VirtualBox

Ticket #21021: VBoxHardening.log

File VBoxHardening.log, 378.0 KB (added by drwtsn32, 2 years ago)
Line 
1468.3a9c: Log file opened: 6.1.34r150636 g_hStartupLog=0000000000000084 g_uNtVerCombined=0xa04a6400
2468.3a9c: \SystemRoot\System32\ntdll.dll:
3468.3a9c: CreationTime: 2022-06-16T22:01:49.364128000Z
4468.3a9c: LastWriteTime: 2022-06-16T22:01:49.401215600Z
5468.3a9c: ChangeTime: 2022-06-17T07:02:35.069276700Z
6468.3a9c: FileAttributes: 0x20
7468.3a9c: Size: 0x1eef70
8468.3a9c: NT Headers: 0xe8
9468.3a9c: Timestamp: 0x77755782
10468.3a9c: Machine: 0x8664 - amd64
11468.3a9c: Timestamp: 0x77755782
12468.3a9c: Image Version: 10.0
13468.3a9c: SizeOfImage: 0x1f7000 (2060288)
14468.3a9c: Resource Dir: 0x185000 LB 0x700a0
15468.3a9c: [Version info resource found at 0xd8! (ID/Name: 0x1; SubID/SubName: 0x409)]
16468.3a9c: [Raw version resource data: 0x1850f0 LB 0x380, codepage 0x0 (reserved 0x0)]
17468.3a9c: ProductName: Microsoft® Windows® Operating System
18468.3a9c: ProductVersion: 10.0.19041.1741
19468.3a9c: FileVersion: 10.0.19041.1741 (WinBuild.160101.0800)
20468.3a9c: FileDescription: NT Layer DLL
21468.3a9c: \SystemRoot\System32\kernel32.dll:
22468.3a9c: CreationTime: 2022-06-16T22:01:53.274437400Z
23468.3a9c: LastWriteTime: 2022-06-16T22:01:53.288289000Z
24468.3a9c: ChangeTime: 2022-06-17T07:02:33.416391600Z
25468.3a9c: FileAttributes: 0x20
26468.3a9c: Size: 0xbb038
27468.3a9c: NT Headers: 0xe8
28468.3a9c: Timestamp: 0x89f7051c
29468.3a9c: Machine: 0x8664 - amd64
30468.3a9c: Timestamp: 0x89f7051c
31468.3a9c: Image Version: 10.0
32468.3a9c: SizeOfImage: 0xbd000 (774144)
33468.3a9c: Resource Dir: 0xbb000 LB 0x520
34468.3a9c: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
35468.3a9c: [Raw version resource data: 0xbb0b0 LB 0x3a4, codepage 0x0 (reserved 0x0)]
36468.3a9c: ProductName: Microsoft® Windows® Operating System
37468.3a9c: ProductVersion: 10.0.19041.1741
38468.3a9c: FileVersion: 10.0.19041.1741 (WinBuild.160101.0800)
39468.3a9c: FileDescription: Windows NT BASE API Client DLL
40468.3a9c: \SystemRoot\System32\KernelBase.dll:
41468.3a9c: CreationTime: 2022-06-16T22:01:49.962633600Z
42468.3a9c: LastWriteTime: 2022-06-16T22:01:50.019984400Z
43468.3a9c: ChangeTime: 2022-06-17T07:02:34.683195800Z
44468.3a9c: FileAttributes: 0x20
45468.3a9c: Size: 0x2cf630
46468.3a9c: NT Headers: 0xf0
47468.3a9c: Timestamp: 0xe9b4a91b
48468.3a9c: Machine: 0x8664 - amd64
49468.3a9c: Timestamp: 0xe9b4a91b
50468.3a9c: Image Version: 10.0
51468.3a9c: SizeOfImage: 0x2cd000 (2936832)
52468.3a9c: Resource Dir: 0x2a4000 LB 0x548
53468.3a9c: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
54468.3a9c: [Raw version resource data: 0x2a40b0 LB 0x3bc, codepage 0x0 (reserved 0x0)]
55468.3a9c: ProductName: Microsoft® Windows® Operating System
56468.3a9c: ProductVersion: 10.0.19041.1741
57468.3a9c: FileVersion: 10.0.19041.1741 (WinBuild.160101.0800)
58468.3a9c: FileDescription: Windows NT BASE API Client DLL
59468.3a9c: \SystemRoot\System32\apisetschema.dll:
60468.3a9c: CreationTime: 2019-12-07T09:08:13.518339400Z
61468.3a9c: LastWriteTime: 2019-12-07T09:08:13.518339400Z
62468.3a9c: ChangeTime: 2022-06-16T22:02:18.421443400Z
63468.3a9c: FileAttributes: 0x20
64468.3a9c: Size: 0x1f538
65468.3a9c: NT Headers: 0xd0
66468.3a9c: Timestamp: 0x31288ce0
67468.3a9c: Machine: 0x8664 - amd64
68468.3a9c: Timestamp: 0x31288ce0
69468.3a9c: Image Version: 10.0
70468.3a9c: SizeOfImage: 0x20000 (131072)
71468.3a9c: Resource Dir: 0x1f000 LB 0x408
72468.3a9c: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
73468.3a9c: [Raw version resource data: 0x1f060 LB 0x3a8, codepage 0x0 (reserved 0x0)]
74468.3a9c: ProductName: Microsoft® Windows® Operating System
75468.3a9c: ProductVersion: 10.0.19041.1
76468.3a9c: FileVersion: 10.0.19041.1 (WinBuild.160101.0800)
77468.3a9c: FileDescription: ApiSet Schema DLL
78468.3a9c: NtOpenDirectoryObject failed on \Driver: 0xc0000022
79468.3a9c: supR3HardenedWinFindAdversaries: 0x0
80468.3a9c: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox'
81468.3a9c: Calling main()
82468.3a9c: SUPR3HardenedMain: pszProgName=VirtualBoxVM fFlags=0x2
83468.3a9c: supR3HardenedWinInitAppBin(0x2): '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox'
84468.3a9c: SUPR3HardenedMain: Respawn #1
85468.3a9c: System32: \Device\HarddiskVolume10\Windows\System32
86468.3a9c: WinSxS: \Device\HarddiskVolume10\Windows\WinSxS
87468.3a9c: KnownDllPath: C:\WINDOWS\System32
88468.3a9c: supR3HardenedWinInit: Performing a limited self purification...
89468.3a9c: supHardNtVpScanVirtualMemory: enmKind=SELF_PURIFICATION
90468.3a9c: *0000000000000000-000000000098ffff 0x0001/0x0000 0x0000000
91468.3a9c: *0000000000990000-000000000099ffff 0x0004/0x0004 0x0040000
92468.3a9c: 00000000009a0000-00000000009affff 0x0001/0x0000 0x0000000
93468.3a9c: *00000000009b0000-00000000009ccfff 0x0002/0x0002 0x0040000
94468.3a9c: 00000000009cd000-00000000009cffff 0x0001/0x0000 0x0000000
95468.3a9c: *00000000009d0000-00000000009d3fff 0x0002/0x0002 0x0040000
96468.3a9c: 00000000009d4000-00000000009dffff 0x0001/0x0000 0x0000000
97468.3a9c: *00000000009e0000-00000000009e1fff 0x0004/0x0004 0x0020000
98468.3a9c: 00000000009e2000-00000000009fffff 0x0001/0x0000 0x0000000
99468.3a9c: *0000000000a00000-0000000000bfbfff 0x0000/0x0004 0x0020000
100468.3a9c: 0000000000bfc000-0000000000bfefff 0x0004/0x0004 0x0020000
101468.3a9c: 0000000000bff000-0000000000bfffff 0x0000/0x0004 0x0020000
102468.3a9c: *0000000000c00000-0000000000cb8fff 0x0000/0x0004 0x0020000
103468.3a9c: 0000000000cb9000-0000000000cbbfff 0x0104/0x0004 0x0020000
104468.3a9c: 0000000000cbc000-0000000000cfffff 0x0004/0x0004 0x0020000
105468.3a9c: *0000000000d00000-0000000000dc8fff 0x0002/0x0002 0x0040000
106468.3a9c: 0000000000dc9000-0000000000dcffff 0x0001/0x0000 0x0000000
107468.3a9c: *0000000000dd0000-0000000000dd1fff 0x0004/0x0004 0x0020000
108468.3a9c: 0000000000dd2000-0000000000e92fff 0x0000/0x0004 0x0020000
109468.3a9c: 0000000000e93000-0000000000eeffff 0x0001/0x0000 0x0000000
110468.3a9c: *0000000000ef0000-0000000000ef5fff 0x0004/0x0004 0x0020000
111468.3a9c: 0000000000ef6000-0000000000feffff 0x0000/0x0004 0x0020000
112468.3a9c: *0000000000ff0000-0000000001016fff 0x0004/0x0004 0x0020000
113468.3a9c: 0000000001017000-00000000010effff 0x0000/0x0004 0x0020000
114468.3a9c: 00000000010f0000-00000000011affff 0x0001/0x0000 0x0000000
115468.3a9c: *00000000011b0000-00000000011befff 0x0004/0x0004 0x0020000
116468.3a9c: 00000000011bf000-00000000011bffff 0x0000/0x0004 0x0020000
117468.3a9c: *00000000011c0000-00000000011cefff 0x0000/0x0004 0x0020000
118468.3a9c: 00000000011cf000-00000000013c6fff 0x0004/0x0004 0x0020000
119468.3a9c: 00000000013c7000-00000000013c7fff 0x0000/0x0004 0x0020000
120468.3a9c: 00000000013c8000-000000007ffdffff 0x0001/0x0000 0x0000000
121468.3a9c: *000000007ffe0000-000000007ffe0fff 0x0002/0x0002 0x0020000
122468.3a9c: 000000007ffe1000-000000007ffebfff 0x0001/0x0000 0x0000000
123468.3a9c: *000000007ffec000-000000007ffecfff 0x0002/0x0002 0x0020000
124468.3a9c: 000000007ffed000-00007ff47fafffff 0x0001/0x0000 0x0000000
125468.3a9c: *00007ff47fb00000-00007ff47fb04fff 0x0002/0x0002 0x0040000
126468.3a9c: 00007ff47fb05000-00007ff47fbfffff 0x0000/0x0002 0x0040000
127468.3a9c: *00007ff47fc00000-00007ff57fc1ffff 0x0000/0x0004 0x0020000
128468.3a9c: *00007ff57fc20000-00007ff581c1ffff 0x0000/0x0004 0x0020000
129468.3a9c: 00007ff581c20000-00007ff581c20fff 0x0004/0x0004 0x0020000
130468.3a9c: 00007ff581c21000-00007ff581c2ffff 0x0001/0x0000 0x0000000
131468.3a9c: *00007ff581c30000-00007ff581c30fff 0x0002/0x0002 0x0040000
132468.3a9c: 00007ff581c31000-00007ff581c3ffff 0x0001/0x0000 0x0000000
133468.3a9c: *00007ff581c40000-00007ff581c62fff 0x0002/0x0002 0x0040000
134468.3a9c: 00007ff581c63000-00007ff78b55ffff 0x0001/0x0000 0x0000000
135468.3a9c: *00007ff78b560000-00007ff78b560fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
136468.3a9c: 00007ff78b561000-00007ff78b5d7fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
137468.3a9c: 00007ff78b5d8000-00007ff78b5d8fff 0x0080/0x0080 0x1000000 \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
138468.3a9c: 00007ff78b5d9000-00007ff78b621fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
139468.3a9c: 00007ff78b622000-00007ff78b624fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
140468.3a9c: 00007ff78b625000-00007ff78b627fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
141468.3a9c: 00007ff78b628000-00007ff78b62afff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
142468.3a9c: 00007ff78b62b000-00007ff78b62bfff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
143468.3a9c: 00007ff78b62c000-00007ff78b62dfff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
144468.3a9c: 00007ff78b62e000-00007ff78b62efff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
145468.3a9c: 00007ff78b62f000-00007ff78b677fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
146468.3a9c: 00007ff78b678000-00007ffa2008ffff 0x0001/0x0000 0x0000000
147468.3a9c: *00007ffa20090000-00007ffa20090fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume10\Windows\System32\KernelBase.dll
148468.3a9c: 00007ffa20091000-00007ffa201a5fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume10\Windows\System32\KernelBase.dll
149468.3a9c: 00007ffa201a6000-00007ffa2031efff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume10\Windows\System32\KernelBase.dll
150468.3a9c: 00007ffa2031f000-00007ffa20322fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume10\Windows\System32\KernelBase.dll
151468.3a9c: 00007ffa20323000-00007ffa20323fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume10\Windows\System32\KernelBase.dll
152468.3a9c: 00007ffa20324000-00007ffa2035cfff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume10\Windows\System32\KernelBase.dll
153468.3a9c: 00007ffa2035d000-00007ffa20d3ffff 0x0001/0x0000 0x0000000
154468.3a9c: *00007ffa20d40000-00007ffa20d40fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume10\Windows\System32\kernel32.dll
155468.3a9c: 00007ffa20d41000-00007ffa20dbefff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume10\Windows\System32\kernel32.dll
156468.3a9c: 00007ffa20dbf000-00007ffa20df1fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume10\Windows\System32\kernel32.dll
157468.3a9c: 00007ffa20df2000-00007ffa20df2fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume10\Windows\System32\kernel32.dll
158468.3a9c: 00007ffa20df3000-00007ffa20df3fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume10\Windows\System32\kernel32.dll
159468.3a9c: 00007ffa20df4000-00007ffa20dfcfff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume10\Windows\System32\kernel32.dll
160468.3a9c: 00007ffa20dfd000-00007ffa2276ffff 0x0001/0x0000 0x0000000
161468.3a9c: *00007ffa22770000-00007ffa22770fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume10\Windows\System32\ntdll.dll
162468.3a9c: 00007ffa22771000-00007ffa2288bfff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume10\Windows\System32\ntdll.dll
163468.3a9c: 00007ffa2288c000-00007ffa228d4fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume10\Windows\System32\ntdll.dll
164468.3a9c: 00007ffa228d5000-00007ffa228d5fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume10\Windows\System32\ntdll.dll
165468.3a9c: 00007ffa228d6000-00007ffa228d7fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume10\Windows\System32\ntdll.dll
166468.3a9c: 00007ffa228d8000-00007ffa228e0fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume10\Windows\System32\ntdll.dll
167468.3a9c: 00007ffa228e1000-00007ffa22966fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume10\Windows\System32\ntdll.dll
168468.3a9c: 00007ffa22967000-00007ffffffeffff 0x0001/0x0000 0x0000000
169468.3a9c: kernel32.dll: timestamp 0x89f7051c (rc=VINF_SUCCESS)
170468.3a9c: kernelbase.dll: timestamp 0xe9b4a91b (rc=VINF_SUCCESS)
171468.3a9c: VirtualBoxVM.exe: timestamp 0x623a5dfe (rc=VINF_SUCCESS)
172468.3a9c: \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe: Signature #1/2: info status: 24202
173468.3a9c: '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe' has no imports
174468.3a9c: '\Device\HarddiskVolume10\Windows\System32\ntdll.dll' has no imports
175468.3a9c: supR3HardenedWinInit: SUPHARDNTVPKIND_SELF_PURIFICATION_LIMITED -> VINF_SUCCESS, cFixes=0
176468.3a9c: \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe: Signature #1/2: info status: 24202
177468.3a9c: '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe' has no imports
178468.3a9c: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe)
179468.3a9c: supR3HardNtEnableThreadCreationEx:
180468.3a9c: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007ffa227e4b00 pvNtTerminateThread=00007ffa2280d790
181468.3a9c: supR3HardenedWinDoReSpawn(1): New child 2f04.3124 [kernel32].
182468.3a9c: supR3HardNtChildGatherData: PebBaseAddress=0000000000fc3000 cbPeb=0x388
183468.3a9c: supR3HardNtPuChFindNtdll: uNtDllParentAddr=00007ffa22770000 uNtDllChildAddr=00007ffa22770000
184468.3a9c: supR3HardenedWinSetupChildInit: uLdrInitThunk=00007ffa227e4b00
185468.3a9c: supR3HardenedWinSetupChildInit: Initial context:
186 rax=0000000000000000 rbx=0000000000000000 rcx=00007ff78b567900 rdx=0000000000fc3000
187 rsi=0000000000000000 rdi=0000000000000000 r8 =0000000000000000 r9 =0000000000000000
188 r10=0000000000000000 r11=0000000000000000 r12=0000000000000000 r13=0000000000000000
189 r14=0000000000000000 r15=0000000000000000 P1=0000000000000000 P2=0000000000000000
190 rip=00007ffa227c2630 rsp=0000000000d8fb08 rbp=0000000000000000 ctxflags=0010001b
191 cs=0033 ss=002b ds=0000 es=0000 fs=0000 gs=0000 eflags=00000200 mxcrx=00001f80
192 P3=0000000000000000 P4=0000000000000000 P5=0000000000000000 P6=0000000000000000
193 dr0=0000000000000000 dr1=0000000000000000 dr2=0000000000000000 dr3=0000000000000000
194 dr6=0000000000000000 dr7=0000000000000000 vcr=0000000000000000 dcr=0000000000000000
195 lbt=0000000000000000 lbf=0000000000000000 lxt=0000000000000000 lxf=0000000000000000
196468.3a9c: supR3HardenedWinSetupChildInit: Start child.
197468.3a9c: supR3HardNtChildWaitFor: Found expected request 0 (PurifyChildAndCloseHandles) after 0 ms.
198468.3a9c: supR3HardNtChildPurify: Startup delay kludge #1/0: 257 ms, 31 sleeps
199468.3a9c: supHardNtVpScanVirtualMemory: enmKind=CHILD_PURIFICATION
200468.3a9c: *0000000000000000-0000000000c4ffff 0x0001/0x0000 0x0000000
201468.3a9c: *0000000000c50000-0000000000c6ffff 0x0004/0x0004 0x0020000
202468.3a9c: *0000000000c70000-0000000000c8cfff 0x0002/0x0002 0x0040000
203468.3a9c: 0000000000c8d000-0000000000c8ffff 0x0001/0x0000 0x0000000
204468.3a9c: *0000000000c90000-0000000000d8afff 0x0000/0x0004 0x0020000
205468.3a9c: 0000000000d8b000-0000000000d8dfff 0x0104/0x0004 0x0020000
206468.3a9c: 0000000000d8e000-0000000000d8ffff 0x0004/0x0004 0x0020000
207468.3a9c: *0000000000d90000-0000000000d93fff 0x0002/0x0002 0x0040000
208468.3a9c: 0000000000d94000-0000000000d9ffff 0x0001/0x0000 0x0000000
209468.3a9c: *0000000000da0000-0000000000da1fff 0x0004/0x0004 0x0020000
210468.3a9c: 0000000000da2000-0000000000dfffff 0x0001/0x0000 0x0000000
211468.3a9c: *0000000000e00000-0000000000fc2fff 0x0000/0x0004 0x0020000
212468.3a9c: 0000000000fc3000-0000000000fc5fff 0x0004/0x0004 0x0020000
213468.3a9c: 0000000000fc6000-0000000000ffffff 0x0000/0x0004 0x0020000
214468.3a9c: 0000000001000000-000000007ffdffff 0x0001/0x0000 0x0000000
215468.3a9c: *000000007ffe0000-000000007ffe0fff 0x0002/0x0002 0x0020000
216468.3a9c: 000000007ffe1000-000000007ffebfff 0x0001/0x0000 0x0000000
217468.3a9c: *000000007ffec000-000000007ffecfff 0x0002/0x0002 0x0020000
218468.3a9c: 000000007ffed000-00007ff5f2f4ffff 0x0001/0x0000 0x0000000
219468.3a9c: *00007ff5f2f50000-00007ff5f2f50fff 0x0002/0x0002 0x0040000
220468.3a9c: 00007ff5f2f51000-00007ff5f2f5ffff 0x0001/0x0000 0x0000000
221468.3a9c: *00007ff5f2f60000-00007ff5f2f82fff 0x0002/0x0002 0x0040000
222468.3a9c: 00007ff5f2f83000-00007ff78b55ffff 0x0001/0x0000 0x0000000
223468.3a9c: *00007ff78b560000-00007ff78b560fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
224468.3a9c: 00007ff78b561000-00007ff78b5d7fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
225468.3a9c: 00007ff78b5d8000-00007ff78b5d8fff 0x0080/0x0080 0x1000000 \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
226468.3a9c: 00007ff78b5d9000-00007ff78b621fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
227468.3a9c: 00007ff78b622000-00007ff78b622fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
228468.3a9c: 00007ff78b623000-00007ff78b623fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
229468.3a9c: 00007ff78b624000-00007ff78b628fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
230468.3a9c: 00007ff78b629000-00007ff78b629fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
231468.3a9c: 00007ff78b62a000-00007ff78b62afff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
232468.3a9c: 00007ff78b62b000-00007ff78b62efff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
233468.3a9c: 00007ff78b62f000-00007ff78b677fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
234468.3a9c: 00007ff78b678000-00007ffa2276ffff 0x0001/0x0000 0x0000000
235468.3a9c: *00007ffa22770000-00007ffa22770fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume10\Windows\System32\ntdll.dll
236468.3a9c: 00007ffa22771000-00007ffa2288bfff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume10\Windows\System32\ntdll.dll
237468.3a9c: 00007ffa2288c000-00007ffa228d4fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume10\Windows\System32\ntdll.dll
238468.3a9c: 00007ffa228d5000-00007ffa228e0fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume10\Windows\System32\ntdll.dll
239468.3a9c: 00007ffa228e1000-00007ffa228effff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume10\Windows\System32\ntdll.dll
240468.3a9c: 00007ffa228f0000-00007ffa228f0fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume10\Windows\System32\ntdll.dll
241468.3a9c: 00007ffa228f1000-00007ffa228f3fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume10\Windows\System32\ntdll.dll
242468.3a9c: 00007ffa228f4000-00007ffa22966fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume10\Windows\System32\ntdll.dll
243468.3a9c: 00007ffa22967000-00007ffffffeffff 0x0001/0x0000 0x0000000
244468.3a9c: supR3HardNtChildPurify: Done after 260 ms and 0 fixes (loop #0).
2452f04.3124: Log file opened: 6.1.34r150636 g_hStartupLog=0000000000000004 g_uNtVerCombined=0xa04a6400
2462f04.3124: supR3HardenedVmProcessInit: uNtDllAddr=00007ffa22770000 g_uNtVerCombined=0xa04a6400 (stack ~0000000000d8f598)
2472f04.3124: ntdll.dll: timestamp 0x77755782 (rc=VINF_SUCCESS)
2482f04.3124: New simple heap: #1 0000000001100000 LB 0x400000 (for 2060288 allocation)
249468.3a9c: supR3HardNtEnableThreadCreationEx:
2502f04.3124: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox'
2512f04.3124: System32: \Device\HarddiskVolume10\Windows\System32
2522f04.3124: WinSxS: \Device\HarddiskVolume10\Windows\WinSxS
2532f04.3124: KnownDllPath: C:\WINDOWS\System32
2542f04.3124: supR3HardenedVmProcessInit: Opening vboxdrv stub...
2552f04.3124: supR3HardenedVmProcessInit: Restoring LdrInitializeThunk...
2562f04.3124: supR3HardenedVmProcessInit: Returning to LdrInitializeThunk...
2572f04.3124: Registered Dll notification callback with NTDLL.
2582f04.3124: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume10\Windows\System32\kernel32.dll)
2592f04.3124: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume10\Windows\System32\kernel32.dll
2602f04.3124: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\KERNEL32.DLL (Input=KERNEL32.DLL, rcNtResolve=0xc0150008) *pfFlags=0xffffffff pwszSearchPath=0000000000004001:<flags> [calling]
2612f04.3124: supR3HardenedDllNotificationCallback: load 00007ffa20090000 LB 0x002cd000 C:\WINDOWS\System32\KERNELBASE.dll [fFlags=0x0]
2622f04.3124: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume10\Windows\System32\KernelBase.dll)
2632f04.3124: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume10\Windows\System32\KernelBase.dll
2642f04.3124: supR3HardenedDllNotificationCallback: load 00007ffa20d40000 LB 0x000bd000 C:\WINDOWS\System32\KERNEL32.DLL [fFlags=0x0]
2652f04.3124: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
2662f04.3124: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa20d40000 'C:\WINDOWS\System32\KERNEL32.DLL'
2672f04.3124: supR3HardenedDllNotificationCallback: load 00007ff78b560000 LB 0x00118000 C:\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe [fFlags=0x0]
2682f04.3124: \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe: Signature #1/2: info status: 24202
2692f04.3124: '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe' has no imports
2702f04.3124: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe)
2712f04.3124: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
2722f04.3124: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007ffa227e4b00 pvNtTerminateThread=00007ffa2280d790
273468.3a9c: supR3HardNtChildWaitFor: Found expected request 1 (CloseEvents) after 86 ms.
