VirtualBox

Ticket #21097: VBoxHardening.log

File VBoxHardening.log, 369.4 KB (added by AZidai, 2 years ago)
Line 
1364.7c8: Log file opened: 6.1.32r149290 g_hStartupLog=0000000000000084 g_uNtVerCombined=0xa04a6400
2364.7c8: \SystemRoot\System32\ntdll.dll:
3364.7c8: CreationTime: 2022-09-14T11:55:47.802921900Z
4364.7c8: LastWriteTime: 2022-09-14T11:55:47.871329800Z
5364.7c8: ChangeTime: 2022-09-14T12:46:20.003252000Z
6364.7c8: FileAttributes: 0x20
7364.7c8: Size: 0x1ef590
8364.7c8: NT Headers: 0xe8
9364.7c8: Timestamp: 0xfe96c48e
10364.7c8: Machine: 0x8664 - amd64
11364.7c8: Timestamp: 0xfe96c48e
12364.7c8: Image Version: 10.0
13364.7c8: SizeOfImage: 0x1f8000 (2064384)
14364.7c8: Resource Dir: 0x186000 LB 0x700a0
15364.7c8: [Version info resource found at 0xd8! (ID/Name: 0x1; SubID/SubName: 0x409)]
16364.7c8: [Raw version resource data: 0x1860f0 LB 0x380, codepage 0x0 (reserved 0x0)]
17364.7c8: ProductName: Microsoft® Windows® Operating System
18364.7c8: ProductVersion: 10.0.19041.1949
19364.7c8: FileVersion: 10.0.19041.1949 (WinBuild.160101.0800)
20364.7c8: FileDescription: NT Layer DLL
21364.7c8: \SystemRoot\System32\kernel32.dll:
22364.7c8: CreationTime: 2022-08-09T20:15:01.600493100Z
23364.7c8: LastWriteTime: 2022-08-09T20:15:01.619576700Z
24364.7c8: ChangeTime: 2022-09-14T11:56:44.930931900Z
25364.7c8: FileAttributes: 0x20
26364.7c8: Size: 0xbb030
27364.7c8: NT Headers: 0xe8
28364.7c8: Timestamp: 0x4d6d72d1
29364.7c8: Machine: 0x8664 - amd64
30364.7c8: Timestamp: 0x4d6d72d1
31364.7c8: Image Version: 10.0
32364.7c8: SizeOfImage: 0xbd000 (774144)
33364.7c8: Resource Dir: 0xbb000 LB 0x520
34364.7c8: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
35364.7c8: [Raw version resource data: 0xbb0b0 LB 0x3a4, codepage 0x0 (reserved 0x0)]
36364.7c8: ProductName: Microsoft® Windows® Operating System
37364.7c8: ProductVersion: 10.0.19041.1889
38364.7c8: FileVersion: 10.0.19041.1889 (WinBuild.160101.0800)
39364.7c8: FileDescription: Windows NT BASE API Client DLL
40364.7c8: \SystemRoot\System32\KernelBase.dll:
41364.7c8: CreationTime: 2022-09-14T11:55:48.756100000Z
42364.7c8: LastWriteTime: 2022-09-14T11:55:48.892002500Z
43364.7c8: ChangeTime: 2022-09-14T12:46:19.464132500Z
44364.7c8: FileAttributes: 0x20
45364.7c8: Size: 0x2d0258
46364.7c8: NT Headers: 0x100
47364.7c8: Timestamp: 0xcb12e58e
48364.7c8: Machine: 0x8664 - amd64
49364.7c8: Timestamp: 0xcb12e58e
50364.7c8: Image Version: 10.0
51364.7c8: SizeOfImage: 0x2ce000 (2940928)
52364.7c8: Resource Dir: 0x2a5000 LB 0x548
53364.7c8: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
54364.7c8: [Raw version resource data: 0x2a50b0 LB 0x3bc, codepage 0x0 (reserved 0x0)]
55364.7c8: ProductName: Microsoft® Windows® Operating System
56364.7c8: ProductVersion: 10.0.19041.1949
57364.7c8: FileVersion: 10.0.19041.1949 (WinBuild.160101.0800)
58364.7c8: FileDescription: Windows NT BASE API Client DLL
59364.7c8: \SystemRoot\System32\apisetschema.dll:
60364.7c8: CreationTime: 2019-12-07T09:08:13.518339400Z
61364.7c8: LastWriteTime: 2019-12-07T09:08:13.518339400Z
62364.7c8: ChangeTime: 2022-09-14T11:56:42.879974300Z
