]
28454238.25cc: Detected loader lock ownership: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume7\Windows\System32\glu32.dll'.
28464238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 22900 (was 22900) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\glu32.dll' [rescheduled]
28474238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\mpr.dll'.
28484238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\mpr.dll' [rescheduled]
28494238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\shell32.dll'.
28504238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\shell32.dll' [rescheduled]
28514238.25cc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'.
28524238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll' [rescheduled]
28534238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\win32u.dll'.
28544238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\win32u.dll' [rescheduled]
28554238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\gdi32.dll'.
28564238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\gdi32.dll' [rescheduled]
28574238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\user32.dll'.
28584238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\user32.dll' [rescheduled]
28594238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\msvcp_win.dll'.
28604238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\msvcp_win.dll' [rescheduled]
28614238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\combase.dll'.
28624238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\combase.dll' [rescheduled]
28634238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\winmmbase.dll'.
28644238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\winmmbase.dll' [rescheduled]
28654238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\windows.storage.dll'.
28664238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\windows.storage.dll' [rescheduled]
28674238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\kernel.appcore.dll'.
28684238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\kernel.appcore.dll' [rescheduled]
28694238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\shlwapi.dll'.
28704238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\shlwapi.dll' [rescheduled]
28714238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\powrprof.dll'.
28724238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\powrprof.dll' [rescheduled]
28734238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\umpdc.dll'.
28744238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\umpdc.dll' [rescheduled]
28754238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\SHCore.dll'.
28764238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\SHCore.dll' [rescheduled]
28774238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\cfgmgr32.dll'.
28784238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\cfgmgr32.dll' [rescheduled]
28794238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\gdi32full.dll'.
28804238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\gdi32full.dll' [rescheduled]
28814238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\DXCore.dll'.
28824238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\DXCore.dll' [rescheduled]
28834238.25cc: Detected loader lock ownership: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume7\Windows\System32\glu32.dll'.
28844238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 22900 (was 22900) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\glu32.dll' [rescheduled]
28854238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\mpr.dll'.
28864238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\mpr.dll' [rescheduled]
28874238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\shell32.dll'.
28884238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\shell32.dll' [rescheduled]
28894238.25cc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'.
28904238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll' [rescheduled]
28914238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\win32u.dll'.
28924238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\win32u.dll' [rescheduled]
28934238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\gdi32.dll'.
28944238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\gdi32.dll' [rescheduled]
28954238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\user32.dll'.
28964238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\user32.dll' [rescheduled]
28974238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\msvcp_win.dll'.
28984238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\msvcp_win.dll' [rescheduled]
28994238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\combase.dll'.
29004238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\combase.dll' [rescheduled]
29014238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\winmmbase.dll'.
29024238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\winmmbase.dll' [rescheduled]
29034238.25cc: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-datetime-l1-1-1) -> 0x0, fPresent=1
29044238.25cc: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-datetime-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
29054238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9ca480000 'api-ms-win-core-datetime-l1-1-1'
29064238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\windows.storage.dll'.
29074238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\windows.storage.dll' [rescheduled]
29084238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\kernel.appcore.dll'.
29094238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\kernel.appcore.dll' [rescheduled]
29104238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\shlwapi.dll'.
29114238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\shlwapi.dll' [rescheduled]
29124238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\powrprof.dll'.
29134238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\powrprof.dll' [rescheduled]
29144238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\umpdc.dll'.
29154238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\umpdc.dll' [rescheduled]
29164238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\SHCore.dll'.
29174238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\SHCore.dll' [rescheduled]
29184238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\cfgmgr32.dll'.
29194238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\cfgmgr32.dll' [rescheduled]
29204238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\gdi32full.dll'.
29214238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\gdi32full.dll' [rescheduled]
29224238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\DXCore.dll'.
29234238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\DXCore.dll' [rescheduled]
29244238.25cc: Detected loader lock ownership: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume7\Windows\System32\glu32.dll'.
29254238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 22900 (was 22900) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\glu32.dll' [rescheduled]
29264238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\mpr.dll'.
29274238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\mpr.dll' [rescheduled]
29284238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\shell32.dll'.
29294238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\shell32.dll' [rescheduled]
29304238.25cc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'.
29314238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll' [rescheduled]
29324238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\win32u.dll'.
29334238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\win32u.dll' [rescheduled]
29344238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\gdi32.dll'.
29354238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\gdi32.dll' [rescheduled]
29364238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\user32.dll'.
29374238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\user32.dll' [rescheduled]
29384238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\msvcp_win.dll'.
29394238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\msvcp_win.dll' [rescheduled]
29404238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\combase.dll'.
29414238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\combase.dll' [rescheduled]
29424238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\winmmbase.dll'.
29434238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\winmmbase.dll' [rescheduled]
29444238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\windows.storage.dll'.
29454238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\windows.storage.dll' [rescheduled]
29464238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\kernel.appcore.dll'.
29474238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\kernel.appcore.dll' [rescheduled]
29484238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\shlwapi.dll'.
29494238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\shlwapi.dll' [rescheduled]
29504238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\powrprof.dll'.
29514238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\powrprof.dll' [rescheduled]
29524238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\umpdc.dll'.
29534238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\umpdc.dll' [rescheduled]
29544238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\SHCore.dll'.
29554238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\SHCore.dll' [rescheduled]
29564238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\cfgmgr32.dll'.
29574238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\cfgmgr32.dll' [rescheduled]
29584238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\gdi32full.dll'.
29594238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\gdi32full.dll' [rescheduled]
29604238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\DXCore.dll'.
29614238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\DXCore.dll' [rescheduled]
29624238.25cc: Detected loader lock ownership: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume7\Windows\System32\glu32.dll'.
29634238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 22900 (was 22900) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\glu32.dll' [rescheduled]
29644238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\mpr.dll'.
29654238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\mpr.dll' [rescheduled]
29664238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\shell32.dll'.
29674238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\shell32.dll' [rescheduled]
29684238.25cc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'.
29694238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll' [rescheduled]
29704238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\win32u.dll'.
29714238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\win32u.dll' [rescheduled]
29724238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\gdi32.dll'.
29734238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\gdi32.dll' [rescheduled]
29744238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\user32.dll'.
29754238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\user32.dll' [rescheduled]
29764238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\msvcp_win.dll'.
29774238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\msvcp_win.dll' [rescheduled]
29784238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\combase.dll'.
29794238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\combase.dll' [rescheduled]
29804238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\winmmbase.dll'.
29814238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\winmmbase.dll' [rescheduled]
29824238.25cc: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-localization-obsolete-l1-2-0) -> 0x0, fPresent=1
29834238.25cc: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-obsolete-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
29844238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9ca480000 'api-ms-win-core-localization-obsolete-l1-2-0'
29854238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\windows.storage.dll'.
29864238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\windows.storage.dll' [rescheduled]
29874238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\kernel.appcore.dll'.
29884238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\kernel.appcore.dll' [rescheduled]
29894238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\shlwapi.dll'.
29904238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\shlwapi.dll' [rescheduled]
29914238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\powrprof.dll'.
29924238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\powrprof.dll' [rescheduled]
29934238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\umpdc.dll'.
29944238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\umpdc.dll' [rescheduled]
29954238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\SHCore.dll'.
29964238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\SHCore.dll' [rescheduled]
29974238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\cfgmgr32.dll'.
29984238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\cfgmgr32.dll' [rescheduled]
29994238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\gdi32full.dll'.
30004238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\gdi32full.dll' [rescheduled]
30014238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\DXCore.dll'.
30024238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\DXCore.dll' [rescheduled]
30034238.25cc: Detected loader lock ownership: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume7\Windows\System32\glu32.dll'.
30044238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 22900 (was 22900) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\glu32.dll' [rescheduled]
30054238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\mpr.dll'.
30064238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\mpr.dll' [rescheduled]
30074238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\shell32.dll'.
30084238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\shell32.dll' [rescheduled]
30094238.25cc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'.
30104238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll' [rescheduled]
30114238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\win32u.dll'.
30124238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\win32u.dll' [rescheduled]
30134238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\gdi32.dll'.
30144238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\gdi32.dll' [rescheduled]
30154238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\user32.dll'.
30164238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\user32.dll' [rescheduled]
30174238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\msvcp_win.dll'.
30184238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\msvcp_win.dll' [rescheduled]
30194238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\combase.dll'.
30204238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\combase.dll' [rescheduled]
30214238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\winmmbase.dll'.
30224238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\winmmbase.dll' [rescheduled]
30234238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\windows.storage.dll'.
30244238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\windows.storage.dll' [rescheduled]
30254238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\kernel.appcore.dll'.
30264238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\kernel.appcore.dll' [rescheduled]
30274238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\shlwapi.dll'.
30284238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\shlwapi.dll' [rescheduled]
30294238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\powrprof.dll'.
30304238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\powrprof.dll' [rescheduled]
30314238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\umpdc.dll'.