2742f04.3124: \SystemRoot\System32\ntdll.dll:
2752f04.3124: CreationTime: 2022-06-16T22:01:49.364128000Z
2762f04.3124: LastWriteTime: 2022-06-16T22:01:49.401215600Z
2772f04.3124: ChangeTime: 2022-06-17T07:02:35.069276700Z
2782f04.3124: FileAttributes: 0x20
2792f04.3124: Size: 0x1eef70
2802f04.3124: NT Headers: 0xe8
2812f04.3124: Timestamp: 0x77755782
2822f04.3124: Machine: 0x8664 - amd64
2832f04.3124: Timestamp: 0x77755782
2842f04.3124: Image Version: 10.0
2852f04.3124: SizeOfImage: 0x1f7000 (2060288)
2862f04.3124: Resource Dir: 0x185000 LB 0x700a0
2872f04.3124: [Version info resource found at 0xd8! (ID/Name: 0x1; SubID/SubName: 0x409)]
2882f04.3124: [Raw version resource data: 0x1850f0 LB 0x380, codepage 0x0 (reserved 0x0)]
2892f04.3124: ProductName: Microsoft® Windows® Operating System
2902f04.3124: ProductVersion: 10.0.19041.1741
2912f04.3124: FileVersion: 10.0.19041.1741 (WinBuild.160101.0800)
2922f04.3124: FileDescription: NT Layer DLL
2932f04.3124: \SystemRoot\System32\kernel32.dll:
2942f04.3124: CreationTime: 2022-06-16T22:01:53.274437400Z
2952f04.3124: LastWriteTime: 2022-06-16T22:01:53.288289000Z
2962f04.3124: ChangeTime: 2022-06-17T07:02:33.416391600Z
2972f04.3124: FileAttributes: 0x20
2982f04.3124: Size: 0xbb038
2992f04.3124: NT Headers: 0xe8
3002f04.3124: Timestamp: 0x89f7051c
3012f04.3124: Machine: 0x8664 - amd64
3022f04.3124: Timestamp: 0x89f7051c
3032f04.3124: Image Version: 10.0
3042f04.3124: SizeOfImage: 0xbd000 (774144)
3052f04.3124: Resource Dir: 0xbb000 LB 0x520
3062f04.3124: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
3072f04.3124: [Raw version resource data: 0xbb0b0 LB 0x3a4, codepage 0x0 (reserved 0x0)]
3082f04.3124: ProductName: Microsoft® Windows® Operating System
3092f04.3124: ProductVersion: 10.0.19041.1741
3102f04.3124: FileVersion: 10.0.19041.1741 (WinBuild.160101.0800)
3112f04.3124: FileDescription: Windows NT BASE API Client DLL
3122f04.3124: \SystemRoot\System32\KernelBase.dll:
3132f04.3124: CreationTime: 2022-06-16T22:01:49.962633600Z
3142f04.3124: LastWriteTime: 2022-06-16T22:01:50.019984400Z
3152f04.3124: ChangeTime: 2022-06-17T07:02:34.683195800Z
3162f04.3124: FileAttributes: 0x20
3172f04.3124: Size: 0x2cf630
3182f04.3124: NT Headers: 0xf0
3192f04.3124: Timestamp: 0xe9b4a91b
3202f04.3124: Machine: 0x8664 - amd64
3212f04.3124: Timestamp: 0xe9b4a91b
3222f04.3124: Image Version: 10.0
3232f04.3124: SizeOfImage: 0x2cd000 (2936832)
3242f04.3124: Resource Dir: 0x2a4000 LB 0x548
3252f04.3124: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
3262f04.3124: [Raw version resource data: 0x2a40b0 LB 0x3bc, codepage 0x0 (reserved 0x0)]
3272f04.3124: ProductName: Microsoft® Windows® Operating System
3282f04.3124: ProductVersion: 10.0.19041.1741
3292f04.3124: FileVersion: 10.0.19041.1741 (WinBuild.160101.0800)
3302f04.3124: FileDescription: Windows NT BASE API Client DLL
3312f04.3124: \SystemRoot\System32\apisetschema.dll:
3322f04.3124: CreationTime: 2019-12-07T09:08:13.518339400Z
3332f04.3124: LastWriteTime: 2019-12-07T09:08:13.518339400Z
3342f04.3124: ChangeTime: 2022-06-16T22:02:18.421443400Z
3352f04.3124: FileAttributes: 0x20
3362f04.3124: Size: 0x1f538
3372f04.3124: NT Headers: 0xd0
3382f04.3124: Timestamp: 0x31288ce0
3392f04.3124: Machine: 0x8664 - amd64
3402f04.3124: Timestamp: 0x31288ce0
3412f04.3124: Image Version: 10.0
3422f04.3124: SizeOfImage: 0x20000 (131072)
3432f04.3124: Resource Dir: 0x1f000 LB 0x408
3442f04.3124: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
3452f04.3124: [Raw version resource data: 0x1f060 LB 0x3a8, codepage 0x0 (reserved 0x0)]
3462f04.3124: ProductName: Microsoft® Windows® Operating System
3472f04.3124: ProductVersion: 10.0.19041.1
3482f04.3124: FileVersion: 10.0.19041.1 (WinBuild.160101.0800)
3492f04.3124: FileDescription: ApiSet Schema DLL
3502f04.3124: NtOpenDirectoryObject failed on \Driver: 0xc0000022
3512f04.3124: supR3HardenedWinFindAdversaries: 0x0
3522f04.3124: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox'
3532f04.3124: Calling main()
3542f04.3124: SUPR3HardenedMain: pszProgName=VirtualBoxVM fFlags=0x2
3552f04.3124: supR3HardenedWinInitAppBin(0x2): '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox'
3562f04.3124: \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe: Signature #1/2: info status: 24202
3572f04.3124: '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe' has no imports
3582f04.3124: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe)
3592f04.3124: SUPR3HardenedMain: Respawn #2
3602f04.3124: supR3HardNtEnableThreadCreationEx:
3612f04.3124: supR3HardenedDllNotificationCallback: load 00007ffa20a20000 LB 0x00125000 C:\WINDOWS\System32\RPCRT4.dll [fFlags=0x0]
3622f04.3124: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume10\Windows\System32\rpcrt4.dll)
3632f04.3124: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume10\Windows\System32\rpcrt4.dll
3642f04.3124: supR3HardenedDllNotificationCallback: load 00007ffa21160000 LB 0x0009c000 C:\WINDOWS\System32\sechost.dll [fFlags=0x0]
3652f04.3124: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'rpcrt4.dll'.
3662f04.3124: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume10\Windows\System32\sechost.dll)
3672f04.3124: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume10\Windows\System32\sechost.dll
3682f04.3124: '\Device\HarddiskVolume10\Windows\System32\ntdll.dll' has no imports
3692f04.3124: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume10\Windows\System32\ntdll.dll)
3702f04.3124: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume10\Windows\System32\ntdll.dll
3712f04.3124: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
3722f04.3124: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume10\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
3732f04.3124: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
3742f04.3124: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\ntdll.dll (Input=ntdll.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
3752f04.3124: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa22770000 'C:\WINDOWS\System32\ntdll.dll'
3762f04.3124: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007ffa227e4b00 pvNtTerminateThread=00007ffa2280d790
3772f04.3124: supR3HardenedWinDoReSpawn(2): New child 1ed0.47dc [kernel32].
3782f04.3124: supR3HardenedWinReSpawn: NtSetInformationThread/ThreadHideFromDebugger failed: 0xc0000022 (harmless)
3792f04.3124: supR3HardNtChildGatherData: PebBaseAddress=0000000000e48000 cbPeb=0x388
3802f04.3124: supR3HardNtPuChFindNtdll: uNtDllParentAddr=00007ffa22770000 uNtDllChildAddr=00007ffa22770000
3812f04.3124: supR3HardenedWinSetupChildInit: uLdrInitThunk=00007ffa227e4b00
3822f04.3124: supR3HardenedWinSetupChildInit: Initial context:
383 rax=0000000000000000 rbx=0000000000000000 rcx=00007ff78b567900 rdx=0000000000e48000
384 rsi=0000000000000000 rdi=0000000000000000 r8 =0000000000000000 r9 =0000000000000000
385 r10=0000000000000000 r11=0000000000000000 r12=0000000000000000 r13=0000000000000000
386 r14=0000000000000000 r15=0000000000000000 P1=0000000000000000 P2=0000000000000000
387 rip=00007ffa227c2630 rsp=0000000000dafd38 rbp=0000000000000000 ctxflags=0010001b
388 cs=0033 ss=002b ds=0000 es=0000 fs=0000 gs=0000 eflags=00000200 mxcrx=00001f80
389 P3=0000000000000000 P4=0000000000000000 P5=0000000000000000 P6=0000000000000000
390 dr0=0000000000000000 dr1=0000000000000000 dr2=0000000000000000 dr3=0000000000000000
391 dr6=0000000000000000 dr7=0000000000000000 vcr=0000000000000000 dcr=0000000000000000
392 lbt=0000000000000000 lbf=0000000000000000 lxt=0000000000000000 lxf=0000000000000000
3932f04.3124: kernel32.dll: timestamp 0x89f7051c (rc=VINF_SUCCESS)
3942f04.3124: supR3HardenedWinSetupChildInit: Start child.
3952f04.3124: supR3HardNtChildWaitFor: Found expected request 0 (PurifyChildAndCloseHandles) after 0 ms.
3962f04.3124: supR3HardNtChildPurify: Startup delay kludge #1/0: 264 ms, 32 sleeps
3972f04.3124: supHardNtVpScanVirtualMemory: enmKind=CHILD_PURIFICATION
3982f04.3124: *0000000000000000-0000000000c6ffff 0x0001/0x0000 0x0000000
3992f04.3124: *0000000000c70000-0000000000c8ffff 0x0004/0x0004 0x0020000
4002f04.3124: *0000000000c90000-0000000000cacfff 0x0002/0x0002 0x0040000
4012f04.3124: 0000000000cad000-0000000000caffff 0x0001/0x0000 0x0000000
4022f04.3124: *0000000000cb0000-0000000000daafff 0x0000/0x0004 0x0020000
4032f04.3124: 0000000000dab000-0000000000dadfff 0x0104/0x0004 0x0020000
4042f04.3124: 0000000000dae000-0000000000daffff 0x0004/0x0004 0x0020000
4052f04.3124: *0000000000db0000-0000000000db3fff 0x0002/0x0002 0x0040000
4062f04.3124: 0000000000db4000-0000000000dbffff 0x0001/0x0000 0x0000000
4072f04.3124: *0000000000dc0000-0000000000dc1fff 0x0004/0x0004 0x0020000
4082f04.3124: 0000000000dc2000-0000000000dfffff 0x0001/0x0000 0x0000000
4092f04.3124: *0000000000e00000-0000000000e47fff 0x0000/0x0004 0x0020000
4102f04.3124: 0000000000e48000-0000000000e4afff 0x0004/0x0004 0x0020000
4112f04.3124: 0000000000e4b000-0000000000ffffff 0x0000/0x0004 0x0020000
4122f04.3124: 0000000001000000-000000007ffdffff 0x0001/0x0000 0x0000000
4132f04.3124: *000000007ffe0000-000000007ffe0fff 0x0002/0x0002 0x0020000
4142f04.3124: 000000007ffe1000-000000007ffebfff 0x0001/0x0000 0x0000000
4152f04.3124: *000000007ffec000-000000007ffecfff 0x0002/0x0002 0x0020000
4162f04.3124: 000000007ffed000-00007ff562bfffff 0x0001/0x0000 0x0000000
4172f04.3124: *00007ff562c00000-00007ff562c00fff 0x0002/0x0002 0x0040000
4182f04.3124: 00007ff562c01000-00007ff562c0ffff 0x0001/0x0000 0x0000000
4192f04.3124: *00007ff562c10000-00007ff562c32fff 0x0002/0x0002 0x0040000
4202f04.3124: 00007ff562c33000-00007ff78b55ffff 0x0001/0x0000 0x0000000
4212f04.3124: *00007ff78b560000-00007ff78b560fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
4222f04.3124: 00007ff78b561000-00007ff78b5d7fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
4232f04.3124: 00007ff78b5d8000-00007ff78b5d8fff 0x0080/0x0080 0x1000000 \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
4242f04.3124: 00007ff78b5d9000-00007ff78b621fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
4252f04.3124: 00007ff78b622000-00007ff78b622fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
4262f04.3124: 00007ff78b623000-00007ff78b623fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
4272f04.3124: 00007ff78b624000-00007ff78b628fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
4282f04.3124: 00007ff78b629000-00007ff78b629fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
4292f04.3124: 00007ff78b62a000-00007ff78b62afff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
4302f04.3124: 00007ff78b62b000-00007ff78b62efff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
4312f04.3124: 00007ff78b62f000-00007ff78b677fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
4322f04.3124: 00007ff78b678000-00007ffa2276ffff 0x0001/0x0000 0x0000000
4332f04.3124: *00007ffa22770000-00007ffa22770fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume10\Windows\System32\ntdll.dll
4342f04.3124: 00007ffa22771000-00007ffa2288bfff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume10\Windows\System32\ntdll.dll
4352f04.3124: 00007ffa2288c000-00007ffa228d4fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume10\Windows\System32\ntdll.dll
4362f04.3124: 00007ffa228d5000-00007ffa228e0fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume10\Windows\System32\ntdll.dll
4372f04.3124: 00007ffa228e1000-00007ffa228effff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume10\Windows\System32\ntdll.dll
4382f04.3124: 00007ffa228f0000-00007ffa228f0fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume10\Windows\System32\ntdll.dll
4392f04.3124: 00007ffa228f1000-00007ffa228f3fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume10\Windows\System32\ntdll.dll
4402f04.3124: 00007ffa228f4000-00007ffa22966fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume10\Windows\System32\ntdll.dll
4412f04.3124: 00007ffa22967000-00007ffffffeffff 0x0001/0x0000 0x0000000
4422f04.3124: VirtualBoxVM.exe: timestamp 0x623a5dfe (rc=VINF_SUCCESS)
4432f04.3124: \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe: Signature #1/2: info status: 24202
4442f04.3124: '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe' has no imports
4452f04.3124: '\Device\HarddiskVolume10\Windows\System32\ntdll.dll' has no imports
4462f04.3124: supR3HardNtChildPurify: Done after 298 ms and 0 fixes (loop #0).
4471ed0.47dc: Log file opened: 6.1.34r150636 g_hStartupLog=0000000000000004 g_uNtVerCombined=0xa04a6400
4481ed0.47dc: supR3HardenedVmProcessInit: uNtDllAddr=00007ffa22770000 g_uNtVerCombined=0xa04a6400 (stack ~0000000000daf7c8)
4491ed0.47dc: ntdll.dll: timestamp 0x77755782 (rc=VINF_SUCCESS)
4501ed0.47dc: New simple heap: #1 0000000001100000 LB 0x400000 (for 2060288 allocation)
4512f04.3124: supR3HardenedEarlyCompact: Removed heap 1 (0x00000001100000 LB 0x400000)
4522f04.3124: supR3HardNtEnableThreadCreationEx:
4531ed0.47dc: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox'
4541ed0.47dc: System32: \Device\HarddiskVolume10\Windows\System32
4551ed0.47dc: WinSxS: \Device\HarddiskVolume10\Windows\WinSxS
4561ed0.47dc: KnownDllPath: C:\WINDOWS\System32
4571ed0.47dc: supR3HardenedVmProcessInit: Opening vboxdrv...
4581ed0.47dc: supR3HardenedVmProcessInit: Restoring LdrInitializeThunk...
4591ed0.47dc: supR3HardenedVmProcessInit: Returning to LdrInitializeThunk...
4601ed0.47dc: Registered Dll notification callback with NTDLL.
4611ed0.47dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume10\Windows\System32\kernel32.dll)
4621ed0.47dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume10\Windows\System32\kernel32.dll
4631ed0.47dc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\KERNEL32.DLL (Input=KERNEL32.DLL, rcNtResolve=0xc0150008) *pfFlags=0xffffffff pwszSearchPath=0000000000004001:<flags> [calling]
4641ed0.47dc: supR3HardenedDllNotificationCallback: load 00007ffa20090000 LB 0x002cd000 C:\WINDOWS\System32\KERNELBASE.dll [fFlags=0x0]
4651ed0.47dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume10\Windows\System32\KernelBase.dll)
4661ed0.47dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume10\Windows\System32\KernelBase.dll
4671ed0.47dc: supR3HardenedDllNotificationCallback: load 00007ffa20d40000 LB 0x000bd000 C:\WINDOWS\System32\KERNEL32.DLL [fFlags=0x0]
4681ed0.47dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
4691ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa20d40000 'C:\WINDOWS\System32\KERNEL32.DLL'
4701ed0.47dc: supR3HardenedDllNotificationCallback: load 00007ff78b560000 LB 0x00118000 C:\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe [fFlags=0x0]
4711ed0.47dc: \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe: Signature #1/2: info status: 24202
4721ed0.47dc: '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe' has no imports
4731ed0.47dc: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe)
4741ed0.47dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
4751ed0.47dc: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007ffa227e4b00 pvNtTerminateThread=00007ffa2280d790
4762f04.3124: supR3HardNtChildWaitFor: Found expected request 1 (CloseEvents) after 99 ms.
4771ed0.47dc: \SystemRoot\System32\ntdll.dll:
4781ed0.47dc: CreationTime: 2022-06-16T22:01:49.364128000Z
4791ed0.47dc: LastWriteTime: 2022-06-16T22:01:49.401215600Z
4801ed0.47dc: ChangeTime: 2022-06-17T07:02:35.069276700Z
4811ed0.47dc: FileAttributes: 0x20
4821ed0.47dc: Size: 0x1eef70
4831ed0.47dc: NT Headers: 0xe8
4841ed0.47dc: Timestamp: 0x77755782
4851ed0.47dc: Machine: 0x8664 - amd64
4861ed0.47dc: Timestamp: 0x77755782
4871ed0.47dc: Image Version: 10.0
4881ed0.47dc: SizeOfImage: 0x1f7000 (2060288)
4891ed0.47dc: Resource Dir: 0x185000 LB 0x700a0
4901ed0.47dc: [Version info resource found at 0xd8! (ID/Name: 0x1; SubID/SubName: 0x409)]
4911ed0.47dc: [Raw version resource data: 0x1850f0 LB 0x380, codepage 0x0 (reserved 0x0)]
4921ed0.47dc: ProductName: Microsoft® Windows® Operating System
4931ed0.47dc: ProductVersion: 10.0.19041.1741
4941ed0.47dc: FileVersion: 10.0.19041.1741 (WinBuild.160101.0800)
4951ed0.47dc: FileDescription: NT Layer DLL
4961ed0.47dc: \SystemRoot\System32\kernel32.dll:
4971ed0.47dc: CreationTime: 2022-06-16T22:01:53.274437400Z
4981ed0.47dc: LastWriteTime: 2022-06-16T22:01:53.288289000Z
4991ed0.47dc: ChangeTime: 2022-06-17T07:02:33.416391600Z
5001ed0.47dc: FileAttributes: 0x20
5011ed0.47dc: Size: 0xbb038
5021ed0.47dc: NT Headers: 0xe8
5031ed0.47dc: Timestamp: 0x89f7051c
5041ed0.47dc: Machine: 0x8664 - amd64
5051ed0.47dc: Timestamp: 0x89f7051c
5061ed0.47dc: Image Version: 10.0
5071ed0.47dc: SizeOfImage: 0xbd000 (774144)
5081ed0.47dc: Resource Dir: 0xbb000 LB 0x520
5091ed0.47dc: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
5101ed0.47dc: [Raw version resource data: 0xbb0b0 LB 0x3a4, codepage 0x0 (reserved 0x0)]
5111ed0.47dc: ProductName: Microsoft® Windows® Operating System
5121ed0.47dc: ProductVersion: 10.0.19041.1741
5131ed0.47dc: FileVersion: 10.0.19041.1741 (WinBuild.160101.0800)
5141ed0.47dc: FileDescription: Windows NT BASE API Client DLL
5151ed0.47dc: \SystemRoot\System32\KernelBase.dll:
5161ed0.47dc: CreationTime: 2022-06-16T22:01:49.962633600Z
5171ed0.47dc: LastWriteTime: 2022-06-16T22:01:50.019984400Z
5181ed0.47dc: ChangeTime: 2022-06-17T07:02:34.683195800Z
5191ed0.47dc: FileAttributes: 0x20
5201ed0.47dc: Size: 0x2cf630
5211ed0.47dc: NT Headers: 0xf0
5221ed0.47dc: Timestamp: 0xe9b4a91b
5231ed0.47dc: Machine: 0x8664 - amd64
5241ed0.47dc: Timestamp: 0xe9b4a91b
5251ed0.47dc: Image Version: 10.0
5261ed0.47dc: SizeOfImage: 0x2cd000 (2936832)
5271ed0.47dc: Resource Dir: 0x2a4000 LB 0x548
5281ed0.47dc: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
5291ed0.47dc: [Raw version resource data: 0x2a40b0 LB 0x3bc, codepage 0x0 (reserved 0x0)]
5301ed0.47dc: ProductName: Microsoft® Windows® Operating System
5311ed0.47dc: ProductVersion: 10.0.19041.1741
5321ed0.47dc: FileVersion: 10.0.19041.1741 (WinBuild.160101.0800)
5331ed0.47dc: FileDescription: Windows NT BASE API Client DLL
5341ed0.47dc: \SystemRoot\System32\apisetschema.dll:
5351ed0.47dc: CreationTime: 2019-12-07T09:08:13.518339400Z
5361ed0.47dc: LastWriteTime: 2019-12-07T09:08:13.518339400Z
5371ed0.47dc: ChangeTime: 2022-06-16T22:02:18.421443400Z
5381ed0.47dc: FileAttributes: 0x20
5391ed0.47dc: Size: 0x1f538
5401ed0.47dc: NT Headers: 0xd0
5411ed0.47dc: Timestamp: 0x31288ce0
5421ed0.47dc: Machine: 0x8664 - amd64
5431ed0.47dc: Timestamp: 0x31288ce0
5441ed0.47dc: Image Version: 10.0
5451ed0.47dc: SizeOfImage: 0x20000 (131072)
5461ed0.47dc: Resource Dir: 0x1f000 LB 0x408
5471ed0.47dc: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
5481ed0.47dc: [Raw version resource data: 0x1f060 LB 0x3a8, codepage 0x0 (reserved 0x0)]
5491ed0.47dc: ProductName: Microsoft® Windows® Operating System
5501ed0.47dc: ProductVersion: 10.0.19041.1
5511ed0.47dc: FileVersion: 10.0.19041.1 (WinBuild.160101.0800)
5521ed0.47dc: FileDescription: ApiSet Schema DLL
5531ed0.47dc: NtOpenDirectoryObject failed on \Driver: 0xc0000022
5541ed0.47dc: supR3HardenedWinFindAdversaries: 0x0
5551ed0.47dc: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox'
5561ed0.47dc: Calling main()
5571ed0.47dc: SUPR3HardenedMain: pszProgName=VirtualBoxVM fFlags=0x2
5581ed0.47dc: supR3HardenedWinInitAppBin(0x2): '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox'
5591ed0.47dc: \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe: Signature #1/2: info status: 24202
5601ed0.47dc: '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe' has no imports
5611ed0.47dc: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe)
5621ed0.47dc: SUPR3HardenedMain: Final process, opening VBoxDrv...
5631ed0.47dc: supR3HardenedEarlyCompact: Removed heap 1 (0x00000001100000 LB 0x400000)
5641ed0.47dc: supR3HardNtEnableThreadCreationEx:
5651ed0.47dc: \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VBoxSupLib.dll: Signature #1/2: info status: 24202
5661ed0.47dc: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VBoxSupLib.dll)
5671ed0.47dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VBoxSupLib.dll
5681ed0.47dc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
5691ed0.47dc: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VBoxSupLib.dll [lacks WinVerifyTrust]
5701ed0.47dc: supR3HardenedDllNotificationCallback: load 00007ffa17440000 LB 0x00005000 C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL [fFlags=0x0]
5711ed0.47dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VBoxSupLib.dll [lacks WinVerifyTrust]
5721ed0.47dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VBoxSupLib.dll [lacks WinVerifyTrust]
5731ed0.47dc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
5741ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa17440000 'C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL'
5751ed0.47dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VBoxSupLib.dll [lacks WinVerifyTrust]
5761ed0.47dc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
5771ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa17440000 'C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL'
5781ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa17440000 'C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL'
5791ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
5801ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #29 'rpcrt4.dll'.
5811ed0.47dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume10\Windows\System32\wintrust.dll)
5821ed0.47dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume10\Windows\System32\wintrust.dll
5831ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
5841ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume10\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
5851ed0.47dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume10\Windows\System32\rpcrt4.dll)
5861ed0.47dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume10\Windows\System32\rpcrt4.dll
5871ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
5881ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume10\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
5891ed0.47dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume10\Windows\System32\msvcrt.dll)
5901ed0.47dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume10\Windows\System32\msvcrt.dll
5911ed0.47dc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\Wintrust.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
5921ed0.47dc: supR3HardenedDllNotificationCallback: load 00007ffa21f90000 LB 0x0009e000 C:\WINDOWS\System32\msvcrt.dll [fFlags=0x0]
5931ed0.47dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
5941ed0.47dc: supR3HardenedDllNotificationCallback: load 00007ffa20a20000 LB 0x00125000 C:\WINDOWS\System32\RPCRT4.dll [fFlags=0x0]
5951ed0.47dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
5961ed0.47dc: supR3HardenedDllNotificationCallback: load 00007ffa20660000 LB 0x00067000 C:\WINDOWS\System32\Wintrust.dll [fFlags=0x0]
5971ed0.47dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
5981ed0.47dc: supR3HardenedDllNotificationCallback: load 00007ffa206d0000 LB 0x00100000 C:\WINDOWS\System32\ucrtbase.dll [fFlags=0x0]
5991ed0.47dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume10\Windows\System32\ucrtbase.dll)
6001ed0.47dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume10\Windows\System32\ucrtbase.dll
6011ed0.47dc: supR3HardenedDllNotificationCallback: load 00007ffa1fe90000 LB 0x00156000 C:\WINDOWS\System32\CRYPT32.dll [fFlags=0x0]
6021ed0.47dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume10\Windows\System32\crypt32.dll)
6031ed0.47dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume10\Windows\System32\crypt32.dll
6041ed0.47dc: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-synch-l1-2-0) -> 0x0, fPresent=1
6051ed0.47dc: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-synch-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
6061ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa20090000 'api-ms-win-core-synch-l1-2-0'
6071ed0.47dc: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-fibers-l1-1-1) -> 0x0, fPresent=1
6081ed0.47dc: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-fibers-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
6091ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa20090000 'api-ms-win-core-fibers-l1-1-1'
6101ed0.47dc: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-fibers-l1-1-1) -> 0x0, fPresent=1
6111ed0.47dc: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-fibers-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
6121ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa20090000 'api-ms-win-core-fibers-l1-1-1'
6131ed0.47dc: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-synch-l1-2-0) -> 0x0, fPresent=1
6141ed0.47dc: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-synch-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
6151ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa20090000 'api-ms-win-core-synch-l1-2-0'
6161ed0.47dc: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-localization-l1-2-1) -> 0x0, fPresent=1
6171ed0.47dc: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-l1-2-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
6181ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa20090000 'api-ms-win-core-localization-l1-2-1'
6191ed0.47dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume10\Windows\System32\msasn1.dll)
6201ed0.47dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume10\Windows\System32\msasn1.dll
6211ed0.47dc: supR3HardenedDllNotificationCallback: load 00007ffa1f9b0000 LB 0x00012000 C:\WINDOWS\SYSTEM32\MSASN1.dll [fFlags=0x0]
6221ed0.47dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\msasn1.dll [lacks WinVerifyTrust]
6231ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa20660000 'C:\WINDOWS\system32\Wintrust.dll'
6241ed0.47dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume10\Windows\System32\bcrypt.dll)
6251ed0.47dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume10\Windows\System32\bcrypt.dll
6261ed0.47dc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\bcrypt.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
6271ed0.47dc: supR3HardenedDllNotificationCallback: load 00007ffa20460000 LB 0x00027000 C:\WINDOWS\System32\bcrypt.dll [fFlags=0x0]
6281ed0.47dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\bcrypt.dll [lacks WinVerifyTrust]
6291ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa20460000 'C:\WINDOWS\system32\bcrypt.dll'
6301ed0.47dc: bcrypt.dll loaded at 00007ffa20460000, BCryptOpenAlgorithmProvider at 00007ffa204651e0, preloading providers:
6311ed0.47dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume10\Windows\System32\bcryptprimitives.dll)
6321ed0.47dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume10\Windows\System32\bcryptprimitives.dll
6331ed0.47dc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\bcryptprimitives.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
6341ed0.47dc: supR3HardenedDllNotificationCallback: load 00007ffa205a0000 LB 0x00082000 C:\WINDOWS\System32\bcryptprimitives.dll [fFlags=0x0]
6351ed0.47dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\bcryptprimitives.dll [lacks WinVerifyTrust]
6361ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa205a0000 'C:\WINDOWS\system32\bcryptprimitives.dll'
6371ed0.47dc: BCryptOpenAlgorithmProvider(,'MD2',0,0) -> 0x0 (hAlgo=0000000001570270)
6381ed0.47dc: BCryptOpenAlgorithmProvider(,'MD4',0,0) -> 0x0 (hAlgo=0000000001571140)
6391ed0.47dc: BCryptOpenAlgorithmProvider(,'MD5',0,0) -> 0x0 (hAlgo=0000000001571c70)
6401ed0.47dc: BCryptOpenAlgorithmProvider(,'SHA1',0,0) -> 0x0 (hAlgo=0000000001571f90)
6411ed0.47dc: BCryptOpenAlgorithmProvider(,'SHA256',0,0) -> 0x0 (hAlgo=00000000015722b0)
6421ed0.47dc: BCryptOpenAlgorithmProvider(,'SHA512',0,0) -> 0x0 (hAlgo=00000000015725d0)
6431ed0.47dc: BCryptOpenAlgorithmProvider(,'RSA',0,0) -> 0x0 (hAlgo=00000000015728f0)
6441ed0.47dc: BCryptOpenAlgorithmProvider(,'DSA',0,0) -> 0x0 (hAlgo=0000000001572c10)
6451ed0.47dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume10\Windows\System32\cryptsp.dll)
6461ed0.47dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume10\Windows\System32\cryptsp.dll
6471ed0.47dc: supR3HardenedDllNotificationCallback: load 00007ffa1f780000 LB 0x00018000 C:\WINDOWS\SYSTEM32\CRYPTSP.dll [fFlags=0x0]
6481ed0.47dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\cryptsp.dll [lacks WinVerifyTrust]
6491ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #18 'bcrypt.dll'.