63364.7c8: FileAttributes: 0x20
64364.7c8: Size: 0x1f538
65364.7c8: NT Headers: 0xd0
66364.7c8: Timestamp: 0x31288ce0
67364.7c8: Machine: 0x8664 - amd64
68364.7c8: Timestamp: 0x31288ce0
69364.7c8: Image Version: 10.0
70364.7c8: SizeOfImage: 0x20000 (131072)
71364.7c8: Resource Dir: 0x1f000 LB 0x408
72364.7c8: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
73364.7c8: [Raw version resource data: 0x1f060 LB 0x3a8, codepage 0x0 (reserved 0x0)]
74364.7c8: ProductName: Microsoft® Windows® Operating System
75364.7c8: ProductVersion: 10.0.19041.1
76364.7c8: FileVersion: 10.0.19041.1 (WinBuild.160101.0800)
77364.7c8: FileDescription: ApiSet Schema DLL
78364.7c8: NtOpenDirectoryObject failed on \Driver: 0xc0000022
79364.7c8: supR3HardenedWinFindAdversaries: 0x0
80364.7c8: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox'
81364.7c8: Calling main()
82364.7c8: SUPR3HardenedMain: pszProgName=VirtualBoxVM fFlags=0x2
83364.7c8: supR3HardenedWinInitAppBin(0x2): '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox'
84364.7c8: SUPR3HardenedMain: Respawn #1
85364.7c8: System32: \Device\HarddiskVolume3\Windows\System32
86364.7c8: WinSxS: \Device\HarddiskVolume3\Windows\WinSxS
87364.7c8: KnownDllPath: C:\WINDOWS\System32
88364.7c8: supR3HardenedWinInit: Performing a limited self purification...
89364.7c8: supHardNtVpScanVirtualMemory: enmKind=SELF_PURIFICATION
90364.7c8: *0000000000000000-0000000000b8ffff 0x0001/0x0000 0x0000000
91364.7c8: *0000000000b90000-0000000000b90fff 0x0002/0x0002 0x0040000
92364.7c8: 0000000000b91000-0000000000b9ffff 0x0001/0x0000 0x0000000
93364.7c8: *0000000000ba0000-0000000000ba0fff 0x0002/0x0002 0x0040000
94364.7c8: 0000000000ba1000-0000000000baffff 0x0001/0x0000 0x0000000
95364.7c8: *0000000000bb0000-0000000000bccfff 0x0002/0x0002 0x0040000
96364.7c8: 0000000000bcd000-0000000000bcffff 0x0001/0x0000 0x0000000
97364.7c8: *0000000000bd0000-0000000000bd3fff 0x0002/0x0002 0x0040000
98364.7c8: 0000000000bd4000-0000000000bdffff 0x0001/0x0000 0x0000000
99364.7c8: *0000000000be0000-0000000000be1fff 0x0004/0x0004 0x0020000
100364.7c8: 0000000000be2000-0000000000beffff 0x0001/0x0000 0x0000000
101364.7c8: *0000000000bf0000-0000000000bf0fff 0x0002/0x0002 0x0040000
102364.7c8: 0000000000bf1000-0000000000bfffff 0x0001/0x0000 0x0000000
103364.7c8: *0000000000c00000-0000000000c11fff 0x0000/0x0004 0x0020000
104364.7c8: 0000000000c12000-0000000000c14fff 0x0004/0x0004 0x0020000
105364.7c8: 0000000000c15000-0000000000dfffff 0x0000/0x0004 0x0020000
106364.7c8: *0000000000e00000-0000000000eb8fff 0x0000/0x0004 0x0020000
107364.7c8: 0000000000eb9000-0000000000ebbfff 0x0104/0x0004 0x0020000
108364.7c8: 0000000000ebc000-0000000000efffff 0x0004/0x0004 0x0020000
109364.7c8: *0000000000f00000-0000000000f0ffff 0x0004/0x0004 0x0040000
110364.7c8: *0000000000f10000-0000000000fd8fff 0x0002/0x0002 0x0040000
111364.7c8: 0000000000fd9000-0000000000fdffff 0x0001/0x0000 0x0000000
112364.7c8: *0000000000fe0000-0000000000feefff 0x0004/0x0004 0x0020000
113364.7c8: 0000000000fef000-0000000000feffff 0x0000/0x0004 0x0020000
114364.7c8: *0000000000ff0000-0000000000ff1fff 0x0004/0x0004 0x0020000