30324238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\umpdc.dll' [rescheduled]
30334238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\SHCore.dll'.
30344238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\SHCore.dll' [rescheduled]
30354238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\cfgmgr32.dll'.
30364238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\cfgmgr32.dll' [rescheduled]
30374238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\gdi32full.dll'.
30384238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\gdi32full.dll' [rescheduled]
30394238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\DXCore.dll'.
30404238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\DXCore.dll' [rescheduled]
30414238.25cc: Detected loader lock ownership: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume7\Windows\System32\glu32.dll'.
30424238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 22900 (was 22900) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\glu32.dll' [rescheduled]
30434238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\mpr.dll'.
30444238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\mpr.dll' [rescheduled]
30454238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\shell32.dll'.
30464238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\shell32.dll' [rescheduled]
30474238.25cc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'.
30484238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll' [rescheduled]
30494238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\win32u.dll'.
30504238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\win32u.dll' [rescheduled]
30514238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\gdi32.dll'.
30524238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\gdi32.dll' [rescheduled]
30534238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\user32.dll'.
30544238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\user32.dll' [rescheduled]
30554238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\msvcp_win.dll'.
30564238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\msvcp_win.dll' [rescheduled]
30574238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\combase.dll'.
30584238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\combase.dll' [rescheduled]
30594238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\winmmbase.dll'.
30604238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\winmmbase.dll' [rescheduled]
30614238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\imm32.dll'.
30624238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'user32.dll'.
30634238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #25 'win32u.dll'.
30644238.25cc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume7\Windows\System32\imm32.dll)
30654238.25cc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume7\Windows\System32\imm32.dll
30664238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
30674238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume7\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
30684238.25cc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\win32u.dll [redoing WinVerifyTrust]
30694238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\win32u.dll'.
30704238.25cc: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume7\Windows\System32\win32u.dll
30714238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
30724238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume7\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
30734238.25cc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\user32.dll [redoing WinVerifyTrust]
30744238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\user32.dll'.
30754238.25cc: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume7\Windows\System32\user32.dll
30764238.25cc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\IMM32.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
30774238.25cc: supR3HardenedDllNotificationCallback: load 00007ff9cb540000 LB 0x0002e000 C:\Windows\System32\IMM32.DLL [fFlags=0x0]
30784238.25cc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\imm32.dll [avoiding WinVerifyTrust]
30794238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9cb540000 'C:\Windows\system32\IMM32.DLL'
30804238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\imm32.dll'.
30814238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\imm32.dll' [rescheduled]
30824238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\windows.storage.dll'.
30834238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\windows.storage.dll' [rescheduled]
30844238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\kernel.appcore.dll'.
30854238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\kernel.appcore.dll' [rescheduled]
30864238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\shlwapi.dll'.
30874238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\shlwapi.dll' [rescheduled]
30884238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\powrprof.dll'.
30894238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\powrprof.dll' [rescheduled]
30904238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\umpdc.dll'.
30914238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\umpdc.dll' [rescheduled]
30924238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\SHCore.dll'.
30934238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\SHCore.dll' [rescheduled]
30944238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\cfgmgr32.dll'.
30954238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\cfgmgr32.dll' [rescheduled]
30964238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\gdi32full.dll'.
30974238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\gdi32full.dll' [rescheduled]
30984238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\DXCore.dll'.
30994238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\DXCore.dll' [rescheduled]
31004238.25cc: Detected loader lock ownership: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume7\Windows\System32\glu32.dll'.
31014238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 22900 (was 22900) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\glu32.dll' [rescheduled]
31024238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\mpr.dll'.
31034238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\mpr.dll' [rescheduled]
31044238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\shell32.dll'.
31054238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\shell32.dll' [rescheduled]
31064238.25cc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'.
31074238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll' [rescheduled]
31084238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\win32u.dll'.
31094238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\win32u.dll' [rescheduled]
31104238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\gdi32.dll'.
31114238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\gdi32.dll' [rescheduled]
31124238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\user32.dll'.
31134238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\user32.dll' [rescheduled]
31144238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\msvcp_win.dll'.
31154238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\msvcp_win.dll' [rescheduled]
31164238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\combase.dll'.
31174238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\combase.dll' [rescheduled]
31184238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\winmmbase.dll'.
31194238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\winmmbase.dll' [rescheduled]
31204238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\imm32.dll'.
31214238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\imm32.dll' [rescheduled]
31224238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\windows.storage.dll'.
31234238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\windows.storage.dll' [rescheduled]
31244238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\kernel.appcore.dll'.
31254238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\kernel.appcore.dll' [rescheduled]
31264238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\shlwapi.dll'.
31274238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\shlwapi.dll' [rescheduled]
31284238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\powrprof.dll'.
31294238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\powrprof.dll' [rescheduled]
31304238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\umpdc.dll'.
31314238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\umpdc.dll' [rescheduled]
31324238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\SHCore.dll'.
31334238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\SHCore.dll' [rescheduled]
31344238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\cfgmgr32.dll'.
31354238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\cfgmgr32.dll' [rescheduled]
31364238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\gdi32full.dll'.
31374238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\gdi32full.dll' [rescheduled]
31384238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\DXCore.dll'.
31394238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\DXCore.dll' [rescheduled]
31404238.25cc: Detected loader lock ownership: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume7\Windows\System32\glu32.dll'.
31414238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 22900 (was 22900) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\glu32.dll' [rescheduled]
31424238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\mpr.dll'.
31434238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\mpr.dll' [rescheduled]
31444238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\shell32.dll'.
31454238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\shell32.dll' [rescheduled]
31464238.25cc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'.
31474238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll' [rescheduled]
31484238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\win32u.dll'.
31494238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\win32u.dll' [rescheduled]
31504238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\gdi32.dll'.
31514238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\gdi32.dll' [rescheduled]
31524238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\user32.dll'.
31534238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\user32.dll' [rescheduled]
31544238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\msvcp_win.dll'.
31554238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\msvcp_win.dll' [rescheduled]
31564238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\combase.dll'.
31574238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\combase.dll' [rescheduled]
31584238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\winmmbase.dll'.
31594238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\winmmbase.dll' [rescheduled]
31604238.25cc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\advapi32.dll
31614238.25cc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\ADVAPI32.DLL (Input=ADVAPI32.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
31624238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9cca50000 'C:\Windows\System32\ADVAPI32.DLL'
31634238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\imm32.dll'.
31644238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\imm32.dll' [rescheduled]
31654238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\windows.storage.dll'.
31664238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\windows.storage.dll' [rescheduled]
31674238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\kernel.appcore.dll'.
31684238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\kernel.appcore.dll' [rescheduled]
31694238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\shlwapi.dll'.
31704238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\shlwapi.dll' [rescheduled]
31714238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\powrprof.dll'.
31724238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\powrprof.dll' [rescheduled]
31734238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\umpdc.dll'.
31744238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\umpdc.dll' [rescheduled]
31754238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\SHCore.dll'.
31764238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\SHCore.dll' [rescheduled]
31774238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\cfgmgr32.dll'.
31784238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\cfgmgr32.dll' [rescheduled]
31794238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\gdi32full.dll'.
31804238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\gdi32full.dll' [rescheduled]
31814238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\DXCore.dll'.
31824238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\DXCore.dll' [rescheduled]
31834238.25cc: Detected loader lock ownership: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume7\Windows\System32\glu32.dll'.
31844238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 22900 (was 22900) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\glu32.dll' [rescheduled]
31854238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\mpr.dll'.
31864238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\mpr.dll' [rescheduled]
31874238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\shell32.dll'.
31884238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\shell32.dll' [rescheduled]
31894238.25cc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'.
31904238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll' [rescheduled]
31914238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\win32u.dll'.
31924238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\win32u.dll' [rescheduled]
31934238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\gdi32.dll'.
31944238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\gdi32.dll' [rescheduled]
31954238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\user32.dll'.
31964238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\user32.dll' [rescheduled]
31974238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\msvcp_win.dll'.
31984238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\msvcp_win.dll' [rescheduled]
31994238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\combase.dll'.
32004238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\combase.dll' [rescheduled]
32014238.25cc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume7\Windows\System32\winmmbase.dll'.