6501ed0.47dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume10\Windows\System32\rsaenh.dll)
6511ed0.47dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume10\Windows\System32\rsaenh.dll
6521ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcrypt.dll'...
6531ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcrypt.dll' -> '\Device\HarddiskVolume10\Windows\System32\bcrypt.dll' [rcNtRedir=0xc0150008]
6541ed0.47dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\bcrypt.dll [lacks WinVerifyTrust]
6551ed0.47dc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
6561ed0.47dc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
6571ed0.47dc: supR3HardenedDllNotificationCallback: load 00007ffa1eec0000 LB 0x00034000 C:\WINDOWS\system32\rsaenh.dll [fFlags=0x0]
6581ed0.47dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
6591ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1eec0000 'C:\WINDOWS\system32\rsaenh.dll'
6601ed0.47dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume10\Windows\System32\cryptbase.dll)
6611ed0.47dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume10\Windows\System32\cryptbase.dll
6621ed0.47dc: supR3HardenedDllNotificationCallback: load 00007ffa1f6b0000 LB 0x0000c000 C:\WINDOWS\SYSTEM32\CRYPTBASE.dll [fFlags=0x0]
6631ed0.47dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\cryptbase.dll [lacks WinVerifyTrust]
6641ed0.47dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
6651ed0.47dc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\kernel32.dll (Input=kernel32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
6661ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa20d40000 'C:\WINDOWS\System32\kernel32.dll'
6671ed0.47dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
6681ed0.47dc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\WINTRUST.DLL (Input=WINTRUST.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
6691ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa20660000 'C:\WINDOWS\System32\WINTRUST.DLL'
6701ed0.47dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\crypt32.dll [lacks WinVerifyTrust]
6711ed0.47dc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\CRYPT32.dll (rcNtResolve=0xc0150008) *pfFlags=0x2 pwszSearchPath=0000000000000001:<flags> [calling]
6721ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1fe90000 'C:\WINDOWS\System32\CRYPT32.dll'
6731ed0.47dc: supR3HardenedDllNotificationCallback: load 00007ffa21af0000 LB 0x0001d000 C:\WINDOWS\System32\imagehlp.dll [fFlags=0x0]
6741ed0.47dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume10\Windows\System32\imagehlp.dll)
6751ed0.47dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume10\Windows\System32\imagehlp.dll
6761ed0.47dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
6771ed0.47dc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
6781ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1eec0000 'C:\WINDOWS\system32\rsaenh.dll'
6791ed0.47dc: supR3HardenedDllNotificationCallback: load 00007ffa21160000 LB 0x0009c000 C:\WINDOWS\System32\sechost.dll [fFlags=0x0]
6801ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'rpcrt4.dll'.
6811ed0.47dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume10\Windows\System32\sechost.dll)
6821ed0.47dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume10\Windows\System32\sechost.dll
6831ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
6841ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'rpcrt4.dll'.
6851ed0.47dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume10\Windows\System32\gpapi.dll)
6861ed0.47dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume10\Windows\System32\gpapi.dll
6871ed0.47dc: supR3HardenedDllNotificationCallback: load 00007ffa1e720000 LB 0x00023000 C:\WINDOWS\SYSTEM32\gpapi.dll [fFlags=0x0]
6881ed0.47dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\gpapi.dll [lacks WinVerifyTrust]
6891ed0.47dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume10\Windows\System32\profapi.dll)
6901ed0.47dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume10\Windows\System32\profapi.dll
6911ed0.47dc: supR3HardenedDllNotificationCallback: load 00007ffa1fdd0000 LB 0x0001f000 C:\WINDOWS\SYSTEM32\profapi.dll [fFlags=0x0]
6921ed0.47dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\profapi.dll [lacks WinVerifyTrust]
6931ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
6941ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'crypt32.dll'.
6951ed0.47dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume10\Windows\System32\cryptnet.dll)
6961ed0.47dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume10\Windows\System32\cryptnet.dll
6971ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'crypt32.dll'...
6981ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'crypt32.dll' -> '\Device\HarddiskVolume10\Windows\System32\crypt32.dll' [rcNtRedir=0xc0150008]
6991ed0.47dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\crypt32.dll [lacks WinVerifyTrust]
7001ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
7011ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume10\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
7021ed0.47dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
7031ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
7041ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume10\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
7051ed0.47dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
7061ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
7071ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume10\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
7081ed0.47dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
7091ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
7101ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume10\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
7111ed0.47dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
7121ed0.47dc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\cryptnet.dll (Input=cryptnet.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
7131ed0.47dc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
7141ed0.47dc: supR3HardenedDllNotificationCallback: load 00007ffa18700000 LB 0x00031000 C:\WINDOWS\System32\cryptnet.dll [fFlags=0x0]
7151ed0.47dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
7161ed0.47dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
7171ed0.47dc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x2 pwszSearchPath=0000000000000001:<flags> [calling]
7181ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa18700000 'C:\WINDOWS\System32\cryptnet.dll'
7191ed0.47dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
7201ed0.47dc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x2 pwszSearchPath=0000000000000001:<flags> [calling]
7211ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa18700000 'C:\WINDOWS\System32\cryptnet.dll'
7221ed0.47dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
7231ed0.47dc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x2 pwszSearchPath=0000000000000001:<flags> [calling]
7241ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa18700000 'C:\WINDOWS\System32\cryptnet.dll'
7251ed0.47dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
7261ed0.47dc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x2 pwszSearchPath=0000000000000001:<flags> [calling]
7271ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa18700000 'C:\WINDOWS\System32\cryptnet.dll'
7281ed0.47dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
7291ed0.47dc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x2 pwszSearchPath=0000000000000001:<flags> [calling]
7301ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa18700000 'C:\WINDOWS\System32\cryptnet.dll'
7311ed0.47dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
7321ed0.47dc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x2 pwszSearchPath=0000000000000001:<flags> [calling]
7331ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa18700000 'C:\WINDOWS\System32\cryptnet.dll'
7341ed0.47dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
7351ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa18700000 'C:\WINDOWS\System32\cryptnet.dll'
7361ed0.47dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
7371ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa18700000 'C:\WINDOWS\System32\cryptnet.dll'
7381ed0.47dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
7391ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa18700000 'C:\WINDOWS\System32\cryptnet.dll'
7401ed0.47dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
7411ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa18700000 'C:\WINDOWS\System32\cryptnet.dll'
7421ed0.47dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
7431ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa18700000 'C:\WINDOWS\System32\cryptnet.dll'
7441ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa18700000 'C:\WINDOWS\System32\cryptnet.dll'
7451ed0.47dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
7461ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa18700000 'C:\Windows\System32\cryptnet.dll'
7471ed0.47dc: supR3HardenedDllNotificationCallback: load 00007ffa208e0000 LB 0x000ae000 C:\WINDOWS\System32\advapi32.dll [fFlags=0x0]
7481ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
7491ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'sechost.dll'.
7501ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #27 'rpcrt4.dll'.
7511ed0.47dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume10\Windows\System32\advapi32.dll)
7521ed0.47dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume10\Windows\System32\advapi32.dll
7531ed0.47dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
7541ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
7551ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume10\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
7561ed0.47dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
7571ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'sechost.dll'...
7581ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'sechost.dll' -> '\Device\HarddiskVolume10\Windows\System32\sechost.dll' [rcNtRedir=0xc0150008]
7591ed0.47dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\sechost.dll [lacks WinVerifyTrust]
7601ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
7611ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume10\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
7621ed0.47dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
7631ed0.47dc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
7641ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1eec0000 'C:\WINDOWS\system32\rsaenh.dll'
7651ed0.47dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\crypt32.dll [lacks WinVerifyTrust]
7661ed0.47dc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\crypt32.dll (Input=crypt32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
7671ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1fe90000 'C:\WINDOWS\System32\crypt32.dll'
7681ed0.47dc: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000000 pwszName=\SystemRoot\System32\ntdll.dll
7691ed0.47dc: supR3HardNtViCallWinVerifyTrustCatFile: New context 0000000001609d30
7701ed0.47dc: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000001609d30
7711ed0.47dc: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=93B46DD692F12EFD67222B2C68D978387A5A0747
7721ed0.47dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
7731ed0.47dc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\rpcrt4.dll (Input=rpcrt4.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
7741ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa20a20000 'C:\WINDOWS\System32\rpcrt4.dll'
7751ed0.47dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
7761ed0.47dc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
7771ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1eec0000 'C:\WINDOWS\system32\rsaenh.dll'
7781ed0.47dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\crypt32.dll [lacks WinVerifyTrust]
7791ed0.47dc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\crypt32.dll (Input=crypt32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
7801ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1fe90000 'C:\WINDOWS\System32\crypt32.dll'
7811ed0.47dc: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0516~31bf3856ad364e35~amd64~~10.0.19041.1766.cat'; file='\SystemRoot\System32\ntdll.dll'
7821ed0.47dc: g_pfnWinVerifyTrust=00007ffa20661ea0
7831ed0.47dc: supR3HardenedScreenImage/preload: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\crypt32.dll [redoing WinVerifyTrust]
7841ed0.47dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
7851ed0.47dc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
7861ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1eec0000 'C:\WINDOWS\system32\rsaenh.dll'
7871ed0.47dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\crypt32.dll [lacks WinVerifyTrust]
7881ed0.47dc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\crypt32.dll (Input=crypt32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
7891ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1fe90000 'C:\WINDOWS\System32\crypt32.dll'
7901ed0.47dc: supR3HardenedScreenImage/preload: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume10\Windows\System32\crypt32.dll'
7911ed0.47dc: supR3HardenedScreenImage/preload: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\wintrust.dll [redoing WinVerifyTrust]
7921ed0.47dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
7931ed0.47dc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
7941ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1eec0000 'C:\WINDOWS\system32\rsaenh.dll'
7951ed0.47dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\crypt32.dll
7961ed0.47dc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\crypt32.dll (Input=crypt32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
7971ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1fe90000 'C:\WINDOWS\System32\crypt32.dll'
7981ed0.47dc: supR3HardenedScreenImage/preload: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume10\Windows\System32\wintrust.dll'
7991ed0.47dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
8001ed0.47dc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
8011ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1eec0000 'C:\WINDOWS\system32\rsaenh.dll'
8021ed0.47dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\crypt32.dll
8031ed0.47dc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\crypt32.dll (Input=crypt32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
8041ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1fe90000 'C:\WINDOWS\System32\crypt32.dll'
8051ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume10\Windows\System32\advapi32.dll'
8061ed0.47dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
8071ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1eec0000 'C:\WINDOWS\system32\rsaenh.dll'
8081ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1fe90000 'C:\WINDOWS\System32\crypt32.dll'
8091ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume10\Windows\System32\cryptnet.dll'
8101ed0.47dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
8111ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1eec0000 'C:\WINDOWS\system32\rsaenh.dll'
8121ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1fe90000 'C:\WINDOWS\System32\crypt32.dll'
8131ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume10\Windows\System32\profapi.dll'
8141ed0.47dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
8151ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1eec0000 'C:\WINDOWS\system32\rsaenh.dll'
8161ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1fe90000 'C:\WINDOWS\System32\crypt32.dll'
8171ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume10\Windows\System32\gpapi.dll'
8181ed0.47dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
8191ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1eec0000 'C:\WINDOWS\system32\rsaenh.dll'
8201ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1fe90000 'C:\WINDOWS\System32\crypt32.dll'
8211ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume10\Windows\System32\sechost.dll'
8221ed0.47dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
8231ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1eec0000 'C:\WINDOWS\system32\rsaenh.dll'
8241ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1fe90000 'C:\WINDOWS\System32\crypt32.dll'
8251ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume10\Windows\System32\imagehlp.dll'
8261ed0.47dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
8271ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1eec0000 'C:\WINDOWS\system32\rsaenh.dll'
8281ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1fe90000 'C:\WINDOWS\System32\crypt32.dll'
8291ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume10\Windows\System32\cryptbase.dll'
8301ed0.47dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
8311ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1eec0000 'C:\WINDOWS\system32\rsaenh.dll'
8321ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1fe90000 'C:\WINDOWS\System32\crypt32.dll'
8331ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume10\Windows\System32\rsaenh.dll'
8341ed0.47dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\rsaenh.dll
8351ed0.47dc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
8361ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1eec0000 'C:\WINDOWS\system32\rsaenh.dll'
8371ed0.47dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\crypt32.dll
8381ed0.47dc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\crypt32.dll (Input=crypt32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
8391ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1fe90000 'C:\WINDOWS\System32\crypt32.dll'
8401ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume10\Windows\System32\cryptsp.dll'
8411ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1eec0000 'C:\WINDOWS\system32\rsaenh.dll'
8421ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1fe90000 'C:\WINDOWS\System32\crypt32.dll'
8431ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume10\Windows\System32\bcryptprimitives.dll'
8441ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1eec0000 'C:\WINDOWS\system32\rsaenh.dll'
8451ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1fe90000 'C:\WINDOWS\System32\crypt32.dll'
8461ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume10\Windows\System32\bcrypt.dll'
8471ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1eec0000 'C:\WINDOWS\system32\rsaenh.dll'
8481ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1fe90000 'C:\WINDOWS\System32\crypt32.dll'
8491ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume10\Windows\System32\msasn1.dll'
8501ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1eec0000 'C:\WINDOWS\system32\rsaenh.dll'
8511ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1fe90000 'C:\WINDOWS\System32\crypt32.dll'
8521ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume10\Windows\System32\ucrtbase.dll'
8531ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1eec0000 'C:\WINDOWS\system32\rsaenh.dll'
8541ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1fe90000 'C:\WINDOWS\System32\crypt32.dll'
8551ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume10\Windows\System32\msvcrt.dll'
8561ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1eec0000 'C:\WINDOWS\system32\rsaenh.dll'
8571ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1fe90000 'C:\WINDOWS\System32\crypt32.dll'
8581ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume10\Windows\System32\rpcrt4.dll'
8591ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1eec0000 'C:\WINDOWS\system32\rsaenh.dll'
8601ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 24202) fWinVerifyTrust=1 for '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VBoxSupLib.dll'
8611ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1eec0000 'C:\WINDOWS\system32\rsaenh.dll'
8621ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 24202) fWinVerifyTrust=1 for '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe'
8631ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1eec0000 'C:\WINDOWS\system32\rsaenh.dll'
8641ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1fe90000 'C:\WINDOWS\System32\crypt32.dll'
8651ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume10\Windows\System32\KernelBase.dll'
8661ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1eec0000 'C:\WINDOWS\system32\rsaenh.dll'
8671ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1fe90000 'C:\WINDOWS\System32\crypt32.dll'
8681ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume10\Windows\System32\kernel32.dll'
8691ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1fe90000 'C:\WINDOWS\system32\crypt32.dll'
8701ed0.47dc: supR3HardenedWinIsDesiredRootCA: Adding 0x16ab97fa9012ca00 CN=CCTService
8711ed0.47dc: supR3HardenedWinIsDesiredRootCA: Adding 0x5ad46780fa5df300 DC=com, DC=microsoft, CN=Microsoft Root Certificate Authority
8721ed0.47dc: supR3HardenedWinIsDesiredRootCA: Adding 0xea5386456178582b C=ZA, ST=Western Cape, L=Durbanville, O=Thawte, OU=Thawte Certification, CN=Thawte Timestamping CA
8731ed0.47dc: supR3HardenedWinIsDesiredRootCA: Adding 0x3be670c1bd02a900 OU=Copyright (c) 1997 Microsoft Corp., OU=Microsoft Corporation, CN=Microsoft Root Authority
8741ed0.47dc: supR3HardenedWinIsDesiredRootCA: Adding 0xe991ee72b03db500 C=US, O=Symantec Corporation, CN=Symantec Enterprise Mobile Root for Microsoft
8751ed0.47dc: supR3HardenedWinIsDesiredRootCA: Adding 0x4d3835aa4180b200 C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Root Certificate Authority 2011
8761ed0.47dc: supR3HardenedWinIsDesiredRootCA: Adding 0x646e3fe3ba08df00 C=US, O=MSFT, CN=Microsoft Authenticode(tm) Root Authority
8771ed0.47dc: supR3HardenedWinIsDesiredRootCA: Adding 0xf8fb4df58cd153e2 CN=X299
8781ed0.47dc: supR3HardenedWinIsDesiredRootCA: Adding 0xece4e4289e08b900 C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Root Certificate Authority 2010
8791ed0.47dc: supR3HardenedWinIsDesiredRootCA: Adding 0xf3bb4d7e894b420 C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft ECC TS Root Certificate Authority 2018
8801ed0.47dc: supR3HardenedWinIsDesiredRootCA: Adding 0x43a9cc371ff5385a O=Microsoft Trust Network, OU=Microsoft Corporation, OU=Microsoft Time Stamping Service Root, OU=Copyright (c) 1997 Microsoft Corp.
8811ed0.47dc: supR3HardenedWinIsDesiredRootCA: Adding 0x2e2d2c7c68f0202e O=VeriSign Trust Network, OU=VeriSign, Inc., OU=VeriSign Time Stamping Service Root, OU=NO LIABILITY ACCEPTED, (c)97 VeriSign, Inc.
8821ed0.47dc: supR3HardenedWinIsDesiredRootCA: Adding 0xcec3d46562b9be8e C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft ECC Product Root Certificate Authority 2018
8831ed0.47dc: supR3HardenedWinIsDesiredRootCA: Adding 0xca58a05dd401ae00 C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Time Stamp Root Certificate Authority 2014
8841ed0.47dc: supR3HardenedWinIsDesiredRootCA: Adding 0x61a3a33f81aace00 C=US, ST=UT, L=Salt Lake City, O=The USERTRUST Network, OU=http://www.usertrust.com, CN=UTN-USERFirst-Object
8851ed0.47dc: supR3HardenedWinIsDesiredRootCA: Adding 0x6b7bdc34cd37bb00 C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root G2
8861ed0.47dc: supR3HardenedWinIsDesiredRootCA: Adding 0x57ba5395b561bf00 C=BM, O=QuoVadis Limited, OU=Root Certification Authority, CN=QuoVadis Root Certification Authority
8871ed0.47dc: supR3HardenedWinIsDesiredRootCA: Adding 0xf4fd306318ccda00 C=US, O=GeoTrust Inc., CN=GeoTrust Global CA
8881ed0.47dc: supR3HardenedWinIsDesiredRootCA: Adding 0xbbde687390e6bf00 C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Trusted Root G4
8891ed0.47dc: supR3HardenedWinIsDesiredRootCA: Adding 0x83085097e9afdf00 O=Digital Signature Trust Co., CN=DST Root CA X3
8901ed0.47dc: supR3HardenedWinIsDesiredRootCA: Adding 0x780679907625cc00 OU=GlobalSign Root CA - R3, O=GlobalSign, CN=GlobalSign
8911ed0.47dc: supR3HardenedWinIsDesiredRootCA: Adding 0x3d98ab22bb04a300 C=IE, O=Baltimore, OU=CyberTrust, CN=Baltimore CyberTrust Root
8921ed0.47dc: supR3HardenedWinIsDesiredRootCA: Adding 0x80d5e6f878f9bd00 C=PL, O=Unizeto Technologies S.A., OU=Certum Certification Authority, CN=Certum Trusted Network CA 2
8931ed0.47dc: supR3HardenedWinIsDesiredRootCA: Adding 0xa0ee62086758b15d C=US, O=Equifax, OU=Equifax Secure Certificate Authority
8941ed0.47dc: supR3HardenedWinIsDesiredRootCA: Adding 0xeae16ef49d40be00 C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services
8951ed0.47dc: supR3HardenedWinIsDesiredRootCA: Adding 0xc6536f24d57ae723 C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust ECC Certification Authority
8961ed0.47dc: supR3HardenedWinIsDesiredRootCA: Adding 0x3714f47324e8ad00 C=US, O=Internet Security Research Group, CN=ISRG Root X1
8971ed0.47dc: supR3HardenedWinIsDesiredRootCA: Adding 0x8ff6fc03c1edbd00 C=US, ST=Arizona, L=Scottsdale, O=Starfield Technologies, Inc., CN=Starfield Root Certificate Authority - G2
8981ed0.47dc: supR3HardenedWinIsDesiredRootCA: Adding 0xc6fa4243b695b600 C=US, O=Entrust, Inc., OU=www.entrust.net/CPS is incorporated by reference, OU=(c) 2006 Entrust, Inc., CN=Entrust Root Certification Authority
8991ed0.47dc: supR3HardenedWinIsDesiredRootCA: Adding 0xa3ce8d99e60eda00 C=BE, O=GlobalSign nv-sa, OU=Root CA, CN=GlobalSign Root CA
9001ed0.47dc: supR3HardenedWinIsDesiredRootCA: Adding 0x560ad29254e89100 C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO RSA Certification Authority
9011ed0.47dc: supR3HardenedWinIsDesiredRootCA: Adding 0xa671e9fec832b700 C=US, O=Starfield Technologies, Inc., OU=Starfield Class 2 Certification Authority
9021ed0.47dc: supR3HardenedWinIsDesiredRootCA: Adding 0xa8de7211e13be200 C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root CA
9031ed0.47dc: supR3HardenedWinIsDesiredRootCA: Adding 0xd45980fbf0a0ac00 C=US, O=thawte, Inc., OU=Certification Services Division, OU=(c) 2006 thawte, Inc. - For authorized use only, CN=thawte Primary Root CA
9041ed0.47dc: supR3HardenedWinIsDesiredRootCA: Adding 0xc9edb72b684ba00 C=US, O=Entrust, Inc., OU=See www.entrust.net/legal-terms, OU=(c) 2009 Entrust, Inc. - for authorized use only, CN=Entrust Root Certification Authority - G2
9051ed0.47dc: supR3HardenedWinIsDesiredRootCA: Adding 0xf5cd95e581a4ab00 C=US, O=SecureTrust Corporation, CN=SecureTrust CA
9061ed0.47dc: supR3HardenedWinIsDesiredRootCA: Adding 0xbebef0d2217f0bfb C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root G3
9071ed0.47dc: supR3HardenedWinIsDesiredRootCA: Adding 0x6f2ebe0e24cfa600 OU=GlobalSign Root CA - R2, O=GlobalSign, CN=GlobalSign
9081ed0.47dc: supR3HardenedWinIsDesiredRootCA: Adding 0x14018a1bf29e595c C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification Authority
9091ed0.47dc: supR3HardenedWinIsDesiredRootCA: Adding 0x7c4fd32ec1b1ce00 C=PL, O=Unizeto Sp. z o.o., CN=Certum CA
9101ed0.47dc: supR3HardenedWinIsDesiredRootCA: Adding 0xd4fbe673e5ccc600 C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert High Assurance EV Root CA
9111ed0.47dc: supR3HardenedWinIsDesiredRootCA: Adding 0xef477acf4ab2d300 C=DE, O=D-Trust GmbH, CN=D-TRUST Root Class 3 CA 2 2009
9121ed0.47dc: supR3HardenedWinIsDesiredRootCA: Adding 0x1b8578514b74ac00 C=US, O=WFA Hotspot 2.0, CN=Hotspot 2.0 Trust Root CA - 03
9131ed0.47dc: supR3HardenedWinIsDesiredRootCA: Adding 0xb28612a94b4dad00 O=Entrust.net, OU=www.entrust.net/CPS_2048 incorp. by ref. (limits liab.), OU=(c) 1999 Entrust.net Limited, CN=Entrust.net Certification Authority (2048)
9141ed0.47dc: supR3HardenedWinIsDesiredRootCA: Adding 0x357a29080824af00 C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. - For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority - G5
9151ed0.47dc: supR3HardenedWinIsDesiredRootCA: Adding 0x59faf1086271bf00 C=US, ST=Arizona, L=Scottsdale, O=GoDaddy.com, Inc., CN=Go Daddy Root Certificate Authority - G2
9161ed0.47dc: supR3HardenedWinIsDesiredRootCA: Adding 0x466cbc09db88c100 C=IL, O=StartCom Ltd., OU=Secure Digital Certificate Signing, CN=StartCom Certification Authority
9171ed0.47dc: supR3HardenedWinIsDesiredRootCA: Adding 0xb16dd37ffeb3b300 C=JP, O=SECOM Trust.net, OU=Security Communication RootCA1
9181ed0.47dc: supR3HardenedWinIsDesiredRootCA: Adding 0x3401b15e3761c700 C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2008 VeriSign, Inc. - For authorized use only, CN=VeriSign Universal Root Certification Authority
9191ed0.47dc: supR3HardenedWinIsDesiredRootCA: Adding 0xc30e361765128000 C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority
9201ed0.47dc: supR3HardenedWinIsDesiredRootCA: Adding 0x491857ead79dde00 C=US, O=The Go Daddy Group, Inc., OU=Go Daddy Class 2 Certification Authority
9211ed0.47dc: supR3HardenedWinIsDesiredRootCA: Adding 0xab549401526569d3 L=Internet, O=VeriSign, Inc., OU=VeriSign Commercial Software Publishers CA
9221ed0.47dc: supR3HardenedWinIsDesiredRootCA: Adding 0xe66b56ffc86e50a4 C=ZA, ST=Western Cape, L=Cape Town, O=Thawte Consulting cc, OU=Certification Services Division, CN=Thawte Server CA, Email=server-certs@thawte.com
9231ed0.47dc: supR3HardenedWinIsDesiredRootCA: Adding 0xdc1801b225aea100 C=BM, O=QuoVadis Limited, CN=QuoVadis Root CA 2 G3
9241ed0.47dc: supR3HardenedWinIsDesiredRootCA: Adding 0xc2ba72a37dfbe300 C=PL, O=Unizeto Technologies S.A., OU=Certum Certification Authority, CN=Certum Trusted Network CA
9251ed0.47dc: supR3HardenedWinIsDesiredRootCA: Adding 0x8043e4ce150ead00 C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Assured ID Root CA
9261ed0.47dc: supR3HardenedWinIsDesiredRootCA: Adding 0xf2e6331af7b700 C=SE, O=AddTrust AB, OU=AddTrust External TTP Network, CN=AddTrust External CA Root
9271ed0.47dc: supR3HardenedWinRetrieveTrustedRootCAs: cAdded=57
9281ed0.47dc: SUPR3HardenedMain: Load Runtime...