115364.7c8: 0000000000ff2000-0000000001021fff 0x0000/0x0004 0x0020000
116364.7c8: 0000000001022000-000000000104ffff 0x0001/0x0000 0x0000000
117364.7c8: *0000000001050000-0000000001054fff 0x0004/0x0004 0x0020000
118364.7c8: 0000000001055000-000000000114ffff 0x0000/0x0004 0x0020000
119364.7c8: *0000000001150000-000000000115dfff 0x0000/0x0004 0x0020000
120364.7c8: 000000000115e000-0000000001356fff 0x0004/0x0004 0x0020000
121364.7c8: 0000000001357000-0000000001357fff 0x0000/0x0004 0x0020000
122364.7c8: 0000000001358000-000000000135ffff 0x0001/0x0000 0x0000000
123364.7c8: *0000000001360000-0000000001386fff 0x0004/0x0004 0x0020000
124364.7c8: 0000000001387000-000000000145ffff 0x0000/0x0004 0x0020000
125364.7c8: 0000000001460000-000000007ffdffff 0x0001/0x0000 0x0000000
126364.7c8: *000000007ffe0000-000000007ffe0fff 0x0002/0x0002 0x0020000
127364.7c8: 000000007ffe1000-000000007ffecfff 0x0001/0x0000 0x0000000
128364.7c8: *000000007ffed000-000000007ffedfff 0x0002/0x0002 0x0020000
129364.7c8: 000000007ffee000-00007ff46a84ffff 0x0001/0x0000 0x0000000
130364.7c8: *00007ff46a850000-00007ff46a854fff 0x0002/0x0002 0x0040000
131364.7c8: 00007ff46a855000-00007ff46a94ffff 0x0000/0x0002 0x0040000
132364.7c8: *00007ff46a950000-00007ff56a96ffff 0x0000/0x0004 0x0020000
133364.7c8: *00007ff56a970000-00007ff56c96ffff 0x0000/0x0004 0x0020000
134364.7c8: 00007ff56c970000-00007ff56c970fff 0x0004/0x0004 0x0020000
135364.7c8: 00007ff56c971000-00007ff56c97ffff 0x0001/0x0000 0x0000000
136364.7c8: *00007ff56c980000-00007ff56c980fff 0x0002/0x0002 0x0040000
137364.7c8: 00007ff56c981000-00007ff56c98ffff 0x0001/0x0000 0x0000000
138364.7c8: *00007ff56c990000-00007ff56c9b2fff 0x0002/0x0002 0x0040000
139364.7c8: 00007ff56c9b3000-00007ff77e55ffff 0x0001/0x0000 0x0000000
140364.7c8: *00007ff77e560000-00007ff77e560fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
141364.7c8: 00007ff77e561000-00007ff77e5d7fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
142364.7c8: 00007ff77e5d8000-00007ff77e5d8fff 0x0080/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
143364.7c8: 00007ff77e5d9000-00007ff77e621fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
144364.7c8: 00007ff77e622000-00007ff77e624fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
145364.7c8: 00007ff77e625000-00007ff77e627fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
146364.7c8: 00007ff77e628000-00007ff77e62afff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
147364.7c8: 00007ff77e62b000-00007ff77e62bfff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
148364.7c8: 00007ff77e62c000-00007ff77e62dfff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
149364.7c8: 00007ff77e62e000-00007ff77e62efff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
150364.7c8: 00007ff77e62f000-00007ff77e677fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
151364.7c8: 00007ff77e678000-00007ffdcf8effff 0x0001/0x0000 0x0000000
152364.7c8: *00007ffdcf8f0000-00007ffdcf8f0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\KernelBase.dll
153364.7c8: 00007ffdcf8f1000-00007ffdcfa05fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\KernelBase.dll