32024238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume7\Windows\System32\winmmbase.dll' [rescheduled]
32034238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff950230000 'C:\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll'
32044238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9c9550000 'C:\Windows\system32\rsaenh.dll'
32054238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9cb050000 'C:\Windows\System32\crypt32.dll'
32064238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume7\Windows\System32\imm32.dll'
32074238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9c9550000 'C:\Windows\system32\rsaenh.dll'
32084238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9cb050000 'C:\Windows\System32\crypt32.dll'
32094238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume7\Windows\System32\windows.storage.dll'
32104238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9c9550000 'C:\Windows\system32\rsaenh.dll'
32114238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9cb050000 'C:\Windows\System32\crypt32.dll'
32124238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume7\Windows\System32\kernel.appcore.dll'
32134238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9c9550000 'C:\Windows\system32\rsaenh.dll'
32144238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9cb050000 'C:\Windows\System32\crypt32.dll'
32154238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume7\Windows\System32\shlwapi.dll'
32164238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9c9550000 'C:\Windows\system32\rsaenh.dll'
32174238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9cb050000 'C:\Windows\System32\crypt32.dll'
32184238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume7\Windows\System32\powrprof.dll'
32194238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9c9550000 'C:\Windows\system32\rsaenh.dll'
32204238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9cb050000 'C:\Windows\System32\crypt32.dll'
32214238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume7\Windows\System32\umpdc.dll'
32224238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9c9550000 'C:\Windows\system32\rsaenh.dll'
32234238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9cb050000 'C:\Windows\System32\crypt32.dll'
32244238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume7\Windows\System32\SHCore.dll'
32254238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9c9550000 'C:\Windows\system32\rsaenh.dll'
32264238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9cb050000 'C:\Windows\System32\crypt32.dll'
32274238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume7\Windows\System32\cfgmgr32.dll'
32284238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9c9550000 'C:\Windows\system32\rsaenh.dll'
32294238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9cb050000 'C:\Windows\System32\crypt32.dll'
32304238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume7\Windows\System32\gdi32full.dll'
32314238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9c9550000 'C:\Windows\system32\rsaenh.dll'
32324238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9cb050000 'C:\Windows\System32\crypt32.dll'
32334238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume7\Windows\System32\DXCore.dll'
32344238.25cc: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000554 pwszName=\Device\HarddiskVolume7\Windows\System32\glu32.dll
32354238.25cc: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000016bc5f0
32364238.25cc: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000016bc5f0
32374238.25cc: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=F356C86D0A2DBA0570D09B39D4AF818DFCB17010
32384238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9c9550000 'C:\Windows\system32\rsaenh.dll'
32394238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9cb050000 'C:\Windows\System32\crypt32.dll'
32404238.25cc: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0212~31bf3856ad364e35~amd64~~10.0.18362.1533.cat'; file='\Device\HarddiskVolume7\Windows\System32\glu32.dll'
32414238.25cc: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
32424238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume7\Windows\System32\glu32.dll'
32434238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9c9550000 'C:\Windows\system32\rsaenh.dll'
32444238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9cb050000 'C:\Windows\System32\crypt32.dll'
32454238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume7\Windows\System32\mpr.dll'
32464238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9c9550000 'C:\Windows\system32\rsaenh.dll'
32474238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9cb050000 'C:\Windows\System32\crypt32.dll'
32484238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume7\Windows\System32\shell32.dll'
32494238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9c9550000 'C:\Windows\system32\rsaenh.dll'
32504238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 24202) fWinVerifyTrust=1 for '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'
32514238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9c9550000 'C:\Windows\system32\rsaenh.dll'
32524238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9cb050000 'C:\Windows\System32\crypt32.dll'
32534238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume7\Windows\System32\win32u.dll'
32544238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9c9550000 'C:\Windows\system32\rsaenh.dll'
32554238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9cb050000 'C:\Windows\System32\crypt32.dll'
32564238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume7\Windows\System32\gdi32.dll'
32574238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9c9550000 'C:\Windows\system32\rsaenh.dll'
32584238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9cb050000 'C:\Windows\System32\crypt32.dll'
32594238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume7\Windows\System32\user32.dll'
32604238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9c9550000 'C:\Windows\system32\rsaenh.dll'
32614238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9cb050000 'C:\Windows\System32\crypt32.dll'
32624238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume7\Windows\System32\msvcp_win.dll'
32634238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9c9550000 'C:\Windows\system32\rsaenh.dll'
32644238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9cb050000 'C:\Windows\System32\crypt32.dll'
32654238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume7\Windows\System32\combase.dll'
32664238.25cc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\rsaenh.dll
32674238.25cc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
32684238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9c9550000 'C:\Windows\system32\rsaenh.dll'
32694238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9cb050000 'C:\Windows\System32\crypt32.dll'
32704238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume7\Windows\System32\winmmbase.dll'
32714238.25cc: SUPR3HardenedMain: Calling TrustedMain (00007ff9502316c0)...
32724238.25cc: \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\platforms\qwindows.dll: Signature #1/2: info status: 24202
32734238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9c9550000 'C:\Windows\system32\rsaenh.dll'
32744238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'gdi32.dll'.
32754238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'ole32.dll'.
32764238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'user32.dll'.
32774238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'imm32.dll'.
32784238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'winmm.dll'.
32794238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'oleaut32.dll'.
32804238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'shell32.dll'.
32814238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'advapi32.dll'.
32824238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'qt5guivbox.dll'.
32834238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'qt5corevbox.dll'.
32844238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'msvcr100.dll'.
32854238.25cc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\platforms\qwindows.dll) WinVerifyTrust
32864238.25cc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\platforms\qwindows.dll
32874238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
32884238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
32894238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
32904238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
32914238.25cc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll
32924238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
32934238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
32944238.25cc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll
32954238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
32964238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume7\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
32974238.25cc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\advapi32.dll
32984238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
32994238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume7\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
33004238.25cc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\shell32.dll
33014238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
33024238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume7\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
33034238.25cc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\oleaut32.dll
33044238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
33054238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume7\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008]
33064238.25cc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\winmm.dll
33074238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'imm32.dll'...
33084238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'imm32.dll' -> '\Device\HarddiskVolume7\Windows\System32\imm32.dll' [rcNtRedir=0xc0150008]
33094238.25cc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\imm32.dll
33104238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
33114238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume7\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
33124238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
33134238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume7\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
33144238.25cc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\ole32.dll
33154238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
33164238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume7\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
33174238.25cc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\platforms\qwindows.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
33184238.25cc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\platforms\qwindows.dll
33194238.25cc: supR3HardenedDllNotificationCallback: load 00007ff98fa50000 LB 0x0012e000 C:\Program Files\Oracle\VirtualBox\platforms\qwindows.dll [fFlags=0x0]
33204238.25cc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\platforms\qwindows.dll
33214238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff98fa50000 'C:\Program Files\Oracle\VirtualBox\platforms\qwindows.dll'
33224238.25cc: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000000000003a8 pwszName=\Device\HarddiskVolume7\Windows\System32\uxtheme.dll
33234238.25cc: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000016bc5f0
33244238.25cc: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000016bc5f0
33254238.25cc: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=FC4075B94E896B3CAA9912F5E86E9C45EF536E1D
33264238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9c9550000 'C:\Windows\system32\rsaenh.dll'
33274238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9cb050000 'C:\Windows\System32\crypt32.dll'
33284238.25cc: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.18362.1556.cat'; file='\Device\HarddiskVolume7\Windows\System32\uxtheme.dll'
33294238.25cc: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
33304238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
33314238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #33 'gdi32.dll'.
33324238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #34 'user32.dll'.
33334238.25cc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume7\Windows\System32\uxtheme.dll) WinVerifyTrust
33344238.25cc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume7\Windows\System32\uxtheme.dll
33354238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
33364238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume7\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
33374238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
33384238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume7\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
33394238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
33404238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume7\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
33414238.25cc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\uxtheme.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
33424238.25cc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\uxtheme.dll
33434238.25cc: supR3HardenedDllNotificationCallback: load 00007ff9c4ed0000 LB 0x00099000 C:\Windows\system32\uxtheme.dll [fFlags=0x0]
33444238.25cc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\uxtheme.dll
33454238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9c4ed0000 'C:\Windows\system32\uxtheme.dll'
33464238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9cc8b0000 'C:\Windows\system32\user32.dll'
33474238.25cc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\shell32.dll
33484238.25cc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
33494238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9cbb50000 'C:\Windows\system32\shell32.dll'
33504238.25cc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\SHCore.dll
33514238.25cc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\SHCore.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
33524238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9ccdd0000 'C:\Windows\system32\SHCore.dll'
33534238.25cc: supR3HardenedMonitor_LdrLoadDll: error opening 'C:\Windows\system32\wintab32.dll': 0 (NtPath=\??\C:\Windows\system32\wintab32.dll; Input=C:\Windows\system32\wintab32.dll; rcNtGetDll=0x0
33544238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0xc0000034 'C:\Windows\system32\wintab32.dll'
33554238.25cc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\winmm.dll
33564238.25cc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\winmm.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
33574238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9c4160000 'C:\Windows\system32\winmm.dll'
33584238.25cc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\winmm.dll
33594238.25cc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\winmm.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
33604238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9c4160000 'C:\Windows\system32\winmm.dll'
33614238.25cc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\shell32.dll
33624238.25cc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
33634238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9cbb50000 'C:\Windows\system32\shell32.dll'
33644238.25cc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\uxtheme.dll
33654238.25cc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\uxtheme.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
33664238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9c4ed0000 'C:\Windows\system32\uxtheme.dll'
33674238.25cc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\advapi32.dll
33684238.25cc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\advapi32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
33694238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9cca50000 'C:\Windows\system32\advapi32.dll'
33704238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9c9550000 'C:\Windows\system32\rsaenh.dll'
33714238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9cb050000 'C:\Windows\System32\crypt32.dll'
33724238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #13 'rpcrt4.dll'.