9291ed0.47dc: \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VBoxRT.dll: Signature #1/2: info status: 24202
9301ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1eec0000 'C:\WINDOWS\system32\rsaenh.dll'
9311ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
9321ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp100.dll'.
9331ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'rpcrt4.dll'.
9341ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'ws2_32.dll'.
9351ed0.47dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VBoxRT.dll) WinVerifyTrust
9361ed0.47dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VBoxRT.dll
9371ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
9381ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume10\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
9391ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1eec0000 'C:\WINDOWS\system32\rsaenh.dll'
9401ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1fe90000 'C:\WINDOWS\System32\crypt32.dll'
9411ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #26 'rpcrt4.dll'.
9421ed0.47dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume10\Windows\System32\ws2_32.dll) WinVerifyTrust
9431ed0.47dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume10\Windows\System32\ws2_32.dll
9441ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
9451ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume10\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
9461ed0.47dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\rpcrt4.dll
9471ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
9481ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
9491ed0.47dc: \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcp100.dll: Signature #1/2: info status: 24202
9501ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
9511ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume10\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
9521ed0.47dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\rpcrt4.dll
9531ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1eec0000 'C:\WINDOWS\system32\rsaenh.dll'
9541ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
9551ed0.47dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcp100.dll) WinVerifyTrust
9561ed0.47dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcp100.dll
9571ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
9581ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
9591ed0.47dc: \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll: Signature #1/2: info status: 24202
9601ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
9611ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
9621ed0.47dc: \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll: Signature #1/2: info status: 24202
9631ed0.47dc: Detected WinVerifyTrust recursion: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll'.
9641ed0.47dc: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll)
9651ed0.47dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll
9661ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1eec0000 'C:\WINDOWS\system32\rsaenh.dll'
9671ed0.47dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll) WinVerifyTrust
9681ed0.47dc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000a01:<flags> [calling]
9691ed0.47dc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VBoxRT.dll
9701ed0.47dc: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll [avoiding WinVerifyTrust]
9711ed0.47dc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcp100.dll
9721ed0.47dc: supR3HardenedDllNotificationCallback: load 00000000575d0000 LB 0x000d2000 C:\Program Files\Oracle\VirtualBox\MSVCR100.dll [fFlags=0x0]
9731ed0.47dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll [avoiding WinVerifyTrust]
9741ed0.47dc: supR3HardenedDllNotificationCallback: load 0000000056fc0000 LB 0x00098000 C:\Program Files\Oracle\VirtualBox\MSVCP100.dll [fFlags=0x0]
9751ed0.47dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcp100.dll
9761ed0.47dc: supR3HardenedDllNotificationCallback: load 00007ffa21a80000 LB 0x0006b000 C:\WINDOWS\System32\WS2_32.dll [fFlags=0x0]
9771ed0.47dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\ws2_32.dll
9781ed0.47dc: supR3HardenedDllNotificationCallback: load 00007ff9ce5e0000 LB 0x005ec000 C:\Program Files\Oracle\VirtualBox\VBoxRT.dll [fFlags=0x0]
9791ed0.47dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VBoxRT.dll
9801ed0.47dc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll'.
9811ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
9821ed0.47dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VBoxRT.dll
9831ed0.47dc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
9841ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9ce5e0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9851ed0.47dc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll'.
9861ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
9871ed0.47dc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll'.
9881ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
9891ed0.47dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VBoxRT.dll
9901ed0.47dc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
9911ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9ce5e0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9921ed0.47dc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll'.
9931ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
9941ed0.47dc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll'.
9951ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
9961ed0.47dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VBoxRT.dll
9971ed0.47dc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
9981ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9ce5e0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9991ed0.47dc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10001ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10011ed0.47dc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10021ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10031ed0.47dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VBoxRT.dll
10041ed0.47dc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
10051ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9ce5e0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10061ed0.47dc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10071ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10081ed0.47dc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10091ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10101ed0.47dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VBoxRT.dll
10111ed0.47dc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
10121ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9ce5e0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10131ed0.47dc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10141ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10151ed0.47dc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10161ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10171ed0.47dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VBoxRT.dll
10181ed0.47dc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
10191ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9ce5e0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10201ed0.47dc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10211ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10221ed0.47dc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10231ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10241ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9ce5e0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10251ed0.47dc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10261ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10271ed0.47dc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10281ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10291ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9ce5e0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10301ed0.47dc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10311ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10321ed0.47dc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10331ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10341ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9ce5e0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10351ed0.47dc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10361ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10371ed0.47dc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10381ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10391ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9ce5e0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10401ed0.47dc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10411ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10421ed0.47dc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10431ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10441ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9ce5e0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10451ed0.47dc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10461ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10471ed0.47dc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10481ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10491ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9ce5e0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10501ed0.47dc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10511ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10521ed0.47dc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10531ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10541ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9ce5e0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10551ed0.47dc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10561ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10571ed0.47dc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10581ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10591ed0.47dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VBoxRT.dll
10601ed0.47dc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
10611ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9ce5e0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10621ed0.47dc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10631ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10641ed0.47dc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10651ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10661ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9ce5e0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10671ed0.47dc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10681ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10691ed0.47dc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10701ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10711ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9ce5e0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10721ed0.47dc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10731ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10741ed0.47dc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10751ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10761ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9ce5e0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10771ed0.47dc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10781ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10791ed0.47dc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10801ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10811ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9ce5e0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10821ed0.47dc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10831ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10841ed0.47dc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10851ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10861ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9ce5e0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10871ed0.47dc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10881ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10891ed0.47dc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10901ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10911ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9ce5e0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10921ed0.47dc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10931ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10941ed0.47dc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10951ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10961ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9ce5e0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10971ed0.47dc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10981ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10991ed0.47dc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11001ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11011ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9ce5e0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11021ed0.47dc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11031ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11041ed0.47dc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11051ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11061ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9ce5e0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11071ed0.47dc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11081ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11091ed0.47dc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11101ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11111ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9ce5e0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11121ed0.47dc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11131ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11141ed0.47dc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11151ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11161ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9ce5e0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11171ed0.47dc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11181ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11191ed0.47dc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11201ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11211ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9ce5e0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11221ed0.47dc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11231ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11241ed0.47dc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11251ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11261ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9ce5e0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11271ed0.47dc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11281ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11291ed0.47dc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11301ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11311ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9ce5e0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11321ed0.47dc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11331ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11341ed0.47dc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11351ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11361ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9ce5e0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11371ed0.47dc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11381ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11391ed0.47dc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11401ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11411ed0.47dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VBoxRT.dll
11421ed0.47dc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
11431ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9ce5e0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11441ed0.47dc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11451ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11461ed0.47dc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11471ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11481ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9ce5e0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11491ed0.47dc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11501ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11511ed0.47dc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11521ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11531ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9ce5e0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11541ed0.47dc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11551ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11561ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9ce5e0000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11571ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1eec0000 'C:\WINDOWS\system32\rsaenh.dll'
11581ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 24202) fWinVerifyTrust=1 for '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll'
11591ed0.47dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\wintrust.dll
11601ed0.47dc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\Wintrust.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
11611ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa20660000 'C:\WINDOWS\system32\Wintrust.dll'
11621ed0.47dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\rsaenh.dll
11631ed0.47dc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
11641ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1eec0000 'C:\WINDOWS\system32\rsaenh.dll'
11651ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1fe90000 'C:\WINDOWS\System32\crypt32.dll'
11661ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1eec0000 'C:\WINDOWS\system32\rsaenh.dll'
11671ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1fe90000 'C:\WINDOWS\System32\crypt32.dll'
11681ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1fe90000 'C:\WINDOWS\system32\crypt32.dll'
11691ed0.47dc: SUPR3HardenedMain: Load TrustedMain...
11701ed0.47dc: \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll: Signature #1/2: info status: 24202
11711ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1eec0000 'C:\WINDOWS\system32\rsaenh.dll'
11721ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'opengl32.dll'.
11731ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'uicommon.dll'.
11741ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxrt.dll'.
11751ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'msvcp100.dll'.
11761ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'msvcr100.dll'.
11771ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'qt5corevbox.dll'.
11781ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'qt5guivbox.dll'.
11791ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'qt5widgetsvbox.dll'.
11801ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'qt5openglvbox.dll'.
11811ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'user32.dll'.
11821ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'ole32.dll'.
11831ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'oleaut32.dll'.
11841ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #13 'winmm.dll'.
11851ed0.47dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll) WinVerifyTrust
11861ed0.47dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll
11871ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
11881ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume10\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008]
11891ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1eec0000 'C:\WINDOWS\system32\rsaenh.dll'
11901ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1fe90000 'C:\WINDOWS\System32\crypt32.dll'
11911ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcrt.dll'.
11921ed0.47dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume10\Windows\System32\winmm.dll) WinVerifyTrust
11931ed0.47dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume10\Windows\System32\winmm.dll
11941ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
11951ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume10\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
11961ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
11971ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume10\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
11981ed0.47dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\msvcrt.dll
11991ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1eec0000 'C:\WINDOWS\system32\rsaenh.dll'
12001ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1fe90000 'C:\WINDOWS\System32\crypt32.dll'
12011ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcp_win.dll'.
12021ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'combase.dll'.
12031ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #21 'rpcrt4.dll'.
12041ed0.47dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume10\Windows\System32\oleaut32.dll) WinVerifyTrust
12051ed0.47dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume10\Windows\System32\oleaut32.dll
12061ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
12071ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume10\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
12081ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
12091ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume10\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
12101ed0.47dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\rpcrt4.dll
12111ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
12121ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume10\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
12131ed0.47dc: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume10\Windows\System32\combase.dll'.
12141ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'rpcrt4.dll'.
12151ed0.47dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume10\Windows\System32\combase.dll)
12161ed0.47dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume10\Windows\System32\combase.dll
12171ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
12181ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume10\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
12191ed0.47dc: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume10\Windows\System32\msvcp_win.dll'.
12201ed0.47dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume10\Windows\System32\msvcp_win.dll)
12211ed0.47dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume10\Windows\System32\msvcp_win.dll
12221ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
12231ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume10\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
12241ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1eec0000 'C:\WINDOWS\system32\rsaenh.dll'
12251ed0.47dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\crypt32.dll
12261ed0.47dc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\crypt32.dll (Input=crypt32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
12271ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1fe90000 'C:\WINDOWS\System32\crypt32.dll'
12281ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #21 'rpcrt4.dll'.
12291ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #49 'gdi32.dll'.
12301ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #50 'user32.dll'.
12311ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #51 'combase.dll'.
12321ed0.47dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume10\Windows\System32\ole32.dll) WinVerifyTrust
12331ed0.47dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume10\Windows\System32\ole32.dll
12341ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
12351ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume10\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
12361ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
12371ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume10\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
12381ed0.47dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\combase.dll [lacks WinVerifyTrust]
12391ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
12401ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume10\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
12411ed0.47dc: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume10\Windows\System32\user32.dll'.
12421ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'win32u.dll'.
12431ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #37 'gdi32.dll'.
12441ed0.47dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume10\Windows\System32\user32.dll)
12451ed0.47dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume10\Windows\System32\user32.dll
12461ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
12471ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume10\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
12481ed0.47dc: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume10\Windows\System32\gdi32.dll'.
12491ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'win32u.dll'.
12501ed0.47dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume10\Windows\System32\gdi32.dll)
12511ed0.47dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume10\Windows\System32\gdi32.dll
12521ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
12531ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume10\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
12541ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
12551ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume10\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
12561ed0.47dc: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume10\Windows\System32\win32u.dll'.
12571ed0.47dc: '\Device\HarddiskVolume10\Windows\System32\win32u.dll' has no imports
12581ed0.47dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume10\Windows\System32\win32u.dll)
12591ed0.47dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume10\Windows\System32\win32u.dll
12601ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
12611ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume10\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
12621ed0.47dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
12631ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
12641ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume10\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
12651ed0.47dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\win32u.dll [lacks WinVerifyTrust]
12661ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1eec0000 'C:\WINDOWS\system32\rsaenh.dll'
12671ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1fe90000 'C:\WINDOWS\System32\crypt32.dll'
12681ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'win32u.dll'.
12691ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #37 'gdi32.dll'.
12701ed0.47dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume10\Windows\System32\user32.dll) WinVerifyTrust
12711ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5openglvbox.dll'...
12721ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5openglvbox.dll' -> '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\qt5openglvbox.dll' [rcNtRedir=0xc0150008]
12731ed0.47dc: \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll: Signature #1/2: info status: 24202
12741ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
12751ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume10\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
12761ed0.47dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
12771ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
12781ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume10\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
12791ed0.47dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\win32u.dll [lacks WinVerifyTrust]
12801ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1eec0000 'C:\WINDOWS\system32\rsaenh.dll'
12811ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'qt5widgetsvbox.dll'.
12821ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'qt5guivbox.dll'.
12831ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5corevbox.dll'.
12841ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'msvcr100.dll'.
12851ed0.47dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll) WinVerifyTrust
12861ed0.47dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll
12871ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5widgetsvbox.dll'...
12881ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll' -> '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\qt5widgetsvbox.dll' [rcNtRedir=0xc0150008]
12891ed0.47dc: \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll: Signature #1/2: info status: 24202
12901ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
12911ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
12921ed0.47dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll
12931ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
12941ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
12951ed0.47dc: \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll: Signature #1/2: info status: 24202
12961ed0.47dc: Detected WinVerifyTrust recursion: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll'.
12971ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'.
12981ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'shell32.dll'.
12991ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'ole32.dll'.
13001ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'advapi32.dll'.
13011ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'ws2_32.dll'.
13021ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'mpr.dll'.
13031ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'msvcp100.dll'.
13041ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'msvcr100.dll'.
13051ed0.47dc: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll)
13061ed0.47dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll
13071ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
13081ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
13091ed0.47dc: \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll: Signature #1/2: info status: 24202
13101ed0.47dc: Detected WinVerifyTrust recursion: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll'.
13111ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'ole32.dll'.
13121ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'opengl32.dll'.
13131ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'gdi32.dll'.
13141ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
13151ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'qt5corevbox.dll'.
13161ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'msvcp100.dll'.
13171ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msvcr100.dll'.
13181ed0.47dc: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll)
13191ed0.47dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll
13201ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5widgetsvbox.dll'...
13211ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll' -> '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\qt5widgetsvbox.dll' [rcNtRedir=0xc0150008]
13221ed0.47dc: \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll: Signature #1/2: info status: 24202
13231ed0.47dc: Detected WinVerifyTrust recursion: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'.
13241ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'gdi32.dll'.
13251ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'.
13261ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5guivbox.dll'.
13271ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'qt5corevbox.dll'.
13281ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'shell32.dll'.
13291ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'msvcp100.dll'.
13301ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msvcr100.dll'.
13311ed0.47dc: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll)
13321ed0.47dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll
13331ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
13341ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
13351ed0.47dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll
13361ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
13371ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
13381ed0.47dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcp100.dll
13391ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
13401ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume10\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
13411ed0.47dc: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume10\Windows\System32\shell32.dll'.
13421ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcp_win.dll'.
13431ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #72 'user32.dll'.
13441ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #74 'gdi32.dll'.
13451ed0.47dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume10\Windows\System32\shell32.dll)
13461ed0.47dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume10\Windows\System32\shell32.dll
13471ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
13481ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
13491ed0.47dc: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
13501ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
13511ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
13521ed0.47dc: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
13531ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
13541ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume10\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
13551ed0.47dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\user32.dll [lacks WinVerifyTrust]
13561ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
13571ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume10\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
13581ed0.47dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
13591ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
13601ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
13611ed0.47dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll
13621ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
13631ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
13641ed0.47dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcp100.dll
13651ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
13661ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
13671ed0.47dc: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
13681ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
13691ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume10\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
13701ed0.47dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\user32.dll [lacks WinVerifyTrust]
13711ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
13721ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume10\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
13731ed0.47dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
13741ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
13751ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume10\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008]
13761ed0.47dc: Detected WinVerifyTrust recursion: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume10\Windows\System32\opengl32.dll'.
13771ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
13781ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'advapi32.dll'.
13791ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
13801ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'gdi32.dll'.
13811ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'glu32.dll'.
13821ed0.47dc: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume10\Windows\System32\opengl32.dll)
13831ed0.47dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume10\Windows\System32\opengl32.dll
13841ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
13851ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume10\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
13861ed0.47dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\ole32.dll
13871ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
13881ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
13891ed0.47dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll
13901ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
13911ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
13921ed0.47dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcp100.dll
13931ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mpr.dll'...
13941ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'mpr.dll' -> '\Device\HarddiskVolume10\Windows\System32\mpr.dll' [rcNtRedir=0xc0150008]
13951ed0.47dc: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume10\Windows\System32\mpr.dll'.
13961ed0.47dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume10\Windows\System32\mpr.dll)
13971ed0.47dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume10\Windows\System32\mpr.dll
13981ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
13991ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume10\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
14001ed0.47dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\ws2_32.dll
14011ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
14021ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume10\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
14031ed0.47dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\advapi32.dll
14041ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
14051ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume10\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
14061ed0.47dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\ole32.dll
14071ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
14081ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume10\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
14091ed0.47dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\shell32.dll [lacks WinVerifyTrust]
14101ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
14111ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume10\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
14121ed0.47dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\user32.dll [lacks WinVerifyTrust]
14131ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'glu32.dll'...
14141ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'glu32.dll' -> '\Device\HarddiskVolume10\Windows\System32\glu32.dll' [rcNtRedir=0xc0150008]
14151ed0.47dc: Detected WinVerifyTrust recursion: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume10\Windows\System32\glu32.dll'.
14161ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
14171ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'user32.dll'.
14181ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'opengl32.dll'.
14191ed0.47dc: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume10\Windows\System32\glu32.dll)
14201ed0.47dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume10\Windows\System32\glu32.dll
14211ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
14221ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume10\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
14231ed0.47dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
14241ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
14251ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume10\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
14261ed0.47dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\user32.dll [lacks WinVerifyTrust]
14271ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
14281ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume10\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
14291ed0.47dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\advapi32.dll
14301ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
14311ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume10\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
14321ed0.47dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\msvcrt.dll
14331ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
14341ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume10\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
14351ed0.47dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
14361ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
14371ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume10\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
14381ed0.47dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\user32.dll [lacks WinVerifyTrust]
14391ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
14401ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume10\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
14411ed0.47dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\msvcp_win.dll [lacks WinVerifyTrust]
14421ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
14431ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume10\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008]
14441ed0.47dc: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume10\Windows\System32\opengl32.dll [lacks WinVerifyTrust]
14451ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
14461ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume10\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
14471ed0.47dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\user32.dll [lacks WinVerifyTrust]
14481ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
14491ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume10\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
14501ed0.47dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\msvcrt.dll
14511ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1eec0000 'C:\WINDOWS\system32\rsaenh.dll'
14521ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'gdi32.dll'.
14531ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'.
14541ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5guivbox.dll'.
14551ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'qt5corevbox.dll'.
14561ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'shell32.dll'.
14571ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'msvcp100.dll'.
14581ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msvcr100.dll'.
14591ed0.47dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll) WinVerifyTrust
14601ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
14611ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
14621ed0.47dc: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [redoing WinVerifyTrust]
14631ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
14641ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
14651ed0.47dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll
14661ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
14671ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
14681ed0.47dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcp100.dll
14691ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
14701ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume10\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
14711ed0.47dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\shell32.dll [lacks WinVerifyTrust]
14721ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
14731ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
14741ed0.47dc: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
14751ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
14761ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
14771ed0.47dc: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
14781ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
14791ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume10\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
14801ed0.47dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\user32.dll [lacks WinVerifyTrust]
14811ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
14821ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume10\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
14831ed0.47dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
14841ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1eec0000 'C:\WINDOWS\system32\rsaenh.dll'
14851ed0.47dc: supR3HardenedScreenImage/Imports: 0 (was 24202) fWinVerifyTrust=1 for '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll'
14861ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
14871ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
14881ed0.47dc: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [redoing WinVerifyTrust]
14891ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1eec0000 'C:\WINDOWS\system32\rsaenh.dll'
14901ed0.47dc: supR3HardenedScreenImage/Imports: 0 (was 24202) fWinVerifyTrust=1 for '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll'
14911ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
14921ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
14931ed0.47dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll
14941ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
14951ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
14961ed0.47dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcp100.dll
14971ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
14981ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
14991ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'uicommon.dll'...
15001ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'uicommon.dll' -> '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\uicommon.dll' [rcNtRedir=0xc0150008]
15011ed0.47dc: \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\UICommon.dll: Signature #1/2: info status: 24202
15021ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1eec0000 'C:\WINDOWS\system32\rsaenh.dll'
15031ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'vboxrt.dll'.
15041ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcr100.dll'.
15051ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5corevbox.dll'.
15061ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'qt5guivbox.dll'.
15071ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'qt5widgetsvbox.dll'.
15081ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'user32.dll'.
15091ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'advapi32.dll'.
15101ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'ole32.dll'.
15111ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'oleaut32.dll'.
15121ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'rpcrt4.dll'.
15131ed0.47dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\UICommon.dll) WinVerifyTrust
15141ed0.47dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\UICommon.dll
15151ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
15161ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume10\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008]
15171ed0.47dc: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume10\Windows\System32\opengl32.dll [redoing WinVerifyTrust]
15181ed0.47dc: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000494 pwszName=\Device\HarddiskVolume10\Windows\System32\opengl32.dll
15191ed0.47dc: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000001609d30
15201ed0.47dc: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000001609d30
15211ed0.47dc: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=7D1B8270E1506FBF7E7AAC33EF5032969F62E778
15221ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
15231ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume10\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
15241ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
15251ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume10\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
15261ed0.47dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\oleaut32.dll
15271ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
15281ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume10\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
15291ed0.47dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\ole32.dll
15301ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
15311ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume10\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
15321ed0.47dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\advapi32.dll
15331ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
15341ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume10\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
15351ed0.47dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\user32.dll [lacks WinVerifyTrust]
15361ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5widgetsvbox.dll'...
15371ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll' -> '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\qt5widgetsvbox.dll' [rcNtRedir=0xc0150008]
15381ed0.47dc: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [lacks WinVerifyTrust]
15391ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
15401ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
15411ed0.47dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll
15421ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
15431ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
15441ed0.47dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll
15451ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
15461ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
15471ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
15481ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
15491ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1eec0000 'C:\WINDOWS\system32\rsaenh.dll'
15501ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1fe90000 'C:\WINDOWS\System32\crypt32.dll'
15511ed0.47dc: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0312~31bf3856ad364e35~amd64~~10.0.19041.1766.cat'; file='\Device\HarddiskVolume10\Windows\System32\opengl32.dll'
15521ed0.47dc: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
15531ed0.47dc: supR3HardenedScreenImage/Imports: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume10\Windows\System32\opengl32.dll'
15541ed0.47dc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000a01:<flags> [calling]
15551ed0.47dc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll
15561ed0.47dc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\opengl32.dll
15571ed0.47dc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\UICommon.dll
15581ed0.47dc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll
15591ed0.47dc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll
15601ed0.47dc: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [avoiding WinVerifyTrust]
15611ed0.47dc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll
15621ed0.47dc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\winmm.dll
15631ed0.47dc: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume10\Windows\System32\glu32.dll [avoiding WinVerifyTrust]
15641ed0.47dc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\mpr.dll [avoiding WinVerifyTrust]
15651ed0.47dc: supR3HardenedDllNotificationCallback: load 00007ffa20630000 LB 0x00022000 C:\WINDOWS\System32\win32u.dll [fFlags=0x0]
15661ed0.47dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\win32u.dll [avoiding WinVerifyTrust]
15671ed0.47dc: supR3HardenedDllNotificationCallback: load 00007ffa1fff0000 LB 0x0009d000 C:\WINDOWS\System32\msvcp_win.dll [fFlags=0x0]
15681ed0.47dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\msvcp_win.dll [avoiding WinVerifyTrust]
15691ed0.47dc: supR3HardenedDllNotificationCallback: load 00007ffa20490000 LB 0x0010b000 C:\WINDOWS\System32\gdi32full.dll [fFlags=0x0]
15701ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcp_win.dll'.
15711ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #33 'gdi32.dll'.
15721ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #35 'user32.dll'.
15731ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #36 'win32u.dll'.
15741ed0.47dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume10\Windows\System32\gdi32full.dll)
15751ed0.47dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume10\Windows\System32\gdi32full.dll
15761ed0.47dc: supR3HardenedDllNotificationCallback: load 00007ffa207d0000 LB 0x0002a000 C:\WINDOWS\System32\GDI32.dll [fFlags=0x0]
15771ed0.47dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\gdi32.dll [avoiding WinVerifyTrust]
15781ed0.47dc: supR3HardenedDllNotificationCallback: load 00007ffa21b90000 LB 0x001a0000 C:\WINDOWS\System32\USER32.dll [fFlags=0x0]
15791ed0.47dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\user32.dll [avoiding WinVerifyTrust]
15801ed0.47dc: supR3HardenedDllNotificationCallback: load 00007ffa20e00000 LB 0x00354000 C:\WINDOWS\System32\combase.dll [fFlags=0x0]
15811ed0.47dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\combase.dll [avoiding WinVerifyTrust]
15821ed0.47dc: supR3HardenedDllNotificationCallback: load 00007ffa162f0000 LB 0x0002c000 C:\WINDOWS\SYSTEM32\GLU32.dll [fFlags=0x0]
15831ed0.47dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume10\Windows\System32\glu32.dll [avoiding WinVerifyTrust]
15841ed0.47dc: supR3HardenedDllNotificationCallback: load 00007ff9ee4b0000 LB 0x00126000 C:\WINDOWS\SYSTEM32\OPENGL32.dll [fFlags=0x0]
15851ed0.47dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\opengl32.dll
15861ed0.47dc: supR3HardenedDllNotificationCallback: load 00007ffa212d0000 LB 0x00744000 C:\WINDOWS\System32\SHELL32.dll [fFlags=0x0]
15871ed0.47dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\shell32.dll [avoiding WinVerifyTrust]
15881ed0.47dc: supR3HardenedDllNotificationCallback: load 00007ffa21d40000 LB 0x0012a000 C:\WINDOWS\System32\ole32.dll [fFlags=0x0]
15891ed0.47dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\ole32.dll
15901ed0.47dc: supR3HardenedDllNotificationCallback: load 00007ffa19710000 LB 0x0001f000 C:\WINDOWS\SYSTEM32\MPR.dll [fFlags=0x0]
15911ed0.47dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\mpr.dll [avoiding WinVerifyTrust]
15921ed0.47dc: supR3HardenedDllNotificationCallback: load 0000000057060000 LB 0x00565000 C:\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [fFlags=0x0]
15931ed0.47dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll
15941ed0.47dc: supR3HardenedDllNotificationCallback: load 00007ff9c1840000 LB 0x005f7000 C:\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [fFlags=0x0]
15951ed0.47dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll
15961ed0.47dc: supR3HardenedDllNotificationCallback: load 0000000056a50000 LB 0x00561000 C:\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [fFlags=0x0]
15971ed0.47dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [avoiding WinVerifyTrust]
15981ed0.47dc: supR3HardenedDllNotificationCallback: load 00007ffa20b50000 LB 0x000cd000 C:\WINDOWS\System32\OLEAUT32.dll [fFlags=0x0]
15991ed0.47dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\oleaut32.dll
16001ed0.47dc: supR3HardenedDllNotificationCallback: load 00007ff9b16a0000 LB 0x02320000 C:\Program Files\Oracle\VirtualBox\UICommon.dll [fFlags=0x0]
16011ed0.47dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\UICommon.dll
16021ed0.47dc: supR3HardenedDllNotificationCallback: load 0000000057a70000 LB 0x00054000 C:\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll [fFlags=0x0]
16031ed0.47dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll
16041ed0.47dc: supR3HardenedDllNotificationCallback: load 00007ffa0f7d0000 LB 0x00027000 C:\WINDOWS\SYSTEM32\WINMM.dll [fFlags=0x0]
16051ed0.47dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\winmm.dll
16061ed0.47dc: supR3HardenedDllNotificationCallback: load 00007ff9d8200000 LB 0x001c9000 C:\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll [fFlags=0x0]
16071ed0.47dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll
16081ed0.47dc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume10\Windows\System32\gdi32full.dll'.