154364.7c8: 00007ffdcfa06000-00007ffdcfb7ffff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\KernelBase.dll
155364.7c8: 00007ffdcfb80000-00007ffdcfb83fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\KernelBase.dll
156364.7c8: 00007ffdcfb84000-00007ffdcfb84fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\KernelBase.dll
157364.7c8: 00007ffdcfb85000-00007ffdcfbbdfff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\KernelBase.dll
158364.7c8: 00007ffdcfbbe000-00007ffdd193ffff 0x0001/0x0000 0x0000000
159364.7c8: *00007ffdd1940000-00007ffdd1940fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\kernel32.dll
160364.7c8: 00007ffdd1941000-00007ffdd19befff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\kernel32.dll
161364.7c8: 00007ffdd19bf000-00007ffdd19f1fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\kernel32.dll
162364.7c8: 00007ffdd19f2000-00007ffdd19f2fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\kernel32.dll
163364.7c8: 00007ffdd19f3000-00007ffdd19f3fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\kernel32.dll
164364.7c8: 00007ffdd19f4000-00007ffdd19fcfff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\kernel32.dll
165364.7c8: 00007ffdd19fd000-00007ffdd1eaffff 0x0001/0x0000 0x0000000
166364.7c8: *00007ffdd1eb0000-00007ffdd1eb0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
167364.7c8: 00007ffdd1eb1000-00007ffdd1fccfff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
168364.7c8: 00007ffdd1fcd000-00007ffdd2015fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
169364.7c8: 00007ffdd2016000-00007ffdd2016fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
170364.7c8: 00007ffdd2017000-00007ffdd2018fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
171364.7c8: 00007ffdd2019000-00007ffdd2021fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
172364.7c8: 00007ffdd2022000-00007ffdd20a7fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
173364.7c8: 00007ffdd20a8000-00007ffffffeffff 0x0001/0x0000 0x0000000
174364.7c8: kernel32.dll: timestamp 0x4d6d72d1 (rc=VINF_SUCCESS)
175364.7c8: kernelbase.dll: timestamp 0xcb12e58e (rc=VINF_SUCCESS)
176364.7c8: VirtualBoxVM.exe: timestamp 0x61e55350 (rc=VINF_SUCCESS)
177364.7c8: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe: Signature #1/2: info status: 24202
178364.7c8: '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe' has no imports
179364.7c8: '\Device\HarddiskVolume3\Windows\System32\ntdll.dll' has no imports
180364.7c8: supR3HardenedWinInit: SUPHARDNTVPKIND_SELF_PURIFICATION_LIMITED -> VINF_SUCCESS, cFixes=0
181364.7c8: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe: Signature #1/2: info status: 24202
182364.7c8: '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe' has no imports
183364.7c8: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe)
184364.7c8: supR3HardNtEnableThreadCreationEx:
185364.7c8: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007ffdd1f24b50 pvNtTerminateThread=00007ffdd1f4da50
186364.7c8: supR3HardenedWinDoReSpawn(1): New child 1848.2a34 [kernel32].