33734238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #30 'profapi.dll'.
33744238.25cc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume7\Windows\System32\userenv.dll) WinVerifyTrust
33754238.25cc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume7\Windows\System32\userenv.dll
33764238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'profapi.dll'...
33774238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'profapi.dll' -> '\Device\HarddiskVolume7\Windows\System32\profapi.dll' [rcNtRedir=0xc0150008]
33784238.25cc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\profapi.dll
33794238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
33804238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume7\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
33814238.25cc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\userenv.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
33824238.25cc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\userenv.dll
33834238.25cc: supR3HardenedDllNotificationCallback: load 00007ff9ca080000 LB 0x00025000 C:\Windows\system32\userenv.dll [fFlags=0x0]
33844238.25cc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\userenv.dll
33854238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9ca080000 'C:\Windows\system32\userenv.dll'
33864238.25cc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\kernel32.dll
33874238.25cc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\kernel32.dll (Input=kernel32, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
33884238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9cc500000 'C:\Windows\System32\kernel32.dll'
33894238.25cc: supR3HardenedDllNotificationCallback: load 00007ff9cc240000 LB 0x000a2000 C:\Windows\System32\clbcatq.dll [fFlags=0x0]
33904238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
33914238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #30 'rpcrt4.dll'.
33924238.25cc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume7\Windows\System32\clbcatq.dll)
33934238.25cc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume7\Windows\System32\clbcatq.dll
33944238.2690: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
33954238.2690: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume7\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
33964238.2690: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
33974238.2690: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume7\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
33984238.2690: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9c9550000 'C:\Windows\system32\rsaenh.dll'
33994238.2690: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9cb050000 'C:\Windows\System32\crypt32.dll'
34004238.2690: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume7\Windows\System32\clbcatq.dll'
34014238.2690: \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\VBoxC.dll: Signature #1/2: info status: 24202
34024238.2690: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9c9550000 'C:\Windows\system32\rsaenh.dll'
34034238.2690: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
34044238.2690: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp100.dll'.
34054238.2690: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxrt.dll'.
34064238.2690: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'advapi32.dll'.
34074238.2690: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'ole32.dll'.
34084238.2690: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'oleaut32.dll'.
34094238.2690: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\VBoxC.dll) WinVerifyTrust
34104238.2690: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\VBoxC.dll
34114238.2690: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
34124238.2690: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume7\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
34134238.2690: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\oleaut32.dll
34144238.2690: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
34154238.2690: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume7\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
34164238.2690: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\ole32.dll
34174238.2690: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
34184238.2690: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume7\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
34194238.2690: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\advapi32.dll
34204238.2690: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
34214238.2690: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
34224238.2690: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
34234238.2690: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
34244238.2690: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcp100.dll
34254238.2690: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
34264238.2690: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
34274238.2690: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxC.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
34284238.2690: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\VBoxC.dll
34294238.2690: supR3HardenedDllNotificationCallback: load 00007ff97f0a0000 LB 0x003c1000 C:\Program Files\Oracle\VirtualBox\VBoxC.dll [fFlags=0x0]
34304238.2690: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\VBoxC.dll
34314238.2690: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff97f0a0000 'C:\Program Files\Oracle\VirtualBox\VBoxC.dll'
34324238.2690: \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\VBoxProxyStub.dll: Signature #1/2: info status: 24202
34334238.2690: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9c9550000 'C:\Windows\system32\rsaenh.dll'
34344238.2690: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
34354238.2690: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
34364238.2690: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'advapi32.dll'.
34374238.2690: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'shlwapi.dll'.
34384238.2690: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'ole32.dll'.
34394238.2690: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'oleaut32.dll'.
34404238.2690: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'rpcrt4.dll'.
34414238.2690: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\VBoxProxyStub.dll) WinVerifyTrust
34424238.2690: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\VBoxProxyStub.dll
34434238.2690: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
34444238.2690: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume7\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
34454238.2690: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
34464238.2690: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume7\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
34474238.2690: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\oleaut32.dll
34484238.2690: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
34494238.2690: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume7\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
34504238.2690: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\ole32.dll
34514238.2690: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shlwapi.dll'...
34524238.2690: supR3HardenedWinVerifyCacheProcessImportTodos: 'shlwapi.dll' -> '\Device\HarddiskVolume7\Windows\System32\shlwapi.dll' [rcNtRedir=0xc0150008]
34534238.2690: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\shlwapi.dll
34544238.2690: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
34554238.2690: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume7\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
34564238.2690: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\advapi32.dll
34574238.2690: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
34584238.2690: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
34594238.2690: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
34604238.2690: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
34614238.2690: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxProxyStub.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
34624238.2690: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\VBoxProxyStub.dll
34634238.2690: supR3HardenedDllNotificationCallback: load 00007ff9810d0000 LB 0x000ef000 C:\Program Files\Oracle\VirtualBox\VBoxProxyStub.dll [fFlags=0x0]
34644238.2690: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Program Files\Oracle\VirtualBox\VBoxProxyStub.dll
34654238.2690: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9810d0000 'C:\Program Files\Oracle\VirtualBox\VBoxProxyStub.dll'
34664238.2690: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\oleaut32.dll
34674238.2690: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\oleaut32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
34684238.2690: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9cce80000 'C:\Windows\System32\oleaut32.dll'
34694238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9cb9e0000 'C:\Windows\system32\gdi32.dll'
34704238.25cc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\shell32.dll
34714238.25cc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
34724238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9cbb50000 'C:\Windows\system32\shell32.dll'
34734238.25cc: supR3HardenedDllNotificationCallback: load 00007ff9cc5c0000 LB 0x00135000 C:\Windows\System32\MSCTF.dll [fFlags=0x0]
34744238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
34754238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'oleaut32.dll'.
34764238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #38 'user32.dll'.
34774238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #39 'gdi32.dll'.
34784238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #40 'imm32.dll'.
34794238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #41 'advapi32.dll'.
34804238.25cc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume7\Windows\System32\msctf.dll)
34814238.25cc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume7\Windows\System32\msctf.dll
34824238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
34834238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume7\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
34844238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'imm32.dll'...
34854238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'imm32.dll' -> '\Device\HarddiskVolume7\Windows\System32\imm32.dll' [rcNtRedir=0xc0150008]
34864238.25cc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\imm32.dll
34874238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
34884238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume7\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
34894238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
34904238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume7\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
34914238.25cc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\user32.dll
34924238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
34934238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume7\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
34944238.25cc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\oleaut32.dll
34954238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
34964238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume7\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
34974238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9c9550000 'C:\Windows\system32\rsaenh.dll'
34984238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9cb050000 'C:\Windows\System32\crypt32.dll'
34994238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume7\Windows\System32\msctf.dll'
35004238.25cc: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000990 pwszName=\Device\HarddiskVolume7\Windows\System32\DataExchange.dll
35014238.25cc: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000016bc5f0
35024238.25cc: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000016bc5f0
35034238.25cc: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=C9B0BE701CDD3934C4537BC9090BB23A9DABB80B
35044238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9c9550000 'C:\Windows\system32\rsaenh.dll'
35054238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9cb050000 'C:\Windows\System32\crypt32.dll'
35064238.25cc: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.18362.1556.cat'; file='\Device\HarddiskVolume7\Windows\System32\DataExchange.dll'
35074238.25cc: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
35084238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
35094238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'shcore.dll'.
35104238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #29 'combase.dll'.
35114238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #34 'd3d11.dll'.
35124238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #35 'dcomp.dll'.
35134238.25cc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume7\Windows\System32\DataExchange.dll) WinVerifyTrust
35144238.25cc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume7\Windows\System32\DataExchange.dll
35154238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'dcomp.dll'...
35164238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'dcomp.dll' -> '\Device\HarddiskVolume7\Windows\System32\dcomp.dll' [rcNtRedir=0xc0150008]
35174238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9c9550000 'C:\Windows\system32\rsaenh.dll'
35184238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9cb050000 'C:\Windows\System32\crypt32.dll'
35194238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'win32u.dll'.
35204238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp_win.dll'.
35214238.25cc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume7\Windows\System32\dcomp.dll) WinVerifyTrust
35224238.25cc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume7\Windows\System32\dcomp.dll
35234238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'd3d11.dll'...