16091ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Windows\System32\gdi32full.dll' [rescheduled]
16101ed0.47dc: Detected loader lock ownership: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume10\Windows\System32\glu32.dll'.
16111ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 22900 (was 22900) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Windows\System32\glu32.dll' [rescheduled]
16121ed0.47dc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume10\Windows\System32\mpr.dll'.
16131ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Windows\System32\mpr.dll' [rescheduled]
16141ed0.47dc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume10\Windows\System32\shell32.dll'.
16151ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Windows\System32\shell32.dll' [rescheduled]
16161ed0.47dc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'.
16171ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll' [rescheduled]
16181ed0.47dc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume10\Windows\System32\win32u.dll'.
16191ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Windows\System32\win32u.dll' [rescheduled]
16201ed0.47dc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume10\Windows\System32\gdi32.dll'.
16211ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Windows\System32\gdi32.dll' [rescheduled]
16221ed0.47dc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume10\Windows\System32\user32.dll'.
16231ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Windows\System32\user32.dll' [rescheduled]
16241ed0.47dc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume10\Windows\System32\msvcp_win.dll'.
16251ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Windows\System32\msvcp_win.dll' [rescheduled]
16261ed0.47dc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume10\Windows\System32\combase.dll'.
16271ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Windows\System32\combase.dll' [rescheduled]
16281ed0.47dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\kernel32.dll
16291ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
16301ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume10\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
16311ed0.47dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\win32u.dll [redoing WinVerifyTrust]
16321ed0.47dc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume10\Windows\System32\win32u.dll'.
16331ed0.47dc: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume10\Windows\System32\win32u.dll
16341ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
16351ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume10\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
16361ed0.47dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\user32.dll [redoing WinVerifyTrust]
16371ed0.47dc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume10\Windows\System32\user32.dll'.
16381ed0.47dc: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume10\Windows\System32\user32.dll
16391ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
16401ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume10\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
16411ed0.47dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\gdi32.dll [redoing WinVerifyTrust]
16421ed0.47dc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume10\Windows\System32\gdi32.dll'.
16431ed0.47dc: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume10\Windows\System32\gdi32.dll
16441ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
16451ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume10\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
16461ed0.47dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\msvcp_win.dll [redoing WinVerifyTrust]
16471ed0.47dc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume10\Windows\System32\msvcp_win.dll'.
16481ed0.47dc: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume10\Windows\System32\msvcp_win.dll
16491ed0.47dc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\kernel32.dll (Input=kernel32, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
16501ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa20d40000 'C:\WINDOWS\System32\kernel32.dll'
16511ed0.47dc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume10\Windows\System32\gdi32full.dll'.
16521ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Windows\System32\gdi32full.dll' [rescheduled]
16531ed0.47dc: Detected loader lock ownership: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume10\Windows\System32\glu32.dll'.
16541ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 22900 (was 22900) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Windows\System32\glu32.dll' [rescheduled]
16551ed0.47dc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume10\Windows\System32\mpr.dll'.
16561ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Windows\System32\mpr.dll' [rescheduled]
16571ed0.47dc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume10\Windows\System32\shell32.dll'.
16581ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Windows\System32\shell32.dll' [rescheduled]
16591ed0.47dc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'.
16601ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll' [rescheduled]
16611ed0.47dc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume10\Windows\System32\win32u.dll'.
16621ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Windows\System32\win32u.dll' [rescheduled]
16631ed0.47dc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume10\Windows\System32\gdi32.dll'.
16641ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Windows\System32\gdi32.dll' [rescheduled]
16651ed0.47dc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume10\Windows\System32\user32.dll'.
16661ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Windows\System32\user32.dll' [rescheduled]
16671ed0.47dc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume10\Windows\System32\msvcp_win.dll'.
16681ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Windows\System32\msvcp_win.dll' [rescheduled]
16691ed0.47dc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume10\Windows\System32\combase.dll'.
16701ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Windows\System32\combase.dll' [rescheduled]
16711ed0.47dc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume10\Windows\System32\gdi32full.dll'.
16721ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Windows\System32\gdi32full.dll' [rescheduled]
16731ed0.47dc: Detected loader lock ownership: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume10\Windows\System32\glu32.dll'.
16741ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 22900 (was 22900) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Windows\System32\glu32.dll' [rescheduled]
16751ed0.47dc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume10\Windows\System32\mpr.dll'.
16761ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Windows\System32\mpr.dll' [rescheduled]
16771ed0.47dc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume10\Windows\System32\shell32.dll'.
16781ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Windows\System32\shell32.dll' [rescheduled]
16791ed0.47dc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'.
16801ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll' [rescheduled]
16811ed0.47dc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume10\Windows\System32\win32u.dll'.
16821ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Windows\System32\win32u.dll' [rescheduled]
16831ed0.47dc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume10\Windows\System32\gdi32.dll'.
16841ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Windows\System32\gdi32.dll' [rescheduled]
16851ed0.47dc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume10\Windows\System32\user32.dll'.
16861ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Windows\System32\user32.dll' [rescheduled]
16871ed0.47dc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume10\Windows\System32\msvcp_win.dll'.
16881ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Windows\System32\msvcp_win.dll' [rescheduled]
16891ed0.47dc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume10\Windows\System32\combase.dll'.
16901ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Windows\System32\combase.dll' [rescheduled]
16911ed0.47dc: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-string-l1-1-0) -> 0x0, fPresent=1
16921ed0.47dc: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-string-l1-1-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
16931ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa20090000 'api-ms-win-core-string-l1-1-0'
16941ed0.47dc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume10\Windows\System32\gdi32full.dll'.
16951ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Windows\System32\gdi32full.dll' [rescheduled]
16961ed0.47dc: Detected loader lock ownership: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume10\Windows\System32\glu32.dll'.
16971ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 22900 (was 22900) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Windows\System32\glu32.dll' [rescheduled]
16981ed0.47dc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume10\Windows\System32\mpr.dll'.
16991ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Windows\System32\mpr.dll' [rescheduled]
17001ed0.47dc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume10\Windows\System32\shell32.dll'.
17011ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Windows\System32\shell32.dll' [rescheduled]
17021ed0.47dc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'.
17031ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll' [rescheduled]
17041ed0.47dc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume10\Windows\System32\win32u.dll'.
17051ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Windows\System32\win32u.dll' [rescheduled]
17061ed0.47dc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume10\Windows\System32\gdi32.dll'.
17071ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Windows\System32\gdi32.dll' [rescheduled]
17081ed0.47dc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume10\Windows\System32\user32.dll'.
17091ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Windows\System32\user32.dll' [rescheduled]
17101ed0.47dc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume10\Windows\System32\msvcp_win.dll'.
17111ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Windows\System32\msvcp_win.dll' [rescheduled]
17121ed0.47dc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume10\Windows\System32\combase.dll'.
17131ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Windows\System32\combase.dll' [rescheduled]
17141ed0.47dc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume10\Windows\System32\gdi32full.dll'.
17151ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Windows\System32\gdi32full.dll' [rescheduled]
17161ed0.47dc: Detected loader lock ownership: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume10\Windows\System32\glu32.dll'.
17171ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 22900 (was 22900) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Windows\System32\glu32.dll' [rescheduled]
17181ed0.47dc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume10\Windows\System32\mpr.dll'.
17191ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Windows\System32\mpr.dll' [rescheduled]
17201ed0.47dc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume10\Windows\System32\shell32.dll'.
17211ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Windows\System32\shell32.dll' [rescheduled]
17221ed0.47dc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'.
17231ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll' [rescheduled]
17241ed0.47dc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume10\Windows\System32\win32u.dll'.
17251ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Windows\System32\win32u.dll' [rescheduled]
17261ed0.47dc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume10\Windows\System32\gdi32.dll'.
17271ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Windows\System32\gdi32.dll' [rescheduled]
17281ed0.47dc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume10\Windows\System32\user32.dll'.
17291ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Windows\System32\user32.dll' [rescheduled]
17301ed0.47dc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume10\Windows\System32\msvcp_win.dll'.
17311ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Windows\System32\msvcp_win.dll' [rescheduled]
17321ed0.47dc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume10\Windows\System32\combase.dll'.
17331ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Windows\System32\combase.dll' [rescheduled]
17341ed0.47dc: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-datetime-l1-1-1) -> 0x0, fPresent=1
17351ed0.47dc: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-datetime-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
17361ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa20090000 'api-ms-win-core-datetime-l1-1-1'
17371ed0.47dc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume10\Windows\System32\gdi32full.dll'.
17381ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Windows\System32\gdi32full.dll' [rescheduled]
17391ed0.47dc: Detected loader lock ownership: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume10\Windows\System32\glu32.dll'.
17401ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 22900 (was 22900) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Windows\System32\glu32.dll' [rescheduled]
17411ed0.47dc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume10\Windows\System32\mpr.dll'.
17421ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Windows\System32\mpr.dll' [rescheduled]
17431ed0.47dc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume10\Windows\System32\shell32.dll'.
17441ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Windows\System32\shell32.dll' [rescheduled]
17451ed0.47dc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'.
17461ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll' [rescheduled]
17471ed0.47dc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume10\Windows\System32\win32u.dll'.
17481ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Windows\System32\win32u.dll' [rescheduled]
17491ed0.47dc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume10\Windows\System32\gdi32.dll'.
17501ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Windows\System32\gdi32.dll' [rescheduled]
17511ed0.47dc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume10\Windows\System32\user32.dll'.
17521ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Windows\System32\user32.dll' [rescheduled]
17531ed0.47dc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume10\Windows\System32\msvcp_win.dll'.
17541ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Windows\System32\msvcp_win.dll' [rescheduled]
17551ed0.47dc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume10\Windows\System32\combase.dll'.
17561ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Windows\System32\combase.dll' [rescheduled]
17571ed0.47dc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume10\Windows\System32\gdi32full.dll'.
17581ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Windows\System32\gdi32full.dll' [rescheduled]
17591ed0.47dc: Detected loader lock ownership: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume10\Windows\System32\glu32.dll'.
17601ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 22900 (was 22900) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Windows\System32\glu32.dll' [rescheduled]
17611ed0.47dc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume10\Windows\System32\mpr.dll'.
17621ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Windows\System32\mpr.dll' [rescheduled]
17631ed0.47dc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume10\Windows\System32\shell32.dll'.
17641ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Windows\System32\shell32.dll' [rescheduled]
17651ed0.47dc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'.
17661ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll' [rescheduled]
17671ed0.47dc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume10\Windows\System32\win32u.dll'.
17681ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Windows\System32\win32u.dll' [rescheduled]
17691ed0.47dc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume10\Windows\System32\gdi32.dll'.
17701ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Windows\System32\gdi32.dll' [rescheduled]
17711ed0.47dc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume10\Windows\System32\user32.dll'.
17721ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Windows\System32\user32.dll' [rescheduled]
17731ed0.47dc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume10\Windows\System32\msvcp_win.dll'.
17741ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Windows\System32\msvcp_win.dll' [rescheduled]
17751ed0.47dc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume10\Windows\System32\combase.dll'.
17761ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Windows\System32\combase.dll' [rescheduled]
17771ed0.47dc: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-localization-obsolete-l1-2-0) -> 0x0, fPresent=1
17781ed0.47dc: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-obsolete-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
17791ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa20090000 'api-ms-win-core-localization-obsolete-l1-2-0'
17801ed0.47dc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume10\Windows\System32\gdi32full.dll'.
17811ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Windows\System32\gdi32full.dll' [rescheduled]
17821ed0.47dc: Detected loader lock ownership: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume10\Windows\System32\glu32.dll'.
17831ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 22900 (was 22900) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Windows\System32\glu32.dll' [rescheduled]
17841ed0.47dc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume10\Windows\System32\mpr.dll'.
17851ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Windows\System32\mpr.dll' [rescheduled]
17861ed0.47dc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume10\Windows\System32\shell32.dll'.
17871ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Windows\System32\shell32.dll' [rescheduled]
17881ed0.47dc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'.
17891ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll' [rescheduled]
17901ed0.47dc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume10\Windows\System32\win32u.dll'.
17911ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Windows\System32\win32u.dll' [rescheduled]
17921ed0.47dc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume10\Windows\System32\gdi32.dll'.
17931ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Windows\System32\gdi32.dll' [rescheduled]
17941ed0.47dc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume10\Windows\System32\user32.dll'.
17951ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Windows\System32\user32.dll' [rescheduled]
17961ed0.47dc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume10\Windows\System32\msvcp_win.dll'.
17971ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Windows\System32\msvcp_win.dll' [rescheduled]
17981ed0.47dc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume10\Windows\System32\combase.dll'.
17991ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Windows\System32\combase.dll' [rescheduled]
18001ed0.47dc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume10\Windows\System32\gdi32full.dll'.
18011ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Windows\System32\gdi32full.dll' [rescheduled]
18021ed0.47dc: Detected loader lock ownership: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume10\Windows\System32\glu32.dll'.
18031ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 22900 (was 22900) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Windows\System32\glu32.dll' [rescheduled]
18041ed0.47dc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume10\Windows\System32\mpr.dll'.
18051ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Windows\System32\mpr.dll' [rescheduled]
18061ed0.47dc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume10\Windows\System32\shell32.dll'.
18071ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Windows\System32\shell32.dll' [rescheduled]
18081ed0.47dc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'.
18091ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll' [rescheduled]
18101ed0.47dc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume10\Windows\System32\win32u.dll'.
18111ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Windows\System32\win32u.dll' [rescheduled]
18121ed0.47dc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume10\Windows\System32\gdi32.dll'.
18131ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Windows\System32\gdi32.dll' [rescheduled]
18141ed0.47dc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume10\Windows\System32\user32.dll'.
18151ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Windows\System32\user32.dll' [rescheduled]
18161ed0.47dc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume10\Windows\System32\msvcp_win.dll'.
18171ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Windows\System32\msvcp_win.dll' [rescheduled]
18181ed0.47dc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume10\Windows\System32\combase.dll'.
18191ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Windows\System32\combase.dll' [rescheduled]
18201ed0.47dc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume10\Windows\System32\imm32.dll'.
18211ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'user32.dll'.
18221ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #25 'win32u.dll'.
18231ed0.47dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume10\Windows\System32\imm32.dll)
18241ed0.47dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume10\Windows\System32\imm32.dll
18251ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
18261ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume10\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
18271ed0.47dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\win32u.dll [redoing WinVerifyTrust]
18281ed0.47dc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume10\Windows\System32\win32u.dll'.
18291ed0.47dc: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume10\Windows\System32\win32u.dll
18301ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
18311ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume10\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
18321ed0.47dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\user32.dll [redoing WinVerifyTrust]
18331ed0.47dc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume10\Windows\System32\user32.dll'.
18341ed0.47dc: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume10\Windows\System32\user32.dll
18351ed0.47dc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\IMM32.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
18361ed0.47dc: supR3HardenedDllNotificationCallback: load 00007ffa22700000 LB 0x00030000 C:\WINDOWS\System32\IMM32.DLL [fFlags=0x0]
18371ed0.47dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\imm32.dll [avoiding WinVerifyTrust]
18381ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa22700000 'C:\WINDOWS\system32\IMM32.DLL'
18391ed0.47dc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume10\Windows\System32\imm32.dll'.
18401ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Windows\System32\imm32.dll' [rescheduled]
18411ed0.47dc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume10\Windows\System32\gdi32full.dll'.
18421ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Windows\System32\gdi32full.dll' [rescheduled]
18431ed0.47dc: Detected loader lock ownership: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume10\Windows\System32\glu32.dll'.
18441ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 22900 (was 22900) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Windows\System32\glu32.dll' [rescheduled]
18451ed0.47dc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume10\Windows\System32\mpr.dll'.
18461ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Windows\System32\mpr.dll' [rescheduled]
18471ed0.47dc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume10\Windows\System32\shell32.dll'.
18481ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Windows\System32\shell32.dll' [rescheduled]
18491ed0.47dc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'.
18501ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll' [rescheduled]
18511ed0.47dc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume10\Windows\System32\win32u.dll'.
18521ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Windows\System32\win32u.dll' [rescheduled]
18531ed0.47dc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume10\Windows\System32\gdi32.dll'.
18541ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Windows\System32\gdi32.dll' [rescheduled]
18551ed0.47dc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume10\Windows\System32\user32.dll'.
18561ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Windows\System32\user32.dll' [rescheduled]
18571ed0.47dc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume10\Windows\System32\msvcp_win.dll'.
18581ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Windows\System32\msvcp_win.dll' [rescheduled]
18591ed0.47dc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume10\Windows\System32\combase.dll'.
18601ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Windows\System32\combase.dll' [rescheduled]
18611ed0.47dc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume10\Windows\System32\imm32.dll'.
18621ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Windows\System32\imm32.dll' [rescheduled]
18631ed0.47dc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume10\Windows\System32\gdi32full.dll'.
18641ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Windows\System32\gdi32full.dll' [rescheduled]
18651ed0.47dc: Detected loader lock ownership: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume10\Windows\System32\glu32.dll'.
18661ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 22900 (was 22900) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Windows\System32\glu32.dll' [rescheduled]
18671ed0.47dc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume10\Windows\System32\mpr.dll'.
18681ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Windows\System32\mpr.dll' [rescheduled]
18691ed0.47dc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume10\Windows\System32\shell32.dll'.
18701ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Windows\System32\shell32.dll' [rescheduled]
18711ed0.47dc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'.
18721ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll' [rescheduled]
18731ed0.47dc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume10\Windows\System32\win32u.dll'.
18741ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Windows\System32\win32u.dll' [rescheduled]
18751ed0.47dc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume10\Windows\System32\gdi32.dll'.
18761ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Windows\System32\gdi32.dll' [rescheduled]
18771ed0.47dc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume10\Windows\System32\user32.dll'.
18781ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Windows\System32\user32.dll' [rescheduled]
18791ed0.47dc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume10\Windows\System32\msvcp_win.dll'.
18801ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Windows\System32\msvcp_win.dll' [rescheduled]
18811ed0.47dc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume10\Windows\System32\combase.dll'.
18821ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Windows\System32\combase.dll' [rescheduled]
18831ed0.47dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\advapi32.dll
18841ed0.47dc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\ADVAPI32.DLL (Input=ADVAPI32.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
18851ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa208e0000 'C:\WINDOWS\System32\ADVAPI32.DLL'
18861ed0.47dc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume10\Windows\System32\imm32.dll'.
18871ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Windows\System32\imm32.dll' [rescheduled]
18881ed0.47dc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume10\Windows\System32\gdi32full.dll'.
18891ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Windows\System32\gdi32full.dll' [rescheduled]
18901ed0.47dc: Detected loader lock ownership: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume10\Windows\System32\glu32.dll'.
18911ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 22900 (was 22900) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Windows\System32\glu32.dll' [rescheduled]
18921ed0.47dc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume10\Windows\System32\mpr.dll'.
18931ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Windows\System32\mpr.dll' [rescheduled]
18941ed0.47dc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume10\Windows\System32\shell32.dll'.
18951ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Windows\System32\shell32.dll' [rescheduled]
18961ed0.47dc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'.
18971ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll' [rescheduled]
18981ed0.47dc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume10\Windows\System32\win32u.dll'.
18991ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Windows\System32\win32u.dll' [rescheduled]
19001ed0.47dc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume10\Windows\System32\gdi32.dll'.
19011ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Windows\System32\gdi32.dll' [rescheduled]
19021ed0.47dc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume10\Windows\System32\user32.dll'.
19031ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Windows\System32\user32.dll' [rescheduled]
19041ed0.47dc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume10\Windows\System32\msvcp_win.dll'.
19051ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Windows\System32\msvcp_win.dll' [rescheduled]
19061ed0.47dc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume10\Windows\System32\combase.dll'.
19071ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Windows\System32\combase.dll' [rescheduled]
19081ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9d8200000 'C:\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll'
19091ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1eec0000 'C:\WINDOWS\system32\rsaenh.dll'
19101ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1fe90000 'C:\WINDOWS\System32\crypt32.dll'
19111ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume10\Windows\System32\imm32.dll'
19121ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1eec0000 'C:\WINDOWS\system32\rsaenh.dll'
19131ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1fe90000 'C:\WINDOWS\System32\crypt32.dll'
19141ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume10\Windows\System32\gdi32full.dll'
19151ed0.47dc: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000498 pwszName=\Device\HarddiskVolume10\Windows\System32\glu32.dll
19161ed0.47dc: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000001609d30
19171ed0.47dc: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000001609d30
19181ed0.47dc: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=29BF86ABBB5F65F63E9219A66409F06565B8606E
19191ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1eec0000 'C:\WINDOWS\system32\rsaenh.dll'
19201ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1fe90000 'C:\WINDOWS\System32\crypt32.dll'
19211ed0.47dc: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0312~31bf3856ad364e35~amd64~~10.0.19041.1766.cat'; file='\Device\HarddiskVolume10\Windows\System32\glu32.dll'
19221ed0.47dc: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
19231ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume10\Windows\System32\glu32.dll'
19241ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1eec0000 'C:\WINDOWS\system32\rsaenh.dll'
19251ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1fe90000 'C:\WINDOWS\System32\crypt32.dll'
19261ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume10\Windows\System32\mpr.dll'
19271ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1eec0000 'C:\WINDOWS\system32\rsaenh.dll'
19281ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1fe90000 'C:\WINDOWS\System32\crypt32.dll'
19291ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume10\Windows\System32\shell32.dll'
19301ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1eec0000 'C:\WINDOWS\system32\rsaenh.dll'
19311ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 24202) fWinVerifyTrust=1 for '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'
19321ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1eec0000 'C:\WINDOWS\system32\rsaenh.dll'
19331ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1fe90000 'C:\WINDOWS\System32\crypt32.dll'
19341ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume10\Windows\System32\win32u.dll'
19351ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1eec0000 'C:\WINDOWS\system32\rsaenh.dll'
19361ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1fe90000 'C:\WINDOWS\System32\crypt32.dll'
19371ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume10\Windows\System32\gdi32.dll'
19381ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1eec0000 'C:\WINDOWS\system32\rsaenh.dll'
19391ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1fe90000 'C:\WINDOWS\System32\crypt32.dll'
19401ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume10\Windows\System32\user32.dll'
19411ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1eec0000 'C:\WINDOWS\system32\rsaenh.dll'
19421ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1fe90000 'C:\WINDOWS\System32\crypt32.dll'
19431ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume10\Windows\System32\msvcp_win.dll'
19441ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1eec0000 'C:\WINDOWS\system32\rsaenh.dll'
19451ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1fe90000 'C:\WINDOWS\System32\crypt32.dll'
19461ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume10\Windows\System32\combase.dll'
19471ed0.47dc: SUPR3HardenedMain: Calling TrustedMain (00007ff9d82016c0)...
19481ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #32 'combase.dll'.
19491ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #33 'msvcp_win.dll'.
19501ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #35 'wldp.dll'.
19511ed0.47dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume10\Windows\System32\windows.storage.dll)
19521ed0.47dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume10\Windows\System32\windows.storage.dll
19531ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
19541ed0.47dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume10\Windows\System32\wldp.dll)
19551ed0.47dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume10\Windows\System32\wldp.dll
19561ed0.47dc: supR3HardenedDllNotificationCallback: load 00007ffa1f740000 LB 0x0002c000 C:\WINDOWS\SYSTEM32\Wldp.dll [fFlags=0x0]
19571ed0.47dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\wldp.dll [avoiding WinVerifyTrust]
19581ed0.47dc: supR3HardenedDllNotificationCallback: load 00007ffa1dde0000 LB 0x00794000 C:\WINDOWS\SYSTEM32\windows.storage.dll [fFlags=0x0]
19591ed0.47dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\windows.storage.dll [avoiding WinVerifyTrust]
19601ed0.47dc: supR3HardenedDllNotificationCallback: load 00007ffa21ee0000 LB 0x000ad000 C:\WINDOWS\System32\SHCORE.dll [fFlags=0x0]
19611ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
19621ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #42 'combase.dll'.
19631ed0.47dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume10\Windows\System32\SHCore.dll)
19641ed0.47dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume10\Windows\System32\SHCore.dll
19651ed0.47dc: supR3HardenedDllNotificationCallback: load 00007ffa21e80000 LB 0x00055000 C:\WINDOWS\System32\shlwapi.dll [fFlags=0x0]
19661ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcrt.dll'.
19671ed0.47dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume10\Windows\System32\shlwapi.dll)
19681ed0.47dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume10\Windows\System32\shlwapi.dll
19691ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
19701ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume10\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
19711ed0.47dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\msvcrt.dll
19721ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
19731ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume10\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
19741ed0.47dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\combase.dll
19751ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
19761ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume10\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
19771ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
19781ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume10\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
19791ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'wldp.dll'...
19801ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'wldp.dll' -> '\Device\HarddiskVolume10\Windows\System32\wldp.dll' [rcNtRedir=0xc0150008]
19811ed0.47dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\wldp.dll [lacks WinVerifyTrust]
19821ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
19831ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume10\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
19841ed0.47dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\msvcp_win.dll
19851ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
19861ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume10\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
19871ed0.47dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\combase.dll
19881ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1eec0000 'C:\WINDOWS\system32\rsaenh.dll'
19891ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1fe90000 'C:\WINDOWS\System32\crypt32.dll'
19901ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume10\Windows\System32\shlwapi.dll'
19911ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1eec0000 'C:\WINDOWS\system32\rsaenh.dll'
19921ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1fe90000 'C:\WINDOWS\System32\crypt32.dll'
19931ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume10\Windows\System32\SHCore.dll'
19941ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1eec0000 'C:\WINDOWS\system32\rsaenh.dll'
19951ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1fe90000 'C:\WINDOWS\System32\crypt32.dll'
19961ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume10\Windows\System32\wldp.dll'
19971ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1eec0000 'C:\WINDOWS\system32\rsaenh.dll'
19981ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1fe90000 'C:\WINDOWS\System32\crypt32.dll'
19991ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume10\Windows\System32\windows.storage.dll'
20001ed0.47dc: \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\platforms\qwindows.dll: Signature #1/2: info status: 24202
20011ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1eec0000 'C:\WINDOWS\system32\rsaenh.dll'
20021ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'gdi32.dll'.
20031ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'ole32.dll'.
20041ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'user32.dll'.
20051ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'imm32.dll'.
20061ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'winmm.dll'.
20071ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'oleaut32.dll'.
20081ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'shell32.dll'.
20091ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'advapi32.dll'.
20101ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'qt5guivbox.dll'.
20111ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'qt5corevbox.dll'.
20121ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'msvcr100.dll'.