187364.7c8: supR3HardNtChildGatherData: PebBaseAddress=0000000000b54000 cbPeb=0x388
188364.7c8: supR3HardNtPuChFindNtdll: uNtDllParentAddr=00007ffdd1eb0000 uNtDllChildAddr=00007ffdd1eb0000
189364.7c8: supR3HardenedWinSetupChildInit: uLdrInitThunk=00007ffdd1f24b50
190364.7c8: supR3HardenedWinSetupChildInit: Initial context:
191 rax=0000000000000000 rbx=0000000000000000 rcx=00007ff77e567900 rdx=0000000000b54000
192 rsi=0000000000000000 rdi=0000000000000000 r8 =0000000000000000 r9 =0000000000000000
193 r10=0000000000000000 r11=0000000000000000 r12=0000000000000000 r13=0000000000000000
194 r14=0000000000000000 r15=0000000000000000 P1=0000000000000000 P2=0000000000000000
195 rip=00007ffdd1f02680 rsp=000000000097fe48 rbp=0000000000000000 ctxflags=0010001b
196 cs=0033 ss=002b ds=0000 es=0000 fs=0000 gs=0000 eflags=00000200 mxcrx=00001f80
197 P3=0000000000000000 P4=0000000000000000 P5=0000000000000000 P6=0000000000000000
198 dr0=0000000000000000 dr1=0000000000000000 dr2=0000000000000000 dr3=0000000000000000
199 dr6=0000000000000000 dr7=0000000000000000 vcr=0000000000000000 dcr=0000000000000000
200 lbt=0000000000000000 lbf=0000000000000000 lxt=0000000000000000 lxf=0000000000000000
201364.7c8: supR3HardenedWinSetupChildInit: Start child.
202364.7c8: supR3HardNtChildWaitFor: Found expected request 0 (PurifyChildAndCloseHandles) after 0 ms.
203364.7c8: supR3HardNtChildPurify: Startup delay kludge #1/0: 266 ms, 17 sleeps
204364.7c8: supHardNtVpScanVirtualMemory: enmKind=CHILD_PURIFICATION
205364.7c8: *0000000000000000-000000000083ffff 0x0001/0x0000 0x0000000
206364.7c8: *0000000000840000-000000000085ffff 0x0004/0x0004 0x0020000
207364.7c8: *0000000000860000-000000000087cfff 0x0002/0x0002 0x0040000
208364.7c8: 000000000087d000-000000000087ffff 0x0001/0x0000 0x0000000
209364.7c8: *0000000000880000-000000000097afff 0x0000/0x0004 0x0020000
210364.7c8: 000000000097b000-000000000097dfff 0x0104/0x0004 0x0020000
211364.7c8: 000000000097e000-000000000097ffff 0x0004/0x0004 0x0020000
212364.7c8: *0000000000980000-0000000000983fff 0x0002/0x0002 0x0040000
213364.7c8: 0000000000984000-000000000098ffff 0x0001/0x0000 0x0000000
214364.7c8: *0000000000990000-0000000000991fff 0x0004/0x0004 0x0020000
215364.7c8: 0000000000992000-00000000009fffff 0x0001/0x0000 0x0000000
216364.7c8: *0000000000a00000-0000000000b53fff 0x0000/0x0004 0x0020000
217364.7c8: 0000000000b54000-0000000000b56fff 0x0004/0x0004 0x0020000
218364.7c8: 0000000000b57000-0000000000bfffff 0x0000/0x0004 0x0020000
219364.7c8: 0000000000c00000-000000007ffdffff 0x0001/0x0000 0x0000000
220364.7c8: *000000007ffe0000-000000007ffe0fff 0x0002/0x0002 0x0020000
221364.7c8: 000000007ffe1000-000000007ffecfff 0x0001/0x0000 0x0000000
222364.7c8: *000000007ffed000-000000007ffedfff 0x0002/0x0002 0x0020000
223364.7c8: 000000007ffee000-00007ff5e012ffff 0x0001/0x0000 0x0000000
224364.7c8: *00007ff5e0130000-00007ff5e0130fff 0x0002/0x0002 0x0040000
225364.7c8: 00007ff5e0131000-00007ff5e013ffff 0x0001/0x0000 0x0000000
226364.7c8: *00007ff5e0140000-00007ff5e0162fff 0x0002/0x0002 0x0040000