35244238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'd3d11.dll' -> '\Device\HarddiskVolume7\Windows\System32\d3d11.dll' [rcNtRedir=0xc0150008]
35254238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
35264238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume7\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
35274238.25cc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\msvcp_win.dll
35284238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
35294238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume7\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
35304238.25cc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\win32u.dll
35314238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9c9550000 'C:\Windows\system32\rsaenh.dll'
35324238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9cb050000 'C:\Windows\System32\crypt32.dll'
35334238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
35344238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #24 'dxgi.dll'.
35354238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #27 'win32u.dll'.
35364238.25cc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume7\Windows\System32\d3d11.dll) WinVerifyTrust
35374238.25cc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume7\Windows\System32\d3d11.dll
35384238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
35394238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume7\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
35404238.25cc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\combase.dll
35414238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shcore.dll'...
35424238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'shcore.dll' -> '\Device\HarddiskVolume7\Windows\System32\shcore.dll' [rcNtRedir=0xc0150008]
35434238.25cc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\SHCore.dll
35444238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
35454238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume7\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
35464238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
35474238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume7\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
35484238.25cc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\win32u.dll
35494238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'dxgi.dll'...
35504238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'dxgi.dll' -> '\Device\HarddiskVolume7\Windows\System32\dxgi.dll' [rcNtRedir=0xc0150008]
35514238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9c9550000 'C:\Windows\system32\rsaenh.dll'
35524238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9cb050000 'C:\Windows\System32\crypt32.dll'
35534238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
35544238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'win32u.dll'.
35554238.25cc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume7\Windows\System32\dxgi.dll) WinVerifyTrust
35564238.25cc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume7\Windows\System32\dxgi.dll
35574238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
35584238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume7\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
35594238.25cc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\msvcrt.dll
35604238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
35614238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume7\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
35624238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
35634238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume7\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
35644238.25cc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\dataexchange.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
35654238.25cc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\DataExchange.dll
35664238.25cc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\d3d11.dll
35674238.25cc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\dcomp.dll
35684238.25cc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\dxgi.dll
35694238.25cc: supR3HardenedDllNotificationCallback: load 00007ff9c8e60000 LB 0x000eb000 C:\Windows\system32\dxgi.dll [fFlags=0x0]
35704238.25cc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\dxgi.dll
35714238.25cc: supR3HardenedDllNotificationCallback: load 00007ff9c4190000 LB 0x0025b000 C:\Windows\system32\d3d11.dll [fFlags=0x0]
35724238.25cc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\d3d11.dll
35734238.25cc: supR3HardenedDllNotificationCallback: load 00007ff9c43f0000 LB 0x001dd000 C:\Windows\system32\dcomp.dll [fFlags=0x0]
35744238.25cc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\dcomp.dll
35754238.25cc: supR3HardenedDllNotificationCallback: load 00007ff994f30000 LB 0x0003b000 C:\Windows\system32\dataexchange.dll [fFlags=0x0]
35764238.25cc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\DataExchange.dll
35774238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9cb9e0000 'C:\Windows\System32\gdi32.dll'
35784238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff994f30000 'C:\Windows\system32\dataexchange.dll'
35794238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'rmclient.dll'.
35804238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #31 'rpcrt4.dll'.
35814238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #47 'combase.dll'.
35824238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #50 'msvcp_win.dll'.
35834238.25cc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume7\Windows\System32\twinapi.appcore.dll)
35844238.25cc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume7\Windows\System32\twinapi.appcore.dll
35854238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
35864238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'rpcrt4.dll'.
35874238.25cc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume7\Windows\System32\rmclient.dll)
35884238.25cc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume7\Windows\System32\rmclient.dll
35894238.25cc: supR3HardenedDllNotificationCallback: load 00007ff9c5960000 LB 0x00029000 C:\Windows\system32\RMCLIENT.dll [fFlags=0x0]
35904238.25cc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\rmclient.dll [avoiding WinVerifyTrust]
35914238.25cc: supR3HardenedDllNotificationCallback: load 00007ff9c5440000 LB 0x0025a000 C:\Windows\system32\twinapi.appcore.dll [fFlags=0x0]
35924238.25cc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\twinapi.appcore.dll [avoiding WinVerifyTrust]
35934238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
35944238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume7\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
35954238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
35964238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume7\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
35974238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
35984238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume7\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
35994238.25cc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\msvcp_win.dll
36004238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
36014238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume7\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
36024238.25cc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\combase.dll
36034238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
36044238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume7\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
36054238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rmclient.dll'...
36064238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rmclient.dll' -> '\Device\HarddiskVolume7\Windows\System32\rmclient.dll' [rcNtRedir=0xc0150008]
36074238.25cc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\rmclient.dll [lacks WinVerifyTrust]
36084238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9c9550000 'C:\Windows\system32\rsaenh.dll'
36094238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9cb050000 'C:\Windows\System32\crypt32.dll'
36104238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume7\Windows\System32\rmclient.dll'
36114238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9c9550000 'C:\Windows\system32\rsaenh.dll'
36124238.25cc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\crypt32.dll
36134238.25cc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\crypt32.dll (Input=crypt32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
36144238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9cb050000 'C:\Windows\System32\crypt32.dll'
36154238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume7\Windows\System32\twinapi.appcore.dll'
36164238.25cc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\SHCore.dll
36174238.25cc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\Shcore.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
36184238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9ccdd0000 'C:\Windows\system32\Shcore.dll'
36194238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
36204238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #15 'rpcrt4.dll'.
36214238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #19 'coreuicomponents.dll'.
36224238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #20 'coremessaging.dll'.
36234238.25cc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume7\Windows\System32\TextInputFramework.dll)
36244238.25cc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume7\Windows\System32\TextInputFramework.dll
36254238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
36264238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #35 'coremessaging.dll'.
36274238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #47 'shcore.dll'.
36284238.25cc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume7\Windows\System32\CoreUIComponents.dll)
36294238.25cc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume7\Windows\System32\CoreUIComponents.dll
36304238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
36314238.25cc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume7\Windows\System32\CoreMessaging.dll)
36324238.25cc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume7\Windows\System32\CoreMessaging.dll
36334238.25cc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume7\Windows\System32\ntmarta.dll)
36344238.25cc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume7\Windows\System32\ntmarta.dll
36354238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'combase.dll'.
36364238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #24 'rpcrt4.dll'.
36374238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #32 'bcryptprimitives.dll'.
36384238.25cc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume7\Windows\System32\WinTypes.dll)
36394238.25cc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume7\Windows\System32\WinTypes.dll
36404238.25cc: supR3HardenedDllNotificationCallback: load 00007ff9c91d0000 LB 0x00031000 C:\Windows\SYSTEM32\ntmarta.dll [fFlags=0x0]
36414238.25cc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\ntmarta.dll [avoiding WinVerifyTrust]
36424238.25cc: supR3HardenedDllNotificationCallback: load 00007ff9c4a10000 LB 0x000d4000 C:\Windows\System32\CoreMessaging.dll [fFlags=0x0]
36434238.25cc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\CoreMessaging.dll [avoiding WinVerifyTrust]
36444238.25cc: supR3HardenedDllNotificationCallback: load 00007ff9c2870000 LB 0x00152000 C:\Windows\SYSTEM32\wintypes.dll [fFlags=0x0]
36454238.25cc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\WinTypes.dll [avoiding WinVerifyTrust]
36464238.25cc: supR3HardenedDllNotificationCallback: load 00007ff9c1e20000 LB 0x0032a000 C:\Windows\System32\CoreUIComponents.dll [fFlags=0x0]
36474238.25cc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\CoreUIComponents.dll [avoiding WinVerifyTrust]
36484238.25cc: supR3HardenedDllNotificationCallback: load 00007ff9b9120000 LB 0x0009b000 C:\Windows\System32\TextInputFramework.dll [fFlags=0x0]
36494238.25cc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\TextInputFramework.dll [avoiding WinVerifyTrust]
36504238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcryptprimitives.dll'...
36514238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcryptprimitives.dll' -> '\Device\HarddiskVolume7\Windows\System32\bcryptprimitives.dll' [rcNtRedir=0xc0150008]
36524238.25cc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\bcryptprimitives.dll
36534238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
36544238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume7\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
36554238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
36564238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume7\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
36574238.25cc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\combase.dll
36584238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
36594238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume7\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
36604238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shcore.dll'...
36614238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'shcore.dll' -> '\Device\HarddiskVolume7\Windows\System32\shcore.dll' [rcNtRedir=0xc0150008]
36624238.25cc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\SHCore.dll
36634238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'coremessaging.dll'...
36644238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'coremessaging.dll' -> '\Device\HarddiskVolume7\Windows\System32\coremessaging.dll' [rcNtRedir=0xc0150008]
36654238.25cc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\CoreMessaging.dll [lacks WinVerifyTrust]
36664238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
36674238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume7\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
36684238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'coremessaging.dll'...