20131ed0.47dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\platforms\qwindows.dll) WinVerifyTrust
20141ed0.47dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\platforms\qwindows.dll
20151ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
20161ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
20171ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
20181ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
20191ed0.47dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll
20201ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
20211ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
20221ed0.47dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll
20231ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
20241ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume10\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
20251ed0.47dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\advapi32.dll
20261ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
20271ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume10\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
20281ed0.47dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\shell32.dll
20291ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
20301ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume10\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
20311ed0.47dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\oleaut32.dll
20321ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
20331ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume10\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008]
20341ed0.47dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\winmm.dll
20351ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'imm32.dll'...
20361ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'imm32.dll' -> '\Device\HarddiskVolume10\Windows\System32\imm32.dll' [rcNtRedir=0xc0150008]
20371ed0.47dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\imm32.dll
20381ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
20391ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume10\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
20401ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
20411ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume10\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
20421ed0.47dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\ole32.dll
20431ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
20441ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume10\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
20451ed0.47dc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\platforms\qwindows.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
20461ed0.47dc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\platforms\qwindows.dll
20471ed0.47dc: supR3HardenedDllNotificationCallback: load 00007ff9ee380000 LB 0x0012e000 C:\Program Files\Oracle\VirtualBox\platforms\qwindows.dll [fFlags=0x0]
20481ed0.47dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\platforms\qwindows.dll
20491ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9ee380000 'C:\Program Files\Oracle\VirtualBox\platforms\qwindows.dll'
20501ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'msvcrt.dll'.
20511ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'rpcrt4.dll'.
20521ed0.47dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume10\Windows\System32\kernel.appcore.dll)
20531ed0.47dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume10\Windows\System32\kernel.appcore.dll
20541ed0.47dc: supR3HardenedDllNotificationCallback: load 00007ffa1e700000 LB 0x00012000 C:\WINDOWS\SYSTEM32\kernel.appcore.dll [fFlags=0x0]
20551ed0.47dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\kernel.appcore.dll [avoiding WinVerifyTrust]
20561ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
20571ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume10\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
20581ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
20591ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume10\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
20601ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1eec0000 'C:\WINDOWS\system32\rsaenh.dll'
20611ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1fe90000 'C:\WINDOWS\System32\crypt32.dll'
20621ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume10\Windows\System32\kernel.appcore.dll'
20631ed0.47dc: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000000000005d4 pwszName=\Device\HarddiskVolume10\Windows\System32\uxtheme.dll
20641ed0.47dc: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000001609d30
20651ed0.47dc: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000001609d30
20661ed0.47dc: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=701BFCEE1A399A1718E6AD19A8B89B9E45D98837
20671ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1eec0000 'C:\WINDOWS\system32\rsaenh.dll'
20681ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1fe90000 'C:\WINDOWS\System32\crypt32.dll'
20691ed0.47dc: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package05113~31bf3856ad364e35~amd64~~10.0.19041.1741.cat'; file='\Device\HarddiskVolume10\Windows\System32\uxtheme.dll'
20701ed0.47dc: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
20711ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
20721ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #33 'gdi32.dll'.
20731ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #34 'user32.dll'.
20741ed0.47dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume10\Windows\System32\uxtheme.dll) WinVerifyTrust
20751ed0.47dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume10\Windows\System32\uxtheme.dll
20761ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
20771ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume10\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
20781ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
20791ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume10\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
20801ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
20811ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume10\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
20821ed0.47dc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\uxtheme.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
20831ed0.47dc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\uxtheme.dll
20841ed0.47dc: supR3HardenedDllNotificationCallback: load 00007ffa1d680000 LB 0x0009e000 C:\WINDOWS\system32\uxtheme.dll [fFlags=0x0]
20851ed0.47dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\uxtheme.dll
20861ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1d680000 'C:\WINDOWS\system32\uxtheme.dll'
20871ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa21b90000 'C:\WINDOWS\system32\user32.dll'
20881ed0.47dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\shell32.dll
20891ed0.47dc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\shell32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
20901ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa212d0000 'C:\WINDOWS\system32\shell32.dll'
20911ed0.47dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\SHCore.dll
20921ed0.47dc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\SHCore.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
20931ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa21ee0000 'C:\WINDOWS\system32\SHCore.dll'
20941ed0.47dc: supR3HardenedMonitor_LdrLoadDll: error opening 'C:\WINDOWS\system32\wintab32.dll': 0 (NtPath=\??\C:\WINDOWS\system32\wintab32.dll; Input=C:\WINDOWS\system32\wintab32.dll; rcNtGetDll=0x0
20951ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0xc0000034 'C:\WINDOWS\system32\wintab32.dll'
20961ed0.47dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\winmm.dll
20971ed0.47dc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\winmm.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
20981ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa0f7d0000 'C:\WINDOWS\system32\winmm.dll'
20991ed0.47dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\winmm.dll
21001ed0.47dc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\winmm.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
21011ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa0f7d0000 'C:\WINDOWS\system32\winmm.dll'
21021ed0.47dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\shell32.dll
21031ed0.47dc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\shell32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
21041ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa212d0000 'C:\WINDOWS\system32\shell32.dll'
21051ed0.47dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\uxtheme.dll
21061ed0.47dc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\uxtheme.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
21071ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1d680000 'C:\WINDOWS\system32\uxtheme.dll'
21081ed0.47dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\advapi32.dll
21091ed0.47dc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\advapi32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
21101ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa208e0000 'C:\WINDOWS\system32\advapi32.dll'
21111ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1eec0000 'C:\WINDOWS\system32\rsaenh.dll'
21121ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1fe90000 'C:\WINDOWS\System32\crypt32.dll'
21131ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #13 'rpcrt4.dll'.
21141ed0.47dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume10\Windows\System32\userenv.dll) WinVerifyTrust
21151ed0.47dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume10\Windows\System32\userenv.dll
21161ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
21171ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume10\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
21181ed0.47dc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\userenv.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
21191ed0.47dc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\userenv.dll
21201ed0.47dc: supR3HardenedDllNotificationCallback: load 00007ffa1fd90000 LB 0x0002e000 C:\WINDOWS\system32\userenv.dll [fFlags=0x0]
21211ed0.47dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\userenv.dll
21221ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1fd90000 'C:\WINDOWS\system32\userenv.dll'
21231ed0.47dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\kernel32.dll
21241ed0.47dc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\kernel32.dll (Input=kernel32, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
21251ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa20d40000 'C:\WINDOWS\System32\kernel32.dll'
21261ed0.47dc: supR3HardenedDllNotificationCallback: load 00007ffa22030000 LB 0x000a9000 C:\WINDOWS\System32\clbcatq.dll [fFlags=0x0]
21271ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
21281ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #30 'rpcrt4.dll'.
21291ed0.47dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume10\Windows\System32\clbcatq.dll)
21301ed0.47dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume10\Windows\System32\clbcatq.dll
21311ed0.4008: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\rsaenh.dll
21321ed0.4008: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
21331ed0.4008: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume10\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
21341ed0.4008: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
21351ed0.4008: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume10\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
21361ed0.4008: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
21371ed0.4008: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1eec0000 'C:\WINDOWS\system32\rsaenh.dll'
21381ed0.4008: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1fe90000 'C:\WINDOWS\System32\crypt32.dll'
21391ed0.4008: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume10\Windows\System32\clbcatq.dll'
21401ed0.4008: \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VBoxC.dll: Signature #1/2: info status: 24202
21411ed0.4008: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1eec0000 'C:\WINDOWS\system32\rsaenh.dll'
21421ed0.4008: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
21431ed0.4008: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp100.dll'.
21441ed0.4008: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxrt.dll'.
21451ed0.4008: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'advapi32.dll'.
21461ed0.4008: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'ole32.dll'.
21471ed0.4008: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'oleaut32.dll'.
21481ed0.4008: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VBoxC.dll) WinVerifyTrust
21491ed0.4008: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VBoxC.dll
21501ed0.4008: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
21511ed0.4008: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume10\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
21521ed0.4008: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\oleaut32.dll
21531ed0.4008: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
21541ed0.4008: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume10\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
21551ed0.4008: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\ole32.dll
21561ed0.4008: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
21571ed0.4008: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume10\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
21581ed0.4008: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\advapi32.dll
21591ed0.4008: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
21601ed0.4008: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
21611ed0.4008: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
21621ed0.4008: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
21631ed0.4008: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcp100.dll
21641ed0.4008: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
21651ed0.4008: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
21661ed0.4008: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxC.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
21671ed0.4008: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VBoxC.dll
21681ed0.4008: supR3HardenedDllNotificationCallback: load 00007ff9d10c0000 LB 0x003c2000 C:\Program Files\Oracle\VirtualBox\VBoxC.dll [fFlags=0x0]
21691ed0.4008: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VBoxC.dll
21701ed0.4008: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9d10c0000 'C:\Program Files\Oracle\VirtualBox\VBoxC.dll'
21711ed0.4008: \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VBoxProxyStub.dll: Signature #1/2: info status: 24202
21721ed0.4008: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1eec0000 'C:\WINDOWS\system32\rsaenh.dll'
21731ed0.4008: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
21741ed0.4008: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
21751ed0.4008: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'advapi32.dll'.
21761ed0.4008: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'shlwapi.dll'.
21771ed0.4008: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'ole32.dll'.
21781ed0.4008: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'oleaut32.dll'.
21791ed0.4008: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'rpcrt4.dll'.
21801ed0.4008: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VBoxProxyStub.dll) WinVerifyTrust
21811ed0.4008: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VBoxProxyStub.dll
21821ed0.4008: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
21831ed0.4008: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume10\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
21841ed0.4008: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
21851ed0.4008: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume10\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
21861ed0.4008: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\oleaut32.dll
21871ed0.4008: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
21881ed0.4008: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume10\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
21891ed0.4008: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\ole32.dll
21901ed0.4008: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shlwapi.dll'...
21911ed0.4008: supR3HardenedWinVerifyCacheProcessImportTodos: 'shlwapi.dll' -> '\Device\HarddiskVolume10\Windows\System32\shlwapi.dll' [rcNtRedir=0xc0150008]
21921ed0.4008: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\shlwapi.dll
21931ed0.4008: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
21941ed0.4008: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume10\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
21951ed0.4008: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\advapi32.dll
21961ed0.4008: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
21971ed0.4008: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
21981ed0.4008: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
21991ed0.4008: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
22001ed0.4008: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxProxyStub.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
22011ed0.4008: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VBoxProxyStub.dll
22021ed0.4008: supR3HardenedDllNotificationCallback: load 00007ff9ee290000 LB 0x000ef000 C:\Program Files\Oracle\VirtualBox\VBoxProxyStub.dll [fFlags=0x0]
22031ed0.4008: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VBoxProxyStub.dll
22041ed0.4008: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9ee290000 'C:\Program Files\Oracle\VirtualBox\VBoxProxyStub.dll'
22051ed0.4008: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\oleaut32.dll
22061ed0.4008: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\oleaut32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
22071ed0.4008: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa20b50000 'C:\Windows\System32\oleaut32.dll'
22081ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa207d0000 'C:\WINDOWS\system32\gdi32.dll'
22091ed0.35f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1eec0000 'C:\WINDOWS\system32\rsaenh.dll'
22101ed0.35f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1eec0000 'C:\WINDOWS\system32\rsaenh.dll'
22111ed0.35f8: \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxPuelMainVM.dll: Signature #1/2: info status: 24202
22121ed0.35f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1eec0000 'C:\WINDOWS\system32\rsaenh.dll'
22131ed0.35f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
22141ed0.35f8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
22151ed0.35f8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxPuelMainVM.dll) WinVerifyTrust
22161ed0.35f8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxPuelMainVM.dll
22171ed0.35f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
22181ed0.35f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
22191ed0.35f8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
22201ed0.35f8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
22211ed0.35f8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxPuelMainVM.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
22221ed0.35f8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxPuelMainVM.dll
22231ed0.35f8: supR3HardenedDllNotificationCallback: load 00007ffa165c0000 LB 0x0000e000 C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxPuelMainVM.DLL [fFlags=0x0]
22241ed0.35f8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxPuelMainVM.dll
22251ed0.35f8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa165c0000 'C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxPuelMainVM.DLL'
22261ed0.47dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\shell32.dll
22271ed0.47dc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\shell32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
22281ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa212d0000 'C:\WINDOWS\system32\shell32.dll'
22291ed0.47dc: supR3HardenedDllNotificationCallback: load 00007ffa20c20000 LB 0x00115000 C:\WINDOWS\System32\MSCTF.dll [fFlags=0x0]
22301ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
22311ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'oleaut32.dll'.
22321ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #36 'user32.dll'.
22331ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #37 'gdi32.dll'.
22341ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #38 'imm32.dll'.
22351ed0.47dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume10\Windows\System32\msctf.dll)
22361ed0.47dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume10\Windows\System32\msctf.dll
22371ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'imm32.dll'...
22381ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'imm32.dll' -> '\Device\HarddiskVolume10\Windows\System32\imm32.dll' [rcNtRedir=0xc0150008]
22391ed0.47dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\imm32.dll
22401ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
22411ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume10\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
22421ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
22431ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume10\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
22441ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
22451ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume10\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
22461ed0.47dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\oleaut32.dll
22471ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
22481ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume10\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
22491ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1eec0000 'C:\WINDOWS\system32\rsaenh.dll'
22501ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1fe90000 'C:\WINDOWS\System32\crypt32.dll'
22511ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume10\Windows\System32\msctf.dll'
22521ed0.47dc: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000984 pwszName=\Device\HarddiskVolume10\Windows\System32\DataExchange.dll
22531ed0.47dc: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000001609d30
22541ed0.47dc: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000001609d30
22551ed0.47dc: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=F602E8855BCD942955FA9DBB13C4E4D44C41A311
22561ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1eec0000 'C:\WINDOWS\system32\rsaenh.dll'
22571ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1fe90000 'C:\WINDOWS\System32\crypt32.dll'
22581ed0.47dc: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0510~31bf3856ad364e35~amd64~~10.0.19041.1706.cat'; file='\Device\HarddiskVolume10\Windows\System32\DataExchange.dll'
22591ed0.47dc: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
22601ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
22611ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #26 'd3d11.dll'.
22621ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #27 'dcomp.dll'.
22631ed0.47dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume10\Windows\System32\DataExchange.dll) WinVerifyTrust
22641ed0.47dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume10\Windows\System32\DataExchange.dll
22651ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'dcomp.dll'...
22661ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'dcomp.dll' -> '\Device\HarddiskVolume10\Windows\System32\dcomp.dll' [rcNtRedir=0xc0150008]
22671ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1eec0000 'C:\WINDOWS\system32\rsaenh.dll'
22681ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1fe90000 'C:\WINDOWS\System32\crypt32.dll'
22691ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'win32u.dll'.
22701ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp_win.dll'.
22711ed0.47dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume10\Windows\System32\dcomp.dll) WinVerifyTrust
22721ed0.47dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume10\Windows\System32\dcomp.dll
22731ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'd3d11.dll'...
22741ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'd3d11.dll' -> '\Device\HarddiskVolume10\Windows\System32\d3d11.dll' [rcNtRedir=0xc0150008]
22751ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
22761ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume10\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
22771ed0.47dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\msvcp_win.dll
22781ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
22791ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume10\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
22801ed0.47dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\win32u.dll
22811ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1eec0000 'C:\WINDOWS\system32\rsaenh.dll'
22821ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1fe90000 'C:\WINDOWS\System32\crypt32.dll'
22831ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
22841ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #26 'dxgi.dll'.
22851ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #28 'win32u.dll'.
22861ed0.47dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume10\Windows\System32\d3d11.dll) WinVerifyTrust
22871ed0.47dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume10\Windows\System32\d3d11.dll
22881ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
22891ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume10\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
22901ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
22911ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume10\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
22921ed0.47dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\win32u.dll
22931ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'dxgi.dll'...
22941ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'dxgi.dll' -> '\Device\HarddiskVolume10\Windows\System32\dxgi.dll' [rcNtRedir=0xc0150008]
22951ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1eec0000 'C:\WINDOWS\system32\rsaenh.dll'
22961ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1fe90000 'C:\WINDOWS\System32\crypt32.dll'
22971ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
22981ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'win32u.dll'.
22991ed0.47dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume10\Windows\System32\dxgi.dll) WinVerifyTrust
23001ed0.47dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume10\Windows\System32\dxgi.dll
23011ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
23021ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume10\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
23031ed0.47dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\msvcrt.dll
23041ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
23051ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume10\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
23061ed0.47dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\win32u.dll
23071ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
23081ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume10\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
23091ed0.47dc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\dataexchange.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
23101ed0.47dc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\DataExchange.dll
23111ed0.47dc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\d3d11.dll
23121ed0.47dc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\dcomp.dll
23131ed0.47dc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\dxgi.dll
23141ed0.47dc: supR3HardenedDllNotificationCallback: load 00007ffa1e750000 LB 0x000f3000 C:\WINDOWS\system32\dxgi.dll [fFlags=0x0]
23151ed0.47dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\dxgi.dll
23161ed0.47dc: supR3HardenedDllNotificationCallback: load 00007ffa1c090000 LB 0x00263000 C:\WINDOWS\system32\d3d11.dll [fFlags=0x0]
23171ed0.47dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\d3d11.dll
23181ed0.47dc: supR3HardenedDllNotificationCallback: load 00007ffa1c760000 LB 0x001e4000 C:\WINDOWS\system32\dcomp.dll [fFlags=0x0]
23191ed0.47dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\dcomp.dll
23201ed0.47dc: supR3HardenedDllNotificationCallback: load 00007ff9f1010000 LB 0x0003e000 C:\WINDOWS\system32\dataexchange.dll [fFlags=0x0]
23211ed0.47dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\DataExchange.dll
23221ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa207d0000 'C:\WINDOWS\System32\gdi32.dll'
23231ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f1010000 'C:\WINDOWS\system32\dataexchange.dll'
23241ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #30 'rpcrt4.dll'.
23251ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #43 'combase.dll'.
23261ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #45 'msvcp_win.dll'.
23271ed0.47dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume10\Windows\System32\twinapi.appcore.dll)
23281ed0.47dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume10\Windows\System32\twinapi.appcore.dll
23291ed0.47dc: supR3HardenedDllNotificationCallback: load 00007ffa16070000 LB 0x00200000 C:\WINDOWS\system32\twinapi.appcore.dll [fFlags=0x0]
23301ed0.47dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\twinapi.appcore.dll [avoiding WinVerifyTrust]
23311ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
23321ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume10\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
23331ed0.47dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\msvcp_win.dll
23341ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
23351ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume10\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
23361ed0.47dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\combase.dll
23371ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
23381ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume10\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
23391ed0.47dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\rpcrt4.dll
23401ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1eec0000 'C:\WINDOWS\system32\rsaenh.dll'
23411ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1fe90000 'C:\WINDOWS\System32\crypt32.dll'
23421ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume10\Windows\System32\twinapi.appcore.dll'
23431ed0.47dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\SHCore.dll
23441ed0.47dc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\Shcore.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
23451ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa21ee0000 'C:\WINDOWS\system32\Shcore.dll'
23461ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
23471ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #15 'oleaut32.dll'.
23481ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #17 'rpcrt4.dll'.
23491ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #20 'coreuicomponents.dll'.
23501ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #21 'coremessaging.dll'.
23511ed0.47dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume10\Windows\System32\TextInputFramework.dll)
23521ed0.47dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume10\Windows\System32\TextInputFramework.dll
23531ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
23541ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #35 'coremessaging.dll'.
23551ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #40 'rpcrt4.dll'.
23561ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #48 'shcore.dll'.
23571ed0.47dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume10\Windows\System32\CoreUIComponents.dll)
23581ed0.47dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume10\Windows\System32\CoreUIComponents.dll
23591ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
23601ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #20 'ws2_32.dll'.
23611ed0.47dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume10\Windows\System32\CoreMessaging.dll)
23621ed0.47dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume10\Windows\System32\CoreMessaging.dll
23631ed0.47dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume10\Windows\System32\ntmarta.dll)
23641ed0.47dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume10\Windows\System32\ntmarta.dll
23651ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'combase.dll'.
23661ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #24 'rpcrt4.dll'.
23671ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #32 'bcryptprimitives.dll'.
23681ed0.47dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume10\Windows\System32\WinTypes.dll)
23691ed0.47dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume10\Windows\System32\WinTypes.dll
23701ed0.47dc: supR3HardenedDllNotificationCallback: load 00007ffa1eb50000 LB 0x00033000 C:\WINDOWS\SYSTEM32\ntmarta.dll [fFlags=0x0]
23711ed0.47dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\ntmarta.dll [avoiding WinVerifyTrust]
23721ed0.47dc: supR3HardenedDllNotificationCallback: load 00007ffa1d2c0000 LB 0x000f2000 C:\WINDOWS\System32\CoreMessaging.dll [fFlags=0x0]
23731ed0.47dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\CoreMessaging.dll [avoiding WinVerifyTrust]
23741ed0.47dc: supR3HardenedDllNotificationCallback: load 00007ffa1ccd0000 LB 0x00154000 C:\WINDOWS\SYSTEM32\wintypes.dll [fFlags=0x0]
23751ed0.47dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\WinTypes.dll [avoiding WinVerifyTrust]
23761ed0.47dc: supR3HardenedDllNotificationCallback: load 00007ffa1cf30000 LB 0x0035e000 C:\WINDOWS\System32\CoreUIComponents.dll [fFlags=0x0]
23771ed0.47dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\CoreUIComponents.dll [avoiding WinVerifyTrust]
23781ed0.47dc: supR3HardenedDllNotificationCallback: load 00007ffa16b80000 LB 0x000f9000 C:\WINDOWS\SYSTEM32\textinputframework.dll [fFlags=0x0]
23791ed0.47dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\TextInputFramework.dll [avoiding WinVerifyTrust]
23801ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcryptprimitives.dll'...
23811ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcryptprimitives.dll' -> '\Device\HarddiskVolume10\Windows\System32\bcryptprimitives.dll' [rcNtRedir=0xc0150008]
23821ed0.47dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\bcryptprimitives.dll
23831ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
23841ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume10\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
23851ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
23861ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume10\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
23871ed0.47dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\combase.dll
23881ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
23891ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume10\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
23901ed0.47dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\ws2_32.dll
23911ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
23921ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume10\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
23931ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shcore.dll'...
23941ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'shcore.dll' -> '\Device\HarddiskVolume10\Windows\System32\shcore.dll' [rcNtRedir=0xc0150008]
23951ed0.47dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\SHCore.dll
23961ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
23971ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume10\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
23981ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'coremessaging.dll'...
23991ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'coremessaging.dll' -> '\Device\HarddiskVolume10\Windows\System32\coremessaging.dll' [rcNtRedir=0xc0150008]
24001ed0.47dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\CoreMessaging.dll [lacks WinVerifyTrust]
24011ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
24021ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume10\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
24031ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'coremessaging.dll'...
24041ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'coremessaging.dll' -> '\Device\HarddiskVolume10\Windows\System32\coremessaging.dll' [rcNtRedir=0xc0150008]
24051ed0.47dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\CoreMessaging.dll [lacks WinVerifyTrust]
24061ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'coreuicomponents.dll'...
24071ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'coreuicomponents.dll' -> '\Device\HarddiskVolume10\Windows\System32\coreuicomponents.dll' [rcNtRedir=0xc0150008]
24081ed0.47dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\CoreUIComponents.dll [lacks WinVerifyTrust]
24091ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
24101ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume10\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
24111ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
24121ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume10\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
24131ed0.47dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\oleaut32.dll
24141ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
24151ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume10\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
24161ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1eec0000 'C:\WINDOWS\system32\rsaenh.dll'
24171ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1fe90000 'C:\WINDOWS\System32\crypt32.dll'
24181ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume10\Windows\System32\WinTypes.dll'
24191ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1eec0000 'C:\WINDOWS\system32\rsaenh.dll'
24201ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1fe90000 'C:\WINDOWS\System32\crypt32.dll'
24211ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume10\Windows\System32\ntmarta.dll'
24221ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1eec0000 'C:\WINDOWS\system32\rsaenh.dll'
24231ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1fe90000 'C:\WINDOWS\System32\crypt32.dll'
24241ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume10\Windows\System32\CoreMessaging.dll'
24251ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1eec0000 'C:\WINDOWS\system32\rsaenh.dll'
24261ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1fe90000 'C:\WINDOWS\System32\crypt32.dll'
24271ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume10\Windows\System32\CoreUIComponents.dll'
24281ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1eec0000 'C:\WINDOWS\system32\rsaenh.dll'
24291ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1fe90000 'C:\WINDOWS\System32\crypt32.dll'
24301ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume10\Windows\System32\TextInputFramework.dll'
24311ed0.47dc: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(ext-ms-win-rtcore-ntuser-window-ext-l1-1-0.dll) -> 0x0, fPresent=1
24321ed0.47dc: supR3HardenedMonitor_LdrLoadDll: pName=ext-ms-win-rtcore-ntuser-window-ext-l1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
24331ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa21b90000 'ext-ms-win-rtcore-ntuser-window-ext-l1-1-0.dll'
24341ed0.47dc: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(ext-ms-win-rtcore-ntuser-integration-l1-1-0.dll) -> 0x0, fPresent=1
24351ed0.47dc: supR3HardenedMonitor_LdrLoadDll: pName=ext-ms-win-rtcore-ntuser-integration-l1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
24361ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa21b90000 'ext-ms-win-rtcore-ntuser-integration-l1-1-0.dll'
24371ed0.47dc: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-com-l1-1-0.dll) -> 0x0, fPresent=1
24381ed0.47dc: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-com-l1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
24391ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa20e00000 'api-ms-win-core-com-l1-1-0.dll'
24401ed0.47dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\msctf.dll
24411ed0.47dc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\MSCTF.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
24421ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa20c20000 'C:\WINDOWS\System32\MSCTF.dll'
24431ed0.47dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\ole32.dll
24441ed0.47dc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\ole32.dll (Input=ole32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
24451ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa21d40000 'C:\WINDOWS\System32\ole32.dll'
24461ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa20b50000 'C:\WINDOWS\System32\OLEAUT32.dll'
24471ed0.47dc: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000aac pwszName=\Device\HarddiskVolume10\Windows\System32\wbem\wbemprox.dll
24481ed0.47dc: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000001609d30
24491ed0.47dc: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000001609d30
24501ed0.47dc: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=D5E9B4B8E891F6D9AAF89D119CB8AAE1934ED673
24511ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1eec0000 'C:\WINDOWS\system32\rsaenh.dll'
24521ed0.47dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\crypt32.dll
24531ed0.47dc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\crypt32.dll (Input=crypt32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
24541ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1fe90000 'C:\WINDOWS\System32\crypt32.dll'
24551ed0.47dc: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package04~31bf3856ad364e35~amd64~~10.0.19041.1645.cat'; file='\Device\HarddiskVolume10\Windows\System32\wbem\wbemprox.dll'
24561ed0.47dc: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
24571ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
24581ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'ws2_32.dll'.
24591ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #18 'wbemcomn.dll'.
24601ed0.47dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume10\Windows\System32\wbem\wbemprox.dll) WinVerifyTrust
24611ed0.47dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume10\Windows\System32\wbem\wbemprox.dll
24621ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'wbemcomn.dll'...