227364.7c8: 00007ff5e0163000-00007ff77e55ffff 0x0001/0x0000 0x0000000
228364.7c8: *00007ff77e560000-00007ff77e560fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
229364.7c8: 00007ff77e561000-00007ff77e5d7fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
230364.7c8: 00007ff77e5d8000-00007ff77e5d8fff 0x0080/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
231364.7c8: 00007ff77e5d9000-00007ff77e621fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
232364.7c8: 00007ff77e622000-00007ff77e622fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
233364.7c8: 00007ff77e623000-00007ff77e623fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
234364.7c8: 00007ff77e624000-00007ff77e628fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
235364.7c8: 00007ff77e629000-00007ff77e629fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
236364.7c8: 00007ff77e62a000-00007ff77e62afff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
237364.7c8: 00007ff77e62b000-00007ff77e62efff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
238364.7c8: 00007ff77e62f000-00007ff77e677fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
239364.7c8: 00007ff77e678000-00007ffdd1eaffff 0x0001/0x0000 0x0000000
240364.7c8: *00007ffdd1eb0000-00007ffdd1eb0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
241364.7c8: 00007ffdd1eb1000-00007ffdd1fccfff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
242364.7c8: 00007ffdd1fcd000-00007ffdd2015fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
243364.7c8: 00007ffdd2016000-00007ffdd2021fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
244364.7c8: 00007ffdd2022000-00007ffdd2030fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
245364.7c8: 00007ffdd2031000-00007ffdd2031fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
246364.7c8: 00007ffdd2032000-00007ffdd2034fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
247364.7c8: 00007ffdd2035000-00007ffdd20a7fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
248364.7c8: 00007ffdd20a8000-00007ffffffeffff 0x0001/0x0000 0x0000000
249364.7c8: supR3HardNtChildPurify: Done after 270 ms and 0 fixes (loop #0).
2501848.2a34: Log file opened: 6.1.32r149290 g_hStartupLog=0000000000000004 g_uNtVerCombined=0xa04a6400
2511848.2a34: supR3HardenedVmProcessInit: uNtDllAddr=00007ffdd1eb0000 g_uNtVerCombined=0xa04a6400 (stack ~000000000097f8d8)
2521848.2a34: ntdll.dll: timestamp 0xfe96c48e (rc=VINF_SUCCESS)
2531848.2a34: New simple heap: #1 0000000000d00000 LB 0x400000 (for 2064384 allocation)
254364.7c8: supR3HardNtEnableThreadCreationEx:
2551848.2a34: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox'
2561848.2a34: System32: \Device\HarddiskVolume3\Windows\System32
2571848.2a34: WinSxS: \Device\HarddiskVolume3\Windows\WinSxS
2581848.2a34: KnownDllPath: C:\WINDOWS\System32
2591848.2a34: supR3HardenedVmProcessInit: Opening vboxdrv stub...
2601848.2a34: supR3HardenedVmProcessInit: Restoring LdrInitializeThunk...
2611848.2a34: supR3HardenedVmProcessInit: Returning to LdrInitializeThunk...
2621848.2a34: Registered Dll notification callback with NTDLL.