36694238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'coremessaging.dll' -> '\Device\HarddiskVolume7\Windows\System32\coremessaging.dll' [rcNtRedir=0xc0150008]
36704238.25cc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\CoreMessaging.dll [lacks WinVerifyTrust]
36714238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'coreuicomponents.dll'...
36724238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'coreuicomponents.dll' -> '\Device\HarddiskVolume7\Windows\System32\coreuicomponents.dll' [rcNtRedir=0xc0150008]
36734238.25cc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\CoreUIComponents.dll [lacks WinVerifyTrust]
36744238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
36754238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume7\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
36764238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
36774238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume7\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
36784238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9c9550000 'C:\Windows\system32\rsaenh.dll'
36794238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9cb050000 'C:\Windows\System32\crypt32.dll'
36804238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume7\Windows\System32\WinTypes.dll'
36814238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9c9550000 'C:\Windows\system32\rsaenh.dll'
36824238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9cb050000 'C:\Windows\System32\crypt32.dll'
36834238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume7\Windows\System32\ntmarta.dll'
36844238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9c9550000 'C:\Windows\system32\rsaenh.dll'
36854238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9cb050000 'C:\Windows\System32\crypt32.dll'
36864238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume7\Windows\System32\CoreMessaging.dll'
36874238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9c9550000 'C:\Windows\system32\rsaenh.dll'
36884238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9cb050000 'C:\Windows\System32\crypt32.dll'
36894238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume7\Windows\System32\CoreUIComponents.dll'
36904238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9c9550000 'C:\Windows\system32\rsaenh.dll'
36914238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9cb050000 'C:\Windows\System32\crypt32.dll'
36924238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume7\Windows\System32\TextInputFramework.dll'
36934238.25cc: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(ext-ms-win-rtcore-ntuser-window-ext-l1-1-0.dll) -> 0x0, fPresent=1
36944238.25cc: supR3HardenedMonitor_LdrLoadDll: pName=ext-ms-win-rtcore-ntuser-window-ext-l1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
36954238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9cc8b0000 'ext-ms-win-rtcore-ntuser-window-ext-l1-1-0.dll'
36964238.25cc: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(ext-ms-win-rtcore-ntuser-integration-l1-1-0.dll) -> 0x0, fPresent=1
36974238.25cc: supR3HardenedMonitor_LdrLoadDll: pName=ext-ms-win-rtcore-ntuser-integration-l1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
36984238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9cc8b0000 'ext-ms-win-rtcore-ntuser-integration-l1-1-0.dll'
36994238.25cc: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-com-l1-1-0.dll) -> 0x0, fPresent=1
37004238.25cc: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-com-l1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
37014238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9ccf50000 'api-ms-win-core-com-l1-1-0.dll'
37024238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
37034238.25cc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume7\Windows\System32\iertutil.dll)
37044238.25cc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume7\Windows\System32\iertutil.dll
37054238.25cc: supR3HardenedDllNotificationCallback: load 00007ff9b7140000 LB 0x002a7000 C:\Windows\System32\iertutil.dll [fFlags=0x0]
37064238.25cc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\iertutil.dll [avoiding WinVerifyTrust]
37074238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
37084238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume7\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
37094238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9c9550000 'C:\Windows\system32\rsaenh.dll'
37104238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9cb050000 'C:\Windows\System32\crypt32.dll'
37114238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume7\Windows\System32\iertutil.dll'
37124238.25cc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\ole32.dll
37134238.25cc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\ole32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
37144238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9ccb00000 'C:\Windows\system32\ole32.dll'
37154238.25cc: \Device\HarddiskVolume7\Windows\System32\SogouTSF.ime: Owner is administrators group.
37164238.25cc: \Device\HarddiskVolume7\Windows\System32\SogouTSF.ime: Signature #1/2: info status: 24202
37174238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9c9550000 'C:\Windows\system32\rsaenh.dll'
37184238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'.
37194238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'advapi32.dll'.
37204238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'ole32.dll'.
37214238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'oleaut32.dll'.
37224238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'imm32.dll'.
37234238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'version.dll'.
37244238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'msimg32.dll'.
37254238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'gdi32.dll'.
37264238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'shell32.dll'.
37274238.25cc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume7\Windows\System32\SogouTSF.ime) WinVerifyTrust
37284238.25cc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume7\Windows\System32\SogouTSF.ime
37294238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
37304238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume7\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
37314238.25cc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\shell32.dll
37324238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
37334238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume7\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
37344238.25cc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\gdi32.dll
37354238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msimg32.dll'...
37364238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msimg32.dll' -> '\Device\HarddiskVolume7\Windows\System32\msimg32.dll' [rcNtRedir=0xc0150008]
37374238.25cc: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000a74 pwszName=\Device\HarddiskVolume7\Windows\System32\msimg32.dll
37384238.25cc: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000016bc5f0
37394238.25cc: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000016bc5f0
37404238.25cc: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=AFA60CA68D1C061D07DADDD82EEF5EA98E9E9C3C
37414238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9c9550000 'C:\Windows\system32\rsaenh.dll'
37424238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9cb050000 'C:\Windows\System32\crypt32.dll'
37434238.25cc: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0417~31bf3856ad364e35~amd64~~10.0.18362.1556.cat'; file='\Device\HarddiskVolume7\Windows\System32\msimg32.dll'
37444238.25cc: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
37454238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'gdi32.dll'.
37464238.25cc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume7\Windows\System32\msimg32.dll) WinVerifyTrust
37474238.25cc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume7\Windows\System32\msimg32.dll
37484238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'version.dll'...
37494238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'version.dll' -> '\Device\HarddiskVolume7\Windows\System32\version.dll' [rcNtRedir=0xc0150008]
37504238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
37514238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume7\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
37524238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9c9550000 'C:\Windows\system32\rsaenh.dll'
37534238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9cb050000 'C:\Windows\System32\crypt32.dll'
37544238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
37554238.25cc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume7\Windows\System32\version.dll) WinVerifyTrust
37564238.25cc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume7\Windows\System32\version.dll
37574238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'imm32.dll'...
37584238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'imm32.dll' -> '\Device\HarddiskVolume7\Windows\System32\imm32.dll' [rcNtRedir=0xc0150008]
37594238.25cc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\imm32.dll
37604238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
37614238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume7\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
37624238.25cc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\oleaut32.dll
37634238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
37644238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume7\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
37654238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
37664238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume7\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
37674238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
37684238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume7\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
37694238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
37704238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume7\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
37714238.25cc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\SogouTSF.ime (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
37724238.25cc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\SogouTSF.ime
37734238.25cc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\version.dll
37744238.25cc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\msimg32.dll
37754238.25cc: supR3HardenedDllNotificationCallback: load 00007ff9b9330000 LB 0x0000a000 C:\Windows\system32\VERSION.dll [fFlags=0x0]
37764238.25cc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\version.dll
37774238.25cc: supR3HardenedDllNotificationCallback: load 00007ff9ac9a0000 LB 0x00007000 C:\Windows\system32\MSIMG32.dll [fFlags=0x0]
37784238.25cc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\msimg32.dll
37794238.25cc: supR3HardenedDllNotificationCallback: load 00007ff987f60000 LB 0x001ed000 C:\Windows\system32\SogouTSF.ime [fFlags=0x0]
37804238.25cc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\SogouTSF.ime
37814238.25cc: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-synch-l1-2-0) -> 0x0, fPresent=1
37824238.25cc: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-synch-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
37834238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9ca480000 'api-ms-win-core-synch-l1-2-0'
37844238.25cc: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-fibers-l1-1-1) -> 0x0, fPresent=1
37854238.25cc: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-fibers-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
37864238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9ca480000 'api-ms-win-core-fibers-l1-1-1'
37874238.25cc: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-synch-l1-2-0) -> 0x0, fPresent=1
37884238.25cc: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-synch-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
37894238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9ca480000 'api-ms-win-core-synch-l1-2-0'
37904238.25cc: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-fibers-l1-1-1) -> 0x0, fPresent=1
37914238.25cc: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-fibers-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
37924238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9ca480000 'api-ms-win-core-fibers-l1-1-1'
37934238.25cc: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-localization-l1-2-1) -> 0x0, fPresent=1
37944238.25cc: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-l1-2-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
37954238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9ca480000 'api-ms-win-core-localization-l1-2-1'
37964238.25cc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\kernel32.dll
37974238.25cc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\kernel32.dll (Input=kernel32, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
37984238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9cc500000 'C:\Windows\System32\kernel32.dll'
37994238.25cc: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-string-l1-1-0) -> 0x0, fPresent=1
38004238.25cc: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-string-l1-1-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
38014238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9ca480000 'api-ms-win-core-string-l1-1-0'
38024238.25cc: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-datetime-l1-1-1) -> 0x0, fPresent=1
38034238.25cc: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-datetime-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
38044238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9ca480000 'api-ms-win-core-datetime-l1-1-1'
38054238.25cc: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-localization-obsolete-l1-2-0) -> 0x0, fPresent=1
38064238.25cc: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-obsolete-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
38074238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9ca480000 'api-ms-win-core-localization-obsolete-l1-2-0'
38084238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff987f60000 'C:\Windows\system32\SogouTSF.ime'
38094238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9cca50000 'C:\Windows\System32\advapi32.dll'
38104238.25cc: \Device\HarddiskVolume7\Windows\System32\SogouPY.ime: Owner is administrators group.