24631ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'wbemcomn.dll' -> '\Device\HarddiskVolume10\Windows\System32\wbemcomn.dll' [rcNtRedir=0xc0150008]
24641ed0.47dc: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000ad8 pwszName=\Device\HarddiskVolume10\Windows\System32\wbemcomn.dll
24651ed0.47dc: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000001609d30
24661ed0.47dc: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000001609d30
24671ed0.47dc: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=B97C1D711C478066C1314800E4F6D26F93811194
24681ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1eec0000 'C:\WINDOWS\system32\rsaenh.dll'
24691ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1fe90000 'C:\WINDOWS\System32\crypt32.dll'
24701ed0.47dc: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package04~31bf3856ad364e35~amd64~~10.0.19041.1645.cat'; file='\Device\HarddiskVolume10\Windows\System32\wbemcomn.dll'
24711ed0.47dc: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
24721ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
24731ed0.47dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume10\Windows\System32\wbemcomn.dll) WinVerifyTrust
24741ed0.47dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume10\Windows\System32\wbemcomn.dll
24751ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
24761ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume10\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
24771ed0.47dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\ws2_32.dll
24781ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
24791ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume10\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
24801ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
24811ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume10\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
24821ed0.47dc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\wbem\wbemprox.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
24831ed0.47dc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\wbem\wbemprox.dll
24841ed0.47dc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\wbemcomn.dll
24851ed0.47dc: supR3HardenedDllNotificationCallback: load 00007ffa19a00000 LB 0x00090000 C:\WINDOWS\SYSTEM32\wbemcomn.dll [fFlags=0x0]
24861ed0.47dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\wbemcomn.dll
24871ed0.47dc: supR3HardenedDllNotificationCallback: load 00007ffa18a10000 LB 0x00011000 C:\WINDOWS\system32\wbem\wbemprox.dll [fFlags=0x0]
24881ed0.47dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\wbem\wbemprox.dll
24891ed0.47dc: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(API-MS-Win-Core-LocalRegistry-L1-1-0.dll) -> 0x0, fPresent=1
24901ed0.47dc: supR3HardenedMonitor_LdrLoadDll: pName=API-MS-Win-Core-LocalRegistry-L1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
24911ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa20090000 'API-MS-Win-Core-LocalRegistry-L1-1-0.dll'
24921ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa18a10000 'C:\WINDOWS\system32\wbem\wbemprox.dll'
24931ed0.47dc: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000ae8 pwszName=\Device\HarddiskVolume10\Windows\System32\wbem\wbemsvc.dll
24941ed0.47dc: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000001609d30
24951ed0.47dc: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000001609d30
24961ed0.47dc: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=8CA332CD27CD01F33F85EB4BED516FAA617B555A
24971ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1eec0000 'C:\WINDOWS\system32\rsaenh.dll'
24981ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1fe90000 'C:\WINDOWS\System32\crypt32.dll'
24991ed0.47dc: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package04~31bf3856ad364e35~amd64~~10.0.19041.1645.cat'; file='\Device\HarddiskVolume10\Windows\System32\wbem\wbemsvc.dll'
25001ed0.47dc: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
25011ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
25021ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'rpcrt4.dll'.
25031ed0.47dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume10\Windows\System32\wbem\wbemsvc.dll) WinVerifyTrust
25041ed0.47dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume10\Windows\System32\wbem\wbemsvc.dll
25051ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
25061ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume10\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
25071ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
25081ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume10\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
25091ed0.47dc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\wbem\wbemsvc.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
25101ed0.47dc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\wbem\wbemsvc.dll
25111ed0.47dc: supR3HardenedDllNotificationCallback: load 00007ffa18160000 LB 0x00014000 C:\WINDOWS\system32\wbem\wbemsvc.dll [fFlags=0x0]
25121ed0.47dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\wbem\wbemsvc.dll
25131ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa18160000 'C:\WINDOWS\system32\wbem\wbemsvc.dll'
25141ed0.47dc: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-localization-l1-2-0.dll) -> 0x0, fPresent=1
25151ed0.47dc: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-l1-2-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
25161ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa20090000 'api-ms-win-core-localization-l1-2-0.dll'
25171ed0.47dc: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-localization-obsolete-l1-1-0.dll) -> 0x0, fPresent=1
25181ed0.47dc: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-obsolete-l1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
25191ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa20090000 'api-ms-win-core-localization-obsolete-l1-1-0.dll'
25201ed0.47dc: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000b10 pwszName=\Device\HarddiskVolume10\Windows\System32\wbem\fastprox.dll
25211ed0.47dc: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000001609d30
25221ed0.47dc: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000001609d30
25231ed0.47dc: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=184DC69A17259EC62BC6A74793DCE28D7CC5A1AC
25241ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1eec0000 'C:\WINDOWS\system32\rsaenh.dll'
25251ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1fe90000 'C:\WINDOWS\System32\crypt32.dll'
25261ed0.47dc: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package04~31bf3856ad364e35~amd64~~10.0.19041.1645.cat'; file='\Device\HarddiskVolume10\Windows\System32\wbem\fastprox.dll'
25271ed0.47dc: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
25281ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
25291ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #20 'wbemcomn.dll'.
25301ed0.47dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume10\Windows\System32\wbem\fastprox.dll) WinVerifyTrust
25311ed0.47dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume10\Windows\System32\wbem\fastprox.dll
25321ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'wbemcomn.dll'...
25331ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'wbemcomn.dll' -> '\Device\HarddiskVolume10\Windows\System32\wbemcomn.dll' [rcNtRedir=0xc0150008]
25341ed0.47dc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\wbemcomn.dll
25351ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
25361ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume10\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
25371ed0.47dc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\wbem\fastprox.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
25381ed0.47dc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\wbem\fastprox.dll
25391ed0.47dc: supR3HardenedDllNotificationCallback: load 00007ffa18180000 LB 0x0010b000 C:\WINDOWS\system32\wbem\fastprox.dll [fFlags=0x0]
25401ed0.47dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\wbem\fastprox.dll
25411ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa18180000 'C:\WINDOWS\system32\wbem\fastprox.dll'
25421ed0.47dc: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000b1c pwszName=\Device\HarddiskVolume10\Windows\System32\amsi.dll
25431ed0.47dc: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000001609d30
25441ed0.47dc: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000001609d30
25451ed0.47dc: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=4E037358D3BFB2BDA56CED3A1B6A631D12D37E28
25461ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1eec0000 'C:\WINDOWS\system32\rsaenh.dll'
25471ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1fe90000 'C:\WINDOWS\System32\crypt32.dll'
25481ed0.47dc: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package05~31bf3856ad364e35~amd64~~10.0.19041.1766.cat'; file='\Device\HarddiskVolume10\Windows\System32\amsi.dll'
25491ed0.47dc: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
25501ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
25511ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #14 'rpcrt4.dll'.
25521ed0.47dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume10\Windows\System32\amsi.dll) WinVerifyTrust
25531ed0.47dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume10\Windows\System32\amsi.dll
25541ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
25551ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume10\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
25561ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
25571ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume10\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
25581ed0.47dc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\amsi.dll (Input=amsi.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
25591ed0.47dc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\amsi.dll
25601ed0.47dc: supR3HardenedDllNotificationCallback: load 00007ffa16e60000 LB 0x00020000 C:\WINDOWS\System32\amsi.dll [fFlags=0x0]
25611ed0.47dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\amsi.dll
25621ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16e60000 'C:\WINDOWS\System32\amsi.dll'
25631ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1eec0000 'C:\WINDOWS\system32\rsaenh.dll'
25641ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1fe90000 'C:\WINDOWS\System32\crypt32.dll'
25651ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'advapi32.dll'.
25661ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'ole32.dll'.
25671ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'oleaut32.dll'.
25681ed0.47dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume10\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MpOAV.dll) WinVerifyTrust
25691ed0.47dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume10\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MpOAV.dll
25701ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
25711ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume10\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
25721ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
25731ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume10\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
25741ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
25751ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume10\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
25761ed0.47dc: supR3HardenedMonitor_LdrLoadDll: pName=C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MpOav.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
25771ed0.47dc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MpOAV.dll
25781ed0.47dc: supR3HardenedDllNotificationCallback: load 00007ffa16c80000 LB 0x0007b000 C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MpOav.dll [fFlags=0x0]
25791ed0.47dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MpOAV.dll
25801ed0.47dc: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-synch-l1-2-0) -> 0x0, fPresent=1
25811ed0.47dc: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-synch-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
25821ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa20090000 'api-ms-win-core-synch-l1-2-0'
25831ed0.47dc: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-localization-l1-2-1) -> 0x0, fPresent=1
25841ed0.47dc: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-l1-2-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
25851ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa20090000 'api-ms-win-core-localization-l1-2-1'
25861ed0.47dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\kernel32.dll
25871ed0.47dc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\kernel32.dll (Input=kernel32, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
25881ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa20d40000 'C:\WINDOWS\System32\kernel32.dll'
25891ed0.47dc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume10\Windows\System32\version.dll'.
25901ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
25911ed0.47dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume10\Windows\System32\version.dll)
25921ed0.47dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume10\Windows\System32\version.dll
25931ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
25941ed0.47dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume10\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
25951ed0.47dc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\version.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
25961ed0.47dc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\version.dll [avoiding WinVerifyTrust]
25971ed0.47dc: supR3HardenedDllNotificationCallback: load 00007ffa18740000 LB 0x0000a000 C:\WINDOWS\system32\version.dll [fFlags=0x0]
25981ed0.47dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\version.dll [avoiding WinVerifyTrust]
25991ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa18740000 'C:\WINDOWS\system32\version.dll'
26001ed0.47dc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume10\Windows\System32\version.dll'.
26011ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume10\Windows\System32\version.dll' [rescheduled]
26021ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16c80000 'C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MpOav.dll'
26031ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1eec0000 'C:\WINDOWS\system32\rsaenh.dll'
26041ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1fe90000 'C:\WINDOWS\System32\crypt32.dll'
26051ed0.47dc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume10\Windows\System32\version.dll'
26061ed0.47dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa208e0000 'C:\WINDOWS\System32\ADVAPI32.dll'
26071ed0.1ee0: \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VBoxVMM.dll: Signature #1/2: info status: 24202
26081ed0.1ee0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1eec0000 'C:\WINDOWS\system32\rsaenh.dll'
26091ed0.1ee0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
26101ed0.1ee0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
26111ed0.1ee0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VBoxVMM.dll) WinVerifyTrust
26121ed0.1ee0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VBoxVMM.dll
26131ed0.1ee0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
26141ed0.1ee0: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
26151ed0.1ee0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
26161ed0.1ee0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
26171ed0.1ee0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxVMM.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
26181ed0.1ee0: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VBoxVMM.dll
26191ed0.1ee0: supR3HardenedDllNotificationCallback: load 00007ff9d5520000 LB 0x0037e000 C:\Program Files\Oracle\VirtualBox\VBoxVMM.DLL [fFlags=0x0]
26201ed0.1ee0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VBoxVMM.dll
26211ed0.1ee0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9d5520000 'C:\Program Files\Oracle\VirtualBox\VBoxVMM.DLL'
26221ed0.129c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa21d40000 'C:\WINDOWS\system32\ole32.dll'
26231ed0.129c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1eec0000 'C:\WINDOWS\system32\rsaenh.dll'
26241ed0.129c: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000cc4 pwszName=\Device\HarddiskVolume10\Windows\System32\NetSetupShim.dll
26251ed0.129c: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000001609d30
26261ed0.129c: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000001609d30
26271ed0.129c: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=BAC8C290E6A586220883FAD5DCDC734D078E5A36
26281ed0.129c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1eec0000 'C:\WINDOWS\system32\rsaenh.dll'
26291ed0.129c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1fe90000 'C:\WINDOWS\System32\crypt32.dll'
26301ed0.129c: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package05111~31bf3856ad364e35~amd64~~10.0.19041.1645.cat'; file='\Device\HarddiskVolume10\Windows\System32\NetSetupShim.dll'
26311ed0.129c: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
26321ed0.129c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcp_win.dll'.
26331ed0.129c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #31 'rpcrt4.dll'.
26341ed0.129c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #32 'oleaut32.dll'.
26351ed0.129c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #34 'ws2_32.dll'.
26361ed0.129c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #35 'netsetupapi.dll'.
26371ed0.129c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #36 'setupapi.dll'.
26381ed0.129c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #37 'devrtl.dll'.
26391ed0.129c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume10\Windows\System32\NetSetupShim.dll) WinVerifyTrust
26401ed0.129c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume10\Windows\System32\NetSetupShim.dll
26411ed0.129c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'devrtl.dll'...
26421ed0.129c: supR3HardenedWinVerifyCacheProcessImportTodos: 'devrtl.dll' -> '\Device\HarddiskVolume10\Windows\System32\devrtl.dll' [rcNtRedir=0xc0150008]
26431ed0.129c: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000cb4 pwszName=\Device\HarddiskVolume10\Windows\System32\devrtl.dll
26441ed0.129c: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000001609d30
26451ed0.129c: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000001609d30
26461ed0.129c: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=14277C1223BB514B07ED4CDDA4F2EA5BFA8BD59B
26471ed0.129c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1eec0000 'C:\WINDOWS\system32\rsaenh.dll'
26481ed0.129c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1fe90000 'C:\WINDOWS\System32\crypt32.dll'
26491ed0.129c: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0516~31bf3856ad364e35~amd64~~10.0.19041.1766.cat'; file='\Device\HarddiskVolume10\Windows\System32\devrtl.dll'
26501ed0.129c: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
26511ed0.129c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume10\Windows\System32\devrtl.dll) WinVerifyTrust
26521ed0.129c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume10\Windows\System32\devrtl.dll
26531ed0.129c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'setupapi.dll'...
26541ed0.129c: supR3HardenedWinVerifyCacheProcessImportTodos: 'setupapi.dll' -> '\Device\HarddiskVolume10\Windows\System32\setupapi.dll' [rcNtRedir=0xc0150008]
26551ed0.129c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1eec0000 'C:\WINDOWS\system32\rsaenh.dll'
26561ed0.129c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1fe90000 'C:\WINDOWS\System32\crypt32.dll'
26571ed0.129c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
26581ed0.129c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #28 'rpcrt4.dll'.
26591ed0.129c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #35 'cfgmgr32.dll'.
26601ed0.129c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #41 'bcrypt.dll'.
26611ed0.129c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume10\Windows\System32\setupapi.dll) WinVerifyTrust
26621ed0.129c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume10\Windows\System32\setupapi.dll
26631ed0.129c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'netsetupapi.dll'...
26641ed0.129c: supR3HardenedWinVerifyCacheProcessImportTodos: 'netsetupapi.dll' -> '\Device\HarddiskVolume10\Windows\System32\netsetupapi.dll' [rcNtRedir=0xc0150008]
26651ed0.129c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcrypt.dll'...
26661ed0.129c: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcrypt.dll' -> '\Device\HarddiskVolume10\Windows\System32\bcrypt.dll' [rcNtRedir=0xc0150008]
26671ed0.129c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\bcrypt.dll
26681ed0.129c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'cfgmgr32.dll'...
26691ed0.129c: supR3HardenedWinVerifyCacheProcessImportTodos: 'cfgmgr32.dll' -> '\Device\HarddiskVolume10\Windows\System32\cfgmgr32.dll' [rcNtRedir=0xc0150008]
26701ed0.129c: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume10\Windows\System32\cfgmgr32.dll'.
26711ed0.129c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume10\Windows\System32\cfgmgr32.dll)
26721ed0.129c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume10\Windows\System32\cfgmgr32.dll
26731ed0.129c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
26741ed0.129c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume10\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
26751ed0.129c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
26761ed0.129c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume10\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
26771ed0.129c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1eec0000 'C:\WINDOWS\system32\rsaenh.dll'
26781ed0.129c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1fe90000 'C:\WINDOWS\System32\crypt32.dll'
26791ed0.129c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
26801ed0.129c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #17 'rpcrt4.dll'.
26811ed0.129c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume10\Windows\System32\NetSetupApi.dll) WinVerifyTrust
26821ed0.129c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume10\Windows\System32\NetSetupApi.dll
26831ed0.129c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
26841ed0.129c: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume10\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
26851ed0.129c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\ws2_32.dll
26861ed0.129c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
26871ed0.129c: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume10\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
26881ed0.129c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
26891ed0.129c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume10\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
26901ed0.129c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
26911ed0.129c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume10\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
26921ed0.129c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\msvcp_win.dll
26931ed0.129c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
26941ed0.129c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume10\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
26951ed0.129c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
26961ed0.129c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume10\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
26971ed0.129c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\NetSetupShim.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
26981ed0.129c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\NetSetupShim.dll
26991ed0.129c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\NetSetupApi.dll
27001ed0.129c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\devrtl.dll
27011ed0.129c: supR3HardenedDllNotificationCallback: load 00007ffa20410000 LB 0x0004e000 C:\WINDOWS\System32\cfgmgr32.dll [fFlags=0x0]
27021ed0.129c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\cfgmgr32.dll [avoiding WinVerifyTrust]
27031ed0.129c: supR3HardenedDllNotificationCallback: load 00007ffa19570000 LB 0x00026000 C:\Windows\System32\NetSetupApi.dll [fFlags=0x0]
27041ed0.129c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\NetSetupApi.dll
27051ed0.129c: supR3HardenedDllNotificationCallback: load 00007ffa22290000 LB 0x0046f000 C:\WINDOWS\System32\setupapi.dll [fFlags=0x0]
27061ed0.129c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\setupapi.dll
27071ed0.129c: supR3HardenedDllNotificationCallback: load 00007ffa0f6b0000 LB 0x00014000 C:\Windows\System32\DEVRTL.dll [fFlags=0x0]
27081ed0.129c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\devrtl.dll
27091ed0.129c: supR3HardenedDllNotificationCallback: load 00007ff9ee210000 LB 0x00078000 C:\Windows\System32\NetSetupShim.dll [fFlags=0x0]
27101ed0.129c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\NetSetupShim.dll
27111ed0.129c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9ee210000 'C:\Windows\System32\NetSetupShim.dll'
27121ed0.129c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1eec0000 'C:\WINDOWS\system32\rsaenh.dll'
27131ed0.129c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1fe90000 'C:\WINDOWS\System32\crypt32.dll'
27141ed0.129c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume10\Windows\System32\cfgmgr32.dll'
27151ed0.129c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1eec0000 'C:\WINDOWS\system32\rsaenh.dll'
27161ed0.129c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1fe90000 'C:\WINDOWS\System32\crypt32.dll'
27171ed0.129c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
27181ed0.129c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #23 'rpcrt4.dll'.
27191ed0.129c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #24 'nsi.dll'.
27201ed0.129c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #25 'winnsi.dll'.
27211ed0.129c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume10\Windows\System32\NetSetupEngine.dll) WinVerifyTrust
27221ed0.129c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume10\Windows\System32\NetSetupEngine.dll
27231ed0.129c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winnsi.dll'...
27241ed0.129c: supR3HardenedWinVerifyCacheProcessImportTodos: 'winnsi.dll' -> '\Device\HarddiskVolume10\Windows\System32\winnsi.dll' [rcNtRedir=0xc0150008]
27251ed0.129c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1eec0000 'C:\WINDOWS\system32\rsaenh.dll'
27261ed0.129c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1fe90000 'C:\WINDOWS\System32\crypt32.dll'
27271ed0.129c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'rpcrt4.dll'.
27281ed0.129c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'nsi.dll'.
27291ed0.129c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume10\Windows\System32\winnsi.dll) WinVerifyTrust
27301ed0.129c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume10\Windows\System32\winnsi.dll
27311ed0.129c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'nsi.dll'...
27321ed0.129c: supR3HardenedWinVerifyCacheProcessImportTodos: 'nsi.dll' -> '\Device\HarddiskVolume10\Windows\System32\nsi.dll' [rcNtRedir=0xc0150008]
27331ed0.129c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'nsi.dll'...
27341ed0.129c: supR3HardenedWinVerifyCacheProcessImportTodos: 'nsi.dll' -> '\Device\HarddiskVolume10\Windows\System32\nsi.dll' [rcNtRedir=0xc0150008]
27351ed0.129c: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume10\Windows\System32\nsi.dll'.
27361ed0.129c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume10\Windows\System32\nsi.dll)
27371ed0.129c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume10\Windows\System32\nsi.dll
27381ed0.129c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
27391ed0.129c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume10\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
27401ed0.129c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1eec0000 'C:\WINDOWS\system32\rsaenh.dll'
27411ed0.129c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1fe90000 'C:\WINDOWS\System32\crypt32.dll'
27421ed0.129c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume10\Windows\System32\nsi.dll) WinVerifyTrust
27431ed0.129c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
27441ed0.129c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume10\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
27451ed0.129c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
27461ed0.129c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume10\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
27471ed0.129c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\NetSetupEngine.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
27481ed0.129c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\NetSetupEngine.dll
27491ed0.129c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\winnsi.dll
27501ed0.129c: supR3HardenedDllNotificationCallback: load 00007ffa21200000 LB 0x00008000 C:\WINDOWS\System32\NSI.dll [fFlags=0x0]
27511ed0.129c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\nsi.dll [avoiding WinVerifyTrust]
27521ed0.129c: supR3HardenedDllNotificationCallback: load 00007ffa19990000 LB 0x0000b000 C:\WINDOWS\SYSTEM32\WINNSI.DLL [fFlags=0x0]
27531ed0.129c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\winnsi.dll
27541ed0.129c: supR3HardenedDllNotificationCallback: load 00007ffa0d9c0000 LB 0x000ca000 C:\Windows\System32\NetSetupEngine.dll [fFlags=0x0]
27551ed0.129c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\NetSetupEngine.dll
27561ed0.129c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa0d9c0000 'C:\Windows\System32\NetSetupEngine.dll'
27571ed0.129c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1eec0000 'C:\WINDOWS\system32\rsaenh.dll'
27581ed0.129c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1fe90000 'C:\WINDOWS\System32\crypt32.dll'
27591ed0.129c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume10\Windows\System32\nsi.dll'
27601ed0.39a8: \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VBoxSharedClipboard.dll: Signature #1/2: info status: 24202
27611ed0.39a8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1eec0000 'C:\WINDOWS\system32\rsaenh.dll'
27621ed0.39a8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
27631ed0.39a8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp100.dll'.
27641ed0.39a8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxvmm.dll'.
27651ed0.39a8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'vboxrt.dll'.
27661ed0.39a8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'user32.dll'.
27671ed0.39a8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VBoxSharedClipboard.dll) WinVerifyTrust
27681ed0.39a8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VBoxSharedClipboard.dll
27691ed0.39a8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
27701ed0.39a8: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume10\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
27711ed0.39a8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\user32.dll
27721ed0.39a8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
27731ed0.39a8: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
27741ed0.39a8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxvmm.dll'...
27751ed0.39a8: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxvmm.dll' -> '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\vboxvmm.dll' [rcNtRedir=0xc0150008]
27761ed0.39a8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VBoxVMM.dll
27771ed0.39a8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
27781ed0.39a8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
27791ed0.39a8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
27801ed0.39a8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
27811ed0.39a8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxSharedClipboard.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
27821ed0.39a8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VBoxSharedClipboard.dll
27831ed0.39a8: supR3HardenedDllNotificationCallback: load 00007ffa144d0000 LB 0x00010000 C:\Program Files\Oracle\VirtualBox\VBoxSharedClipboard.DLL [fFlags=0x0]
27841ed0.39a8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VBoxSharedClipboard.dll
27851ed0.39a8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa144d0000 'C:\Program Files\Oracle\VirtualBox\VBoxSharedClipboard.DLL'
27861ed0.4a58: \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VBoxDragAndDropSvc.dll: Signature #1/2: info status: 24202
27871ed0.4a58: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1eec0000 'C:\WINDOWS\system32\rsaenh.dll'
27881ed0.4a58: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
27891ed0.4a58: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp100.dll'.
27901ed0.4a58: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxrt.dll'.
27911ed0.4a58: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VBoxDragAndDropSvc.dll) WinVerifyTrust
27921ed0.4a58: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VBoxDragAndDropSvc.dll
27931ed0.4a58: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
27941ed0.4a58: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
27951ed0.4a58: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
27961ed0.4a58: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
27971ed0.4a58: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
27981ed0.4a58: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
27991ed0.4a58: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll
28001ed0.4a58: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxDragAndDropSvc.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
28011ed0.4a58: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VBoxDragAndDropSvc.dll
28021ed0.4a58: supR3HardenedDllNotificationCallback: load 00007ffa14310000 LB 0x0000d000 C:\Program Files\Oracle\VirtualBox\VBoxDragAndDropSvc.DLL [fFlags=0x0]
28031ed0.4a58: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VBoxDragAndDropSvc.dll
28041ed0.4a58: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa14310000 'C:\Program Files\Oracle\VirtualBox\VBoxDragAndDropSvc.DLL'
28051ed0.129c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\shell32.dll
28061ed0.129c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\Shell32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
28071ed0.129c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa212d0000 'C:\WINDOWS\system32\Shell32.dll'
28081ed0.129c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VBoxVMM.dll
28091ed0.129c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxVMM.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
28101ed0.129c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9d5520000 'C:\Program Files\Oracle\VirtualBox\VBoxVMM.DLL'
28111ed0.129c: \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.dll: Signature #1/2: info status: 24202
28121ed0.129c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1eec0000 'C:\WINDOWS\system32\rsaenh.dll'
28131ed0.129c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
28141ed0.129c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
28151ed0.129c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
28161ed0.129c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'ole32.dll'.
28171ed0.129c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'oleaut32.dll'.
28181ed0.129c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.dll) WinVerifyTrust
28191ed0.129c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.dll
28201ed0.129c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
28211ed0.129c: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume10\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
28221ed0.129c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
28231ed0.129c: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume10\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
28241ed0.129c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
28251ed0.129c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume10\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
28261ed0.129c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
28271ed0.129c: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
28281ed0.129c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
28291ed0.129c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
28301ed0.129c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
28311ed0.129c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.dll
28321ed0.129c: supR3HardenedDllNotificationCallback: load 00007ffa0eae0000 LB 0x00041000 C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.DLL [fFlags=0x0]
28331ed0.129c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.dll
28341ed0.129c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa0eae0000 'C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.DLL'
28351ed0.129c: supR3HardenedDllNotificationCallback: Unload 00007ffa0eae0000 LB 0x00041000 C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.DLL [flags=0x0]
28361ed0.129c: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000db0 pwszName=\Device\HarddiskVolume10\Windows\System32\WinHvPlatform.dll
28371ed0.129c: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000001609d30
28381ed0.129c: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000001609d30
28391ed0.129c: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=CFF1A1590C53D6E12EEC0DDBA64D6189D81C99C1
28401ed0.129c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1eec0000 'C:\WINDOWS\system32\rsaenh.dll'
28411ed0.129c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1fe90000 'C:\WINDOWS\System32\crypt32.dll'
28421ed0.129c: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.19041.1766.cat'; file='\Device\HarddiskVolume10\Windows\System32\WinHvPlatform.dll'
28431ed0.129c: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
28441ed0.129c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'vid.dll'.
28451ed0.129c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume10\Windows\System32\WinHvPlatform.dll) WinVerifyTrust
28461ed0.129c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume10\Windows\System32\WinHvPlatform.dll
28471ed0.129c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vid.dll'...