2631848.2a34: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\kernel32.dll)
2641848.2a34: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\kernel32.dll
2651848.2a34: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\KERNEL32.DLL (Input=KERNEL32.DLL, rcNtResolve=0xc0150008) *pfFlags=0xffffffff pwszSearchPath=0000000000004001:<flags> [calling]
2661848.2a34: supR3HardenedDllNotificationCallback: load 00007ffdcf8f0000 LB 0x002ce000 C:\WINDOWS\System32\KERNELBASE.dll [fFlags=0x0]
2671848.2a34: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\KernelBase.dll)
2681848.2a34: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\KernelBase.dll
2691848.2a34: supR3HardenedDllNotificationCallback: load 00007ffdd1940000 LB 0x000bd000 C:\WINDOWS\System32\KERNEL32.DLL [fFlags=0x0]
2701848.2a34: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
2711848.2a34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdd1940000 'C:\WINDOWS\System32\KERNEL32.DLL'
2721848.2a34: supR3HardenedDllNotificationCallback: load 00007ff77e560000 LB 0x00118000 C:\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe [fFlags=0x0]
2731848.2a34: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe: Signature #1/2: info status: 24202
2741848.2a34: '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe' has no imports
2751848.2a34: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe)
2761848.2a34: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
2771848.2a34: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007ffdd1f24b50 pvNtTerminateThread=00007ffdd1f4da50
278364.7c8: supR3HardNtChildWaitFor: Found expected request 1 (CloseEvents) after 101 ms.
2791848.2a34: \SystemRoot\System32\ntdll.dll:
2801848.2a34: CreationTime: 2022-09-14T11:55:47.802921900Z
2811848.2a34: LastWriteTime: 2022-09-14T11:55:47.871329800Z
2821848.2a34: ChangeTime: 2022-09-14T12:46:20.003252000Z
2831848.2a34: FileAttributes: 0x20
2841848.2a34: Size: 0x1ef590
2851848.2a34: NT Headers: 0xe8
2861848.2a34: Timestamp: 0xfe96c48e
2871848.2a34: Machine: 0x8664 - amd64
2881848.2a34: Timestamp: 0xfe96c48e
2891848.2a34: Image Version: 10.0
2901848.2a34: SizeOfImage: 0x1f8000 (2064384)
2911848.2a34: Resource Dir: 0x186000 LB 0x700a0
2921848.2a34: [Version info resource found at 0xd8! (ID/Name: 0x1; SubID/SubName: 0x409)]
2931848.2a34: [Raw version resource data: 0x1860f0 LB 0x380, codepage 0x0 (reserved 0x0)]
2941848.2a34: ProductName: Microsoft® Windows® Operating System
2951848.2a34: ProductVersion: 10.0.19041.1949
2961848.2a34: FileVersion: 10.0.19041.1949 (WinBuild.160101.0800)
2971848.2a34: FileDescription: NT Layer DLL
2981848.2a34: \SystemRoot\System32\kernel32.dll:
2991848.2a34: CreationTime: 2022-08-09T20:15:01.600493100Z
3001848.2a34: LastWriteTime: 2022-08-09T20:15:01.619576700Z
3011848.2a34: ChangeTime: 2022-09-14T11:56:44.930931900Z
3021848.2a34: FileAttributes: 0x20
3031848.2a34: Size: 0xbb030
3041848.2a34: NT Headers: 0xe8
3051848.2a34: Timestamp: 0x4d6d72d1
3061848.2a34: Machine: 0x8664 - amd64
3071848.2a34: Timestamp: 0x4d6d72d1
3081848.2a34: Image Version: 10.0
3091848.2a34: SizeOfImage: 0xbd000 (774144)
3101848.2a34: Resource Dir: 0xbb000 LB 0x520
3111848.2a34: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
3121848.2a34: [Raw version resource data: 0xbb0b0 LB 0x3a4, codepage 0x0 (reserved 0x0)]
3131848.2a34: ProductName: Microsoft® Windows® Operating System
3141848.2a34: ProductVersion: 10.0.19041.1889
3151848.2a34: FileVersion: 10.0.19041.1889 (WinBuild.160101.0800)
3161848.2a34: FileDescription: Windows NT BASE API Client DLL
3171848.2a34: \SystemRoot\System32\KernelBase.dll:
3181848.2a34: CreationTime: 2022-09-14T11:55:48.756100000Z
3191848.2a34: LastWriteTime: 2022-09-14T11:55:48.892002500Z
3201848.2a34: ChangeTime: 2022-09-14T12:46:19.464132500Z