38114238.25cc: \Device\HarddiskVolume7\Windows\System32\SogouPY.ime: Signature #1/2: info status: 24202
38124238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9c9550000 'C:\Windows\system32\rsaenh.dll'
38134238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msimg32.dll'.
38144238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'user32.dll'.
38154238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'gdi32.dll'.
38164238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'advapi32.dll'.
38174238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'imm32.dll'.
38184238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'shlwapi.dll'.
38194238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'winhttp.dll'.
38204238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'oleacc.dll'.
38214238.25cc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume7\Windows\System32\SogouPY.ime) WinVerifyTrust
38224238.25cc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume7\Windows\System32\SogouPY.ime
38234238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleacc.dll'...
38244238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleacc.dll' -> '\Device\HarddiskVolume7\Windows\System32\oleacc.dll' [rcNtRedir=0xc0150008]
38254238.25cc: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000aa0 pwszName=\Device\HarddiskVolume7\Windows\System32\oleacc.dll
38264238.25cc: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000016bc5f0
38274238.25cc: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000016bc5f0
38284238.25cc: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=1BEDEE19D2B5051E320169871E5D75A5E13293CB
38294238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9c9550000 'C:\Windows\system32\rsaenh.dll'
38304238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9cb050000 'C:\Windows\System32\crypt32.dll'
38314238.25cc: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package04113~31bf3856ad364e35~amd64~~10.0.18362.1556.cat'; file='\Device\HarddiskVolume7\Windows\System32\oleacc.dll'
38324238.25cc: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
38334238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'rpcrt4.dll'.
38344238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #30 'user32.dll'.
38354238.25cc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume7\Windows\System32\oleacc.dll) WinVerifyTrust
38364238.25cc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume7\Windows\System32\oleacc.dll
38374238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winhttp.dll'...
38384238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'winhttp.dll' -> '\Device\HarddiskVolume7\Windows\System32\winhttp.dll' [rcNtRedir=0xc0150008]
38394238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
38404238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume7\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
38414238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
38424238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume7\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
38434238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9c9550000 'C:\Windows\system32\rsaenh.dll'
38444238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9cb050000 'C:\Windows\System32\crypt32.dll'
38454238.25cc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume7\Windows\System32\winhttp.dll) WinVerifyTrust
38464238.25cc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume7\Windows\System32\winhttp.dll
38474238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shlwapi.dll'...
38484238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'shlwapi.dll' -> '\Device\HarddiskVolume7\Windows\System32\shlwapi.dll' [rcNtRedir=0xc0150008]
38494238.25cc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\shlwapi.dll
38504238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'imm32.dll'...
38514238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'imm32.dll' -> '\Device\HarddiskVolume7\Windows\System32\imm32.dll' [rcNtRedir=0xc0150008]
38524238.25cc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\imm32.dll
38534238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
38544238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume7\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
38554238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
38564238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume7\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
38574238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
38584238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume7\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
38594238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msimg32.dll'...
38604238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msimg32.dll' -> '\Device\HarddiskVolume7\Windows\System32\msimg32.dll' [rcNtRedir=0xc0150008]
38614238.25cc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\msimg32.dll
38624238.25cc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\SogouPy.ime (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
38634238.25cc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\SogouPY.ime
38644238.25cc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\winhttp.dll
38654238.25cc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\oleacc.dll
38664238.25cc: supR3HardenedDllNotificationCallback: load 00007ff9c21d0000 LB 0x000fa000 C:\Windows\SYSTEM32\WINHTTP.dll [fFlags=0x0]
38674238.25cc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\winhttp.dll
38684238.25cc: supR3HardenedDllNotificationCallback: load 00007ff9ac8a0000 LB 0x00065000 C:\Windows\SYSTEM32\OLEACC.dll [fFlags=0x0]
38694238.25cc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\oleacc.dll
38704238.25cc: supR3HardenedDllNotificationCallback: load 00007ff9876c0000 LB 0x00894000 C:\Windows\system32\SogouPy.ime [fFlags=0x0]
38714238.25cc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\SogouPY.ime
38724238.25cc: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-synch-l1-2-0) -> 0x0, fPresent=1
38734238.25cc: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-synch-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
38744238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9ca480000 'api-ms-win-core-synch-l1-2-0'
38754238.25cc: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-fibers-l1-1-1) -> 0x0, fPresent=1
38764238.25cc: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-fibers-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
38774238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9ca480000 'api-ms-win-core-fibers-l1-1-1'
38784238.25cc: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-synch-l1-2-0) -> 0x0, fPresent=1
38794238.25cc: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-synch-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
38804238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9ca480000 'api-ms-win-core-synch-l1-2-0'
38814238.25cc: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-fibers-l1-1-1) -> 0x0, fPresent=1
38824238.25cc: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-fibers-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
38834238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9ca480000 'api-ms-win-core-fibers-l1-1-1'
38844238.25cc: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-localization-l1-2-1) -> 0x0, fPresent=1
38854238.25cc: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-l1-2-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
38864238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9ca480000 'api-ms-win-core-localization-l1-2-1'
38874238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9876c0000 'C:\Windows\system32\SogouPy.ime'
38884238.25cc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\version.dll
38894238.25cc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\VERSION.dll (Input=VERSION.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
38904238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9b9330000 'C:\Windows\System32\VERSION.dll'
38914238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9cbb50000 'C:\Windows\System32\SHELL32.dll'
38924238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9cca50000 'C:\Windows\System32\advapi32.dll'
38934238.25cc: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-sysinfo-l1-2-1) -> 0x0, fPresent=1
38944238.25cc: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-sysinfo-l1-2-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
38954238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9ca480000 'api-ms-win-core-sysinfo-l1-2-1'
38964238.25cc: '\Device\HarddiskVolume7\Windows\System32\tzres.dll' has no imports
38974238.25cc: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume7\Windows\System32\tzres.dll)
38984238.25cc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume7\Windows\System32\tzres.dll
38994238.25cc: supR3HardenedMonitor_NtCreateSection: NtMapViewOfSection failed on 0000000000000adc (hFile=0000000000000ac4) with 0xc0000022 -> STATUS_TRUST_FAILURE
39004238.25cc: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume7\Windows\System32\tzres.dll [avoiding WinVerifyTrust]
39014238.25cc: supR3HardenedMonitor_NtCreateSection: NtMapViewOfSection failed on 0000000000000ac4 (hFile=0000000000000adc) with 0xc0000022 -> STATUS_TRUST_FAILURE
39024238.1b08: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000abc pwszName=\Device\HarddiskVolume7\Windows\System32\tzres.dll
39034238.1b08: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000016bc5f0
39044238.1b08: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000016bc5f0
39054238.1b08: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=8814DF0E7FA142C8E6915E250703639DB1408C82
39064238.1b08: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9c9550000 'C:\Windows\system32\rsaenh.dll'
39074238.1b08: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9cb050000 'C:\Windows\System32\crypt32.dll'
39084238.3c28: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-appmodel-runtime-l1-1-1) -> 0x0, fPresent=1
39094238.3c28: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-appmodel-runtime-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
39104238.3c28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9ca210000 'api-ms-win-appmodel-runtime-l1-1-1'
39114238.1b08: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.18362.1556.cat'; file='\Device\HarddiskVolume7\Windows\System32\tzres.dll'
39124238.1b08: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
39134238.1b08: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume7\Windows\System32\tzres.dll'
39144238.1b08: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-appmodel-runtime-l1-1-1) -> 0x0, fPresent=1
39154238.1b08: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-appmodel-runtime-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
39164238.1b08: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9ca210000 'api-ms-win-appmodel-runtime-l1-1-1'
39174238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9ccb00000 'C:\Windows\System32\ole32.dll'
39184238.25cc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\msctf.dll
39194238.25cc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\msctf.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
39204238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9cc5c0000 'C:\Windows\System32\msctf.dll'
39214238.25cc: \Device\HarddiskVolume7\Program Files (x86)\SogouInput\9.8.0.3746\Resource.dll: Owner is administrators group.