28481ed0.129c: supR3HardenedWinVerifyCacheProcessImportTodos: 'vid.dll' -> '\Device\HarddiskVolume10\Windows\System32\vid.dll' [rcNtRedir=0xc0150008]
28491ed0.129c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1eec0000 'C:\WINDOWS\system32\rsaenh.dll'
28501ed0.129c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1fe90000 'C:\WINDOWS\System32\crypt32.dll'
28511ed0.129c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume10\Windows\System32\vid.dll) WinVerifyTrust
28521ed0.129c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume10\Windows\System32\vid.dll
28531ed0.129c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\WinHvPlatform.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
28541ed0.129c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\WinHvPlatform.dll
28551ed0.129c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\vid.dll
28561ed0.129c: supR3HardenedDllNotificationCallback: load 00007ffa19950000 LB 0x0001b000 C:\WINDOWS\SYSTEM32\vid.dll [fFlags=0x0]
28571ed0.129c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\vid.dll
28581ed0.129c: supR3HardenedDllNotificationCallback: load 00007ffa13b70000 LB 0x00026000 C:\WINDOWS\system32\WinHvPlatform.dll [fFlags=0x0]
28591ed0.129c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\WinHvPlatform.dll
28601ed0.129c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13b70000 'C:\WINDOWS\system32\WinHvPlatform.dll'
28611ed0.129c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\vid.dll
28621ed0.129c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\vid.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
28631ed0.129c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa19950000 'C:\WINDOWS\system32\vid.dll'
28641ed0.129c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1eec0000 'C:\WINDOWS\system32\rsaenh.dll'
28651ed0.129c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1fe90000 'C:\WINDOWS\System32\crypt32.dll'
28661ed0.129c: '\Device\HarddiskVolume10\Windows\System32\ntdll.dll' has no imports
28671ed0.129c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume10\Windows\System32\ntdll.dll) WinVerifyTrust
28681ed0.129c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume10\Windows\System32\ntdll.dll
28691ed0.129c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\NTDLL.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
28701ed0.129c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa22770000 'C:\WINDOWS\system32\NTDLL.DLL'
28711ed0.129c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1eec0000 'C:\WINDOWS\system32\rsaenh.dll'
28721ed0.129c: \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VBoxDD.dll: Signature #1/2: info status: 24202
28731ed0.129c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1eec0000 'C:\WINDOWS\system32\rsaenh.dll'
28741ed0.129c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
28751ed0.129c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxvmm.dll'.
28761ed0.129c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxrt.dll'.
28771ed0.129c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'vboxddu.dll'.
28781ed0.129c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'vboxdd2.dll'.
28791ed0.129c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'user32.dll'.
28801ed0.129c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'setupapi.dll'.
28811ed0.129c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'ws2_32.dll'.
28821ed0.129c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'ole32.dll'.
28831ed0.129c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'iphlpapi.dll'.
28841ed0.129c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VBoxDD.dll) WinVerifyTrust
28851ed0.129c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VBoxDD.dll
28861ed0.129c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'iphlpapi.dll'...
28871ed0.129c: supR3HardenedWinVerifyCacheProcessImportTodos: 'iphlpapi.dll' -> '\Device\HarddiskVolume10\Windows\System32\iphlpapi.dll' [rcNtRedir=0xc0150008]
28881ed0.129c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1eec0000 'C:\WINDOWS\system32\rsaenh.dll'
28891ed0.129c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1fe90000 'C:\WINDOWS\System32\crypt32.dll'
28901ed0.129c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume10\Windows\System32\IPHLPAPI.DLL) WinVerifyTrust
28911ed0.129c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume10\Windows\System32\IPHLPAPI.DLL
28921ed0.129c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
28931ed0.129c: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume10\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
28941ed0.129c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
28951ed0.129c: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume10\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
28961ed0.129c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\ws2_32.dll
28971ed0.129c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'setupapi.dll'...
28981ed0.129c: supR3HardenedWinVerifyCacheProcessImportTodos: 'setupapi.dll' -> '\Device\HarddiskVolume10\Windows\System32\setupapi.dll' [rcNtRedir=0xc0150008]
28991ed0.129c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\setupapi.dll
29001ed0.129c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
29011ed0.129c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume10\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
29021ed0.129c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxdd2.dll'...
29031ed0.129c: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxdd2.dll' -> '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\vboxdd2.dll' [rcNtRedir=0xc0150008]
29041ed0.129c: \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VBoxDD2.dll: Signature #1/2: info status: 24202
29051ed0.129c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1eec0000 'C:\WINDOWS\system32\rsaenh.dll'
29061ed0.129c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
29071ed0.129c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
29081ed0.129c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VBoxDD2.dll) WinVerifyTrust
29091ed0.129c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VBoxDD2.dll
29101ed0.129c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxddu.dll'...
29111ed0.129c: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxddu.dll' -> '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\vboxddu.dll' [rcNtRedir=0xc0150008]
29121ed0.129c: \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VBoxDDU.dll: Signature #1/2: info status: 24202
29131ed0.129c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
29141ed0.129c: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
29151ed0.129c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
29161ed0.129c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
29171ed0.129c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1eec0000 'C:\WINDOWS\system32\rsaenh.dll'
29181ed0.129c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
29191ed0.129c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
29201ed0.129c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
29211ed0.129c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'setupapi.dll'.
29221ed0.129c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'advapi32.dll'.
29231ed0.129c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VBoxDDU.dll) WinVerifyTrust
29241ed0.129c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VBoxDDU.dll
29251ed0.129c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
29261ed0.129c: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
29271ed0.129c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxvmm.dll'...
29281ed0.129c: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxvmm.dll' -> '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\vboxvmm.dll' [rcNtRedir=0xc0150008]
29291ed0.129c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VBoxVMM.dll
29301ed0.129c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
29311ed0.129c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
29321ed0.129c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
29331ed0.129c: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume10\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
29341ed0.129c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'setupapi.dll'...
29351ed0.129c: supR3HardenedWinVerifyCacheProcessImportTodos: 'setupapi.dll' -> '\Device\HarddiskVolume10\Windows\System32\setupapi.dll' [rcNtRedir=0xc0150008]
29361ed0.129c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\setupapi.dll
29371ed0.129c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
29381ed0.129c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume10\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
29391ed0.129c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
29401ed0.129c: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
29411ed0.129c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
29421ed0.129c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
29431ed0.129c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxDD.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
29441ed0.129c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VBoxDD.dll
29451ed0.129c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VBoxDDU.dll
29461ed0.129c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VBoxDD2.dll
29471ed0.129c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\IPHLPAPI.DLL
29481ed0.129c: supR3HardenedDllNotificationCallback: load 00007ff9eef40000 LB 0x00066000 C:\Program Files\Oracle\VirtualBox\VBoxDDU.dll [fFlags=0x0]
29491ed0.129c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VBoxDDU.dll
29501ed0.129c: supR3HardenedDllNotificationCallback: load 00007ff9c2240000 LB 0x0085c000 C:\Program Files\Oracle\VirtualBox\VBoxDD2.dll [fFlags=0x0]
29511ed0.129c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VBoxDD2.dll
29521ed0.129c: supR3HardenedDllNotificationCallback: load 00007ffa1f230000 LB 0x0003b000 C:\WINDOWS\SYSTEM32\IPHLPAPI.DLL [fFlags=0x0]
29531ed0.129c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\IPHLPAPI.DLL
29541ed0.129c: supR3HardenedDllNotificationCallback: load 00007ff9cf1b0000 LB 0x00a04000 C:\Program Files\Oracle\VirtualBox\VBoxDD.DLL [fFlags=0x0]
29551ed0.129c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VBoxDD.dll
29561ed0.129c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9cf1b0000 'C:\Program Files\Oracle\VirtualBox\VBoxDD.DLL'
29571ed0.129c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1eec0000 'C:\WINDOWS\system32\rsaenh.dll'
29581ed0.129c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.dll
29591ed0.129c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
29601ed0.129c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.dll
29611ed0.129c: supR3HardenedDllNotificationCallback: load 00007ffa0eae0000 LB 0x00041000 C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.DLL [fFlags=0x0]
29621ed0.129c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.dll
29631ed0.129c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa0eae0000 'C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.DLL'
29641ed0.129c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1eec0000 'C:\WINDOWS\system32\rsaenh.dll'
29651ed0.129c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VBoxC.dll
29661ed0.129c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxC.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
29671ed0.129c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9d10c0000 'C:\Program Files\Oracle\VirtualBox\VBoxC.DLL'
29681ed0.129c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1eec0000 'C:\WINDOWS\system32\rsaenh.dll'
29691ed0.129c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VBoxDD2.dll
29701ed0.129c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxDD2.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
29711ed0.129c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9c2240000 'C:\Program Files\Oracle\VirtualBox\VBoxDD2.DLL'
29721ed0.129c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1eec0000 'C:\WINDOWS\system32\rsaenh.dll'
29731ed0.129c: \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxEhciR3.dll: Signature #1/2: info status: 24202
29741ed0.129c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1eec0000 'C:\WINDOWS\system32\rsaenh.dll'
29751ed0.129c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
29761ed0.129c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
29771ed0.129c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxEhciR3.dll) WinVerifyTrust
29781ed0.129c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxEhciR3.dll
29791ed0.129c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
29801ed0.129c: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
29811ed0.129c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
29821ed0.129c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
29831ed0.129c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxEhciR3.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
29841ed0.129c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxEhciR3.dll
29851ed0.129c: supR3HardenedDllNotificationCallback: load 00007ffa11200000 LB 0x00018000 C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxEhciR3.DLL [fFlags=0x0]
29861ed0.129c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxEhciR3.dll
29871ed0.129c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa11200000 'C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxEhciR3.DLL'
29881ed0.129c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1eec0000 'C:\WINDOWS\system32\rsaenh.dll'
29891ed0.129c: \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxNvmeR3.dll: Signature #1/2: info status: 24202
29901ed0.129c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1eec0000 'C:\WINDOWS\system32\rsaenh.dll'
29911ed0.129c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
29921ed0.129c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
29931ed0.129c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxNvmeR3.dll) WinVerifyTrust
29941ed0.129c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxNvmeR3.dll
29951ed0.129c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
29961ed0.129c: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
29971ed0.129c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
29981ed0.129c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
29991ed0.129c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxNvmeR3.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
30001ed0.129c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxNvmeR3.dll
30011ed0.129c: supR3HardenedDllNotificationCallback: load 00007ffa0ec30000 LB 0x00012000 C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxNvmeR3.DLL [fFlags=0x0]
30021ed0.129c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxNvmeR3.dll
30031ed0.129c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa0ec30000 'C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxNvmeR3.DLL'
30041ed0.129c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1eec0000 'C:\WINDOWS\system32\rsaenh.dll'
30051ed0.129c: \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbCardReaderR3.dll: Signature #1/2: info status: 24202
30061ed0.129c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1eec0000 'C:\WINDOWS\system32\rsaenh.dll'
30071ed0.129c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
30081ed0.129c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
30091ed0.129c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbCardReaderR3.dll) WinVerifyTrust
30101ed0.129c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbCardReaderR3.dll
30111ed0.129c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
30121ed0.129c: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
30131ed0.129c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
30141ed0.129c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
30151ed0.129c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbCardReaderR3.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
30161ed0.129c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbCardReaderR3.dll
30171ed0.129c: supR3HardenedDllNotificationCallback: load 00007ffa0e650000 LB 0x00018000 C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbCardReaderR3.DLL [fFlags=0x0]
30181ed0.129c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbCardReaderR3.dll
30191ed0.129c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa0e650000 'C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbCardReaderR3.DLL'
30201ed0.129c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1eec0000 'C:\WINDOWS\system32\rsaenh.dll'
30211ed0.129c: \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbWebcamR3.dll: Signature #1/2: info status: 24202
30221ed0.129c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1eec0000 'C:\WINDOWS\system32\rsaenh.dll'
30231ed0.129c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
30241ed0.129c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
30251ed0.129c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbWebcamR3.dll) WinVerifyTrust
30261ed0.129c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbWebcamR3.dll
30271ed0.129c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
30281ed0.129c: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
30291ed0.129c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
30301ed0.129c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
30311ed0.129c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbWebcamR3.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
30321ed0.129c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbWebcamR3.dll
30331ed0.129c: supR3HardenedDllNotificationCallback: load 00007ffa0e3e0000 LB 0x00019000 C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbWebcamR3.DLL [fFlags=0x0]
30341ed0.129c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbWebcamR3.dll
30351ed0.129c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa0e3e0000 'C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbWebcamR3.DLL'
30361ed0.1edc: \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VBoxSharedFolders.dll: Signature #1/2: info status: 24202
30371ed0.1edc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1eec0000 'C:\WINDOWS\system32\rsaenh.dll'
30381ed0.1edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
30391ed0.1edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxvmm.dll'.
30401ed0.1edc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxrt.dll'.
30411ed0.1edc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VBoxSharedFolders.dll) WinVerifyTrust
30421ed0.1edc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VBoxSharedFolders.dll
30431ed0.1edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
30441ed0.1edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
30451ed0.1edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxvmm.dll'...
30461ed0.1edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxvmm.dll' -> '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\vboxvmm.dll' [rcNtRedir=0xc0150008]
30471ed0.1edc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VBoxVMM.dll
30481ed0.1edc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
30491ed0.1edc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
30501ed0.1edc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxSharedFolders.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
30511ed0.1edc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VBoxSharedFolders.dll
30521ed0.1edc: supR3HardenedDllNotificationCallback: load 00007ffa0d9a0000 LB 0x00014000 C:\Program Files\Oracle\VirtualBox\VBoxSharedFolders.DLL [fFlags=0x0]
30531ed0.1edc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VBoxSharedFolders.dll
30541ed0.1edc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa0d9a0000 'C:\Program Files\Oracle\VirtualBox\VBoxSharedFolders.DLL'
30551ed0.1688: \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VBoxGuestControlSvc.dll: Signature #1/2: info status: 24202
30561ed0.1688: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1eec0000 'C:\WINDOWS\system32\rsaenh.dll'
30571ed0.1688: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
30581ed0.1688: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp100.dll'.
30591ed0.1688: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxvmm.dll'.
30601ed0.1688: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'vboxrt.dll'.
30611ed0.1688: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VBoxGuestControlSvc.dll) WinVerifyTrust
30621ed0.1688: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VBoxGuestControlSvc.dll
30631ed0.1688: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
30641ed0.1688: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
30651ed0.1688: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxvmm.dll'...
30661ed0.1688: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxvmm.dll' -> '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\vboxvmm.dll' [rcNtRedir=0xc0150008]
30671ed0.1688: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VBoxVMM.dll
30681ed0.1688: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
30691ed0.1688: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
30701ed0.1688: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
30711ed0.1688: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
30721ed0.1688: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxGuestControlSvc.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
30731ed0.1688: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VBoxGuestControlSvc.dll
30741ed0.1688: supR3HardenedDllNotificationCallback: load 00007ffa14300000 LB 0x0000c000 C:\Program Files\Oracle\VirtualBox\VBoxGuestControlSvc.DLL [fFlags=0x0]
30751ed0.1688: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VBoxGuestControlSvc.dll
30761ed0.1688: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa14300000 'C:\Program Files\Oracle\VirtualBox\VBoxGuestControlSvc.DLL'
30771ed0.145c: \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VBoxGuestPropSvc.dll: Signature #1/2: info status: 24202
30781ed0.145c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1eec0000 'C:\WINDOWS\system32\rsaenh.dll'
30791ed0.145c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
30801ed0.145c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp100.dll'.
30811ed0.145c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxrt.dll'.
30821ed0.145c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VBoxGuestPropSvc.dll) WinVerifyTrust
30831ed0.145c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VBoxGuestPropSvc.dll
30841ed0.145c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
30851ed0.145c: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
30861ed0.145c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
30871ed0.145c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
30881ed0.145c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
30891ed0.145c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
30901ed0.145c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxGuestPropSvc.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
30911ed0.145c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VBoxGuestPropSvc.dll
30921ed0.145c: supR3HardenedDllNotificationCallback: load 00007ffa14110000 LB 0x0000d000 C:\Program Files\Oracle\VirtualBox\VBoxGuestPropSvc.DLL [fFlags=0x0]
30931ed0.145c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\VBoxGuestPropSvc.dll
30941ed0.145c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa14110000 'C:\Program Files\Oracle\VirtualBox\VBoxGuestPropSvc.DLL'
30951ed0.129c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1eec0000 'C:\WINDOWS\system32\rsaenh.dll'
30961ed0.129c: \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VDPluginCrypt.dll: Signature #1/2: info status: 24202
30971ed0.129c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1eec0000 'C:\WINDOWS\system32\rsaenh.dll'
30981ed0.129c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
30991ed0.129c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
31001ed0.129c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VDPluginCrypt.dll) WinVerifyTrust
31011ed0.129c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VDPluginCrypt.dll
31021ed0.129c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
31031ed0.129c: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
31041ed0.129c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
31051ed0.129c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
31061ed0.129c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VDPluginCrypt.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
31071ed0.129c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VDPluginCrypt.dll
31081ed0.129c: supR3HardenedDllNotificationCallback: load 00007ffa1d3d0000 LB 0x0000a000 C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VDPluginCrypt.DLL [fFlags=0x0]
31091ed0.129c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VDPluginCrypt.dll
31101ed0.129c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1d3d0000 'C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VDPluginCrypt.DLL'
31111ed0.129c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1eec0000 'C:\WINDOWS\system32\rsaenh.dll'
31121ed0.129c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1eec0000 'C:\WINDOWS\system32\rsaenh.dll'
31131ed0.129c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1fe90000 'C:\WINDOWS\System32\crypt32.dll'
31141ed0.129c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcp_win.dll'.
31151ed0.129c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #16 'rpcrt4.dll'.
31161ed0.129c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #28 'devobj.dll'.
31171ed0.129c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume10\Windows\System32\MMDevAPI.dll) WinVerifyTrust
31181ed0.129c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume10\Windows\System32\MMDevAPI.dll
31191ed0.129c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'devobj.dll'...
31201ed0.129c: supR3HardenedWinVerifyCacheProcessImportTodos: 'devobj.dll' -> '\Device\HarddiskVolume10\Windows\System32\devobj.dll' [rcNtRedir=0xc0150008]
31211ed0.129c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\rsaenh.dll
31221ed0.129c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
31231ed0.129c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1eec0000 'C:\WINDOWS\system32\rsaenh.dll'
31241ed0.129c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa1fe90000 'C:\WINDOWS\System32\crypt32.dll'
31251ed0.129c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #18 'cfgmgr32.dll'.
31261ed0.129c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume10\Windows\System32\devobj.dll) WinVerifyTrust
31271ed0.129c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume10\Windows\System32\devobj.dll
31281ed0.129c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
31291ed0.129c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume10\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
31301ed0.129c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
31311ed0.129c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume10\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
31321ed0.129c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\msvcp_win.dll
31331ed0.129c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'cfgmgr32.dll'...
31341ed0.129c: supR3HardenedWinVerifyCacheProcessImportTodos: 'cfgmgr32.dll' -> '\Device\HarddiskVolume10\Windows\System32\cfgmgr32.dll' [rcNtRedir=0xc0150008]
31351ed0.129c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\cfgmgr32.dll
31361ed0.129c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\MMDevApi.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
31371ed0.129c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\MMDevAPI.dll
31381ed0.129c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\devobj.dll
31391ed0.129c: supR3HardenedDllNotificationCallback: load 00007ffa1fb70000 LB 0x0002c000 C:\WINDOWS\System32\DEVOBJ.dll [fFlags=0x0]
31401ed0.129c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\devobj.dll
31411ed0.129c: supR3HardenedDllNotificationCallback: load 00007ffa18d30000 LB 0x00085000 C:\WINDOWS\System32\MMDevApi.dll [fFlags=0x0]
31421ed0.129c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\MMDevAPI.dll
31431ed0.129c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa18d30000 'C:\WINDOWS\System32\MMDevApi.dll'
31441ed0.129c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\MMDevAPI.dll
31451ed0.129c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\MMDEVAPI.DLL (Input=MMDEVAPI.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
31461ed0.129c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa18d30000 'C:\WINDOWS\System32\MMDEVAPI.DLL'
31471ed0.145c: supR3HardenedDllNotificationCallback: Unload 00007ffa14110000 LB 0x0000d000 C:\Program Files\Oracle\VirtualBox\VBoxGuestPropSvc.DLL [flags=0x0]
31481ed0.1688: supR3HardenedDllNotificationCallback: Unload 00007ffa14300000 LB 0x0000c000 C:\Program Files\Oracle\VirtualBox\VBoxGuestControlSvc.DLL [flags=0x0]
31491ed0.1edc: supR3HardenedDllNotificationCallback: Unload 00007ffa0d9a0000 LB 0x00014000 C:\Program Files\Oracle\VirtualBox\VBoxSharedFolders.DLL [flags=0x0]
31501ed0.4a58: supR3HardenedDllNotificationCallback: Unload 00007ffa14310000 LB 0x0000d000 C:\Program Files\Oracle\VirtualBox\VBoxDragAndDropSvc.DLL [flags=0x0]
31511ed0.39a8: supR3HardenedDllNotificationCallback: Unload 00007ffa144d0000 LB 0x00010000 C:\Program Files\Oracle\VirtualBox\VBoxSharedClipboard.DLL [flags=0x0]
31521ed0.129c: supR3HardenedDllNotificationCallback: Unload 00007ffa0e3e0000 LB 0x00019000 C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbWebcamR3.DLL [flags=0x0]
31531ed0.129c: supR3HardenedDllNotificationCallback: Unload 00007ffa0e650000 LB 0x00018000 C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbCardReaderR3.DLL [flags=0x0]
31541ed0.129c: supR3HardenedDllNotificationCallback: Unload 00007ffa0ec30000 LB 0x00012000 C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxNvmeR3.DLL [flags=0x0]
31551ed0.129c: supR3HardenedDllNotificationCallback: Unload 00007ffa11200000 LB 0x00018000 C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxEhciR3.DLL [flags=0x0]
31561ed0.129c: supR3HardenedDllNotificationCallback: Unload 00007ffa0eae0000 LB 0x00041000 C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.DLL [flags=0x0]
31571ed0.129c: supR3HardenedDllNotificationCallback: Unload 00007ff9cf1b0000 LB 0x00a04000 C:\Program Files\Oracle\VirtualBox\VBoxDD.DLL [flags=0x0]
31581ed0.129c: supR3HardenedDllNotificationCallback: Unload 00007ff9eef40000 LB 0x00066000 C:\Program Files\Oracle\VirtualBox\VBoxDDU.dll [flags=0x0]
31591ed0.129c: supR3HardenedDllNotificationCallback: Unload 00007ff9c2240000 LB 0x0085c000 C:\Program Files\Oracle\VirtualBox\VBoxDD2.dll [flags=0x0]
31601ed0.129c: supR3HardenedDllNotificationCallback: Unload 00007ffa1f230000 LB 0x0003b000 C:\WINDOWS\SYSTEM32\IPHLPAPI.DLL [flags=0x0]
31611ed0.47dc: supR3HardenedDllNotificationCallback: Unload 00007ffa165c0000 LB 0x0000e000 C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxPuelMainVM.DLL [flags=0x0]
31621ed0.47dc: supR3HardenedDllNotificationCallback: Unload 00007ffa18160000 LB 0x00014000 C:\WINDOWS\system32\wbem\wbemsvc.dll [flags=0x0]
31631ed0.47dc: supR3HardenedDllNotificationCallback: Unload 00007ffa18180000 LB 0x0010b000 C:\WINDOWS\system32\wbem\fastprox.dll [flags=0x0]
31641ed0.47dc: supR3HardenedDllNotificationCallback: Unload 00007ffa18a10000 LB 0x00011000 C:\WINDOWS\system32\wbem\wbemprox.dll [flags=0x0]
31651ed0.47dc: supR3HardenedDllNotificationCallback: Unload 00007ffa19a00000 LB 0x00090000 C:\WINDOWS\SYSTEM32\wbemcomn.dll [flags=0x0]
31661ed0.47dc: supR3HardenedDllNotificationCallback: Unload 00007ff9f1010000 LB 0x0003e000 C:\WINDOWS\system32\dataexchange.dll [flags=0x0]
31671ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcp_win.dll'.
31681ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #14 'rpcrt4.dll'.
31691ed0.47dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #28 'win32u.dll'.
31701ed0.47dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume10\Windows\System32\DXCore.dll)
31711ed0.47dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume10\Windows\System32\DXCore.dll
31721ed0.47dc: supR3HardenedDllNotificationCallback: load 00007ffa1a6b0000 LB 0x0003b000 C:\WINDOWS\SYSTEM32\dxcore.dll [fFlags=0x0]
31731ed0.47dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume10\Windows\System32\DXCore.dll [avoiding WinVerifyTrust]
31741ed0.47dc: supR3HardenedDllNotificationCallback: Unload 00007ffa1c090000 LB 0x00263000 C:\WINDOWS\system32\d3d11.dll [flags=0x0]
31751ed0.47dc: supR3HardenedDllNotificationCallback: Unload 00007ffa1e750000 LB 0x000f3000 C:\WINDOWS\system32\dxgi.dll [flags=0x0]
31761ed0.47dc: supR3HardenedDllNotificationCallback: Unload 00007ffa1c760000 LB 0x001e4000 C:\WINDOWS\system32\dcomp.dll [flags=0x0]
31771ed0.47dc: supR3HardenedDllNotificationCallback: Unload 00007ffa16070000 LB 0x00200000 C:\WINDOWS\system32\twinapi.appcore.dll [flags=0x0]
31781ed0.47dc: supR3HardenedDllNotificationCallback: Unload 00007ff9ee290000 LB 0x000ef000 C:\Program Files\Oracle\VirtualBox\VBoxProxyStub.dll [flags=0x0]
31791ed0.47dc: supR3HardenedDllNotificationCallback: Unload 00007ff9d10c0000 LB 0x003c2000 C:\Program Files\Oracle\VirtualBox\VBoxC.dll [flags=0x0]
31801ed0.47dc: supR3HardenedDllNotificationCallback: Unload 00007ff9ee210000 LB 0x00078000 C:\Windows\System32\NetSetupShim.dll [flags=0x0]
31811ed0.47dc: supR3HardenedDllNotificationCallback: Unload 00007ffa19570000 LB 0x00026000 C:\Windows\System32\NetSetupApi.dll [flags=0x0]
31821ed0.47dc: supR3HardenedDllNotificationCallback: Unload 00007ffa22290000 LB 0x0046f000 C:\WINDOWS\System32\setupapi.dll [flags=0x0]
31831ed0.47dc: supR3HardenedDllNotificationCallback: Unload 00007ffa0f6b0000 LB 0x00014000 C:\Windows\System32\DEVRTL.dll [flags=0x0]
31841ed0.47dc: Terminating the normal way: rcExit=0
31852f04.3124: supR3HardNtChildWaitFor[2]: Quitting: ExitCode=0x0 (rcNtWait=0x0, rcNt1=0x0, rcNt2=0x103, rcNt3=0x103, 1541401 ms, the end);
3186468.3a9c: supR3HardNtChildWaitFor[1]: Quitting: ExitCode=0x0 (rcNtWait=0x0, rcNt1=0x0, rcNt2=0x103, rcNt3=0x103, 1541857 ms, the end);

© 2024 Oracle Support Privacy / Do Not Sell My Info Terms of Use Trademark Policy