39224238.3c28: \Device\HarddiskVolume7\Program Files (x86)\SogouInput\Components\PicFace\1.1.0.1879\PicFace64.dll: Owner is not trusted installer (01 05 00 00 00 00 00 05 15 00 00 00 15 24 95 d8 46 3b 14 b8 c6 81 08 f0 e9 03 00 00)
39234238.3c28: supHardenedWinVerifyImageByHandle: -> -5667 (\Device\HarddiskVolume7\Program Files (x86)\SogouInput\Components\PicFace\1.1.0.1879\PicFace64.dll)
39244238.3c28: Error (rc=0):
39254238.3c28: supR3HardenedScreenImage/NtCreateSection: rc=Unknown Status -5667 (0xffffe9dd) fImage=1 fProtect=0x5 fAccess=0x2 \Device\HarddiskVolume7\Program Files (x86)\SogouInput\Components\PicFace\1.1.0.1879\PicFace64.dll: supHardenedWinVerifyImageByHandle: TrustedInstaller is not the owner of '\Device\HarddiskVolume7\Program Files (x86)\SogouInput\Components\PicFace\1.1.0.1879\PicFace64.dll'.
39264238.3c28: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume7\Program Files (x86)\SogouInput\Components\PicFace\1.1.0.1879\PicFace64.dll
39274238.3c28: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status -5667 (0xffffe9dd)) on \Device\HarddiskVolume7\Program Files (x86)\SogouInput\Components\PicFace\1.1.0.1879\PicFace64.dll [lacks WinVerifyTrust]
39284238.3c28: Error (rc=0):
39294238.3c28: supR3HardenedScreenImage/NtCreateSection: cached rc=Unknown Status -5667 (0xffffe9dd) fImage=1 fProtect=0x2 fAccess=0x5 cHits=1 \Device\HarddiskVolume7\Program Files (x86)\SogouInput\Components\PicFace\1.1.0.1879\PicFace64.dll
39304238.3c28: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status -5667 (0xffffe9dd)) on \Device\HarddiskVolume7\Program Files (x86)\SogouInput\Components\PicFace\1.1.0.1879\PicFace64.dll [lacks WinVerifyTrust]
39314238.3c28: Error (rc=0):
39324238.3c28: supR3HardenedScreenImage/LdrLoadDll: cached rc=Unknown Status -5667 (0xffffe9dd) fImage=1 fProtect=0x0 fAccess=0x0 cHits=2 \Device\HarddiskVolume7\Program Files (x86)\SogouInput\Components\PicFace\1.1.0.1879\PicFace64.dll
39334238.3c28: Error (rc=0):
39344238.3c28: supR3HardenedMonitor_LdrLoadDll: rejecting 'C:\Program Files (x86)\SogouInput\Components\PicFace\1.1.0.1879\PicFace64.dll' (C:\Program Files (x86)\SogouInput\Components\PicFace\1.1.0.1879\PicFace64.dll): rcNt=0xc0000190
39354238.3c28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0xc0000190 'C:\Program Files (x86)\SogouInput\Components\PicFace\1.1.0.1879\PicFace64.dll'
39364238.14ac: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status -5667 (0xffffe9dd)) on \Device\HarddiskVolume7\Program Files (x86)\SogouInput\Components\PicFace\1.1.0.1879\PicFace64.dll [lacks WinVerifyTrust]
39374238.14ac: Error (rc=0):
39384238.14ac: supR3HardenedScreenImage/NtCreateSection: cached rc=Unknown Status -5667 (0xffffe9dd) fImage=1 fProtect=0x2 fAccess=0x5 cHits=3 \Device\HarddiskVolume7\Program Files (x86)\SogouInput\Components\PicFace\1.1.0.1879\PicFace64.dll
39394238.14ac: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status -5667 (0xffffe9dd)) on \Device\HarddiskVolume7\Program Files (x86)\SogouInput\Components\PicFace\1.1.0.1879\PicFace64.dll [lacks WinVerifyTrust]
39404238.14ac: Error (rc=0):
39414238.14ac: supR3HardenedScreenImage/NtCreateSection: cached rc=Unknown Status -5667 (0xffffe9dd) fImage=1 fProtect=0x2 fAccess=0x5 cHits=4 \Device\HarddiskVolume7\Program Files (x86)\SogouInput\Components\PicFace\1.1.0.1879\PicFace64.dll
39424238.25cc: \Device\HarddiskVolume7\Program Files (x86)\SogouInput\9.8.0.3746\Resource.dll: Signature #1/2: info status: 24202
39434238.25cc: '\Device\HarddiskVolume7\Program Files (x86)\SogouInput\9.8.0.3746\Resource.dll' has no imports
39444238.25cc: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume7\Program Files (x86)\SogouInput\9.8.0.3746\Resource.dll)
39454238.25cc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume7\Program Files (x86)\SogouInput\9.8.0.3746\Resource.dll
39464238.25cc: supR3HardenedMonitor_NtCreateSection: NtMapViewOfSection failed on 0000000000000b88 (hFile=0000000000000b80) with 0xc0000022 -> STATUS_TRUST_FAILURE
39474238.25cc: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume7\Program Files (x86)\SogouInput\9.8.0.3746\Resource.dll [avoiding WinVerifyTrust]
39484238.25cc: supR3HardenedMonitor_NtCreateSection: NtMapViewOfSection failed on 0000000000000b80 (hFile=0000000000000b88) with 0xc0000022 -> STATUS_TRUST_FAILURE
39494238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9c9550000 'C:\Windows\system32\rsaenh.dll'
39504238.25cc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 24202) fWinVerifyTrust=1 for '\Device\HarddiskVolume7\Program Files (x86)\SogouInput\9.8.0.3746\Resource.dll'
39514238.25cc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Program Files (x86)\SogouInput\9.8.0.3746\Resource.dll
39524238.25cc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files (x86)\SogouInput\9.8.0.3746\Resource.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
39534238.25cc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Program Files (x86)\SogouInput\9.8.0.3746\Resource.dll
39544238.25cc: supR3HardenedDllNotificationCallback: load 0000000010000000 LB 0x0011d000 C:\Program Files (x86)\SogouInput\9.8.0.3746\Resource.dll [fFlags=0x0]
39554238.25cc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Program Files (x86)\SogouInput\9.8.0.3746\Resource.dll
39564238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=0000000010000000 'C:\Program Files (x86)\SogouInput\9.8.0.3746\Resource.dll'
39574238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9c9550000 'C:\Windows\system32\rsaenh.dll'
39584238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9cb050000 'C:\Windows\System32\crypt32.dll'
39594238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
39604238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #21 'win32u.dll'.
39614238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #22 'user32.dll'.
39624238.25cc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #23 'gdi32.dll'.
39634238.25cc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume7\Windows\System32\dwmapi.dll) WinVerifyTrust
39644238.25cc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume7\Windows\System32\dwmapi.dll
39654238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
39664238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume7\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
39674238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
39684238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume7\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
39694238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
39704238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume7\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
39714238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
39724238.25cc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume7\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
39734238.25cc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\dwmapi.dll (Input=dwmapi.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
39744238.25cc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\dwmapi.dll
39754238.25cc: supR3HardenedDllNotificationCallback: load 00007ff9c56a0000 LB 0x0002d000 C:\Windows\System32\dwmapi.dll [fFlags=0x0]
39764238.25cc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\dwmapi.dll
39774238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9c56a0000 'C:\Windows\System32\dwmapi.dll'
39784238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9c9550000 'C:\Windows\system32\rsaenh.dll'
39794238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9cb050000 'C:\Windows\System32\crypt32.dll'
39804238.25cc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume7\Windows\System32\psapi.dll) WinVerifyTrust
39814238.25cc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume7\Windows\System32\psapi.dll
39824238.25cc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\PSAPI.DLL (Input=PSAPI.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
39834238.25cc: supR3HardenedDllNotificationCallback: load 00007ff9cba10000 LB 0x00008000 C:\Windows\System32\PSAPI.DLL [fFlags=0x0]
39844238.25cc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\psapi.dll
39854238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9cba10000 'C:\Windows\System32\PSAPI.DLL'
39864238.25cc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\msctf.dll
39874238.25cc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\MSCTF.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
39884238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9cc5c0000 'C:\Windows\System32\MSCTF.dll'
39894238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9cbb50000 'C:\Windows\system32\shell32.dll'
39904238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9cbb50000 'C:\Windows\system32\shell32.dll'
39914238.25cc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\dwmapi.dll
39924238.25cc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\dwmapi.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
39934238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9c56a0000 'C:\Windows\system32\dwmapi.dll'
39944238.25cc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume7\Windows\System32\uxtheme.dll
39954238.25cc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\uxtheme.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
39964238.25cc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9c4ed0000 'C:\Windows\system32\uxtheme.dll'
39973b30.31a8: supR3HardNtChildWaitFor[2]: Quitting: ExitCode=0x1 (rcNtWait=0x1, rcNt1=0x0, rcNt2=0x0, rcNt3=0x0, 16110 ms, the end);

© 2024 Oracle Support Privacy / Do Not Sell My Info Terms of Use Trademark Policy