3211848.2a34: FileAttributes: 0x20
3221848.2a34: Size: 0x2d0258
3231848.2a34: NT Headers: 0x100
3241848.2a34: Timestamp: 0xcb12e58e
3251848.2a34: Machine: 0x8664 - amd64
3261848.2a34: Timestamp: 0xcb12e58e
3271848.2a34: Image Version: 10.0
3281848.2a34: SizeOfImage: 0x2ce000 (2940928)
3291848.2a34: Resource Dir: 0x2a5000 LB 0x548
3301848.2a34: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
3311848.2a34: [Raw version resource data: 0x2a50b0 LB 0x3bc, codepage 0x0 (reserved 0x0)]
3321848.2a34: ProductName: Microsoft® Windows® Operating System
3331848.2a34: ProductVersion: 10.0.19041.1949
3341848.2a34: FileVersion: 10.0.19041.1949 (WinBuild.160101.0800)
3351848.2a34: FileDescription: Windows NT BASE API Client DLL
3361848.2a34: \SystemRoot\System32\apisetschema.dll:
3371848.2a34: CreationTime: 2019-12-07T09:08:13.518339400Z
3381848.2a34: LastWriteTime: 2019-12-07T09:08:13.518339400Z
3391848.2a34: ChangeTime: 2022-09-14T11:56:42.879974300Z
3401848.2a34: FileAttributes: 0x20
3411848.2a34: Size: 0x1f538
3421848.2a34: NT Headers: 0xd0
3431848.2a34: Timestamp: 0x31288ce0
3441848.2a34: Machine: 0x8664 - amd64
3451848.2a34: Timestamp: 0x31288ce0
3461848.2a34: Image Version: 10.0
3471848.2a34: SizeOfImage: 0x20000 (131072)
3481848.2a34: Resource Dir: 0x1f000 LB 0x408
3491848.2a34: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
3501848.2a34: [Raw version resource data: 0x1f060 LB 0x3a8, codepage 0x0 (reserved 0x0)]
3511848.2a34: ProductName: Microsoft® Windows® Operating System
3521848.2a34: ProductVersion: 10.0.19041.1
3531848.2a34: FileVersion: 10.0.19041.1 (WinBuild.160101.0800)
3541848.2a34: FileDescription: ApiSet Schema DLL
3551848.2a34: NtOpenDirectoryObject failed on \Driver: 0xc0000022
3561848.2a34: supR3HardenedWinFindAdversaries: 0x0
3571848.2a34: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox'
3581848.2a34: Calling main()
3591848.2a34: SUPR3HardenedMain: pszProgName=VirtualBoxVM fFlags=0x2
3601848.2a34: supR3HardenedWinInitAppBin(0x2): '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox'
3611848.2a34: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe: Signature #1/2: info status: 24202
3621848.2a34: '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe' has no imports
3631848.2a34: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe)
3641848.2a34: SUPR3HardenedMain: Respawn #2
3651848.2a34: supR3HardNtEnableThreadCreationEx:
3661848.2a34: supR3HardenedDllNotificationCallback: load 00007ffdd0e80000 LB 0x00125000 C:\WINDOWS\System32\RPCRT4.dll [fFlags=0x0]
3671848.2a34: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll)
3681848.2a34: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll
3691848.2a34: supR3HardenedDllNotificationCallback: load 00007ffdd1780000 LB 0x0009c000 C:\WINDOWS\System32\sechost.dll [fFlags=0x0]
3701848.2a34: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'rpcrt4.dll'.
3711848.2a34: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\sechost.dll)
3721848.2a34: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\sechost.dll
3731848.2a34: '\Device\HarddiskVolume3\Windows\System32\ntdll.dll' has no imports
3741848.2a34: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\ntdll.dll)
3751848.2a34: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\ntdll.dll
3761848.2a34: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
3771848.2a34: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
3781848.2a34: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
3791848.2a34: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\ntdll.dll (Input=ntdll.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
3801848.2a34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdd1eb0000 'C:\WINDOWS\System32\ntdll.dll'
3811848.2a34: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007ffdd1f24b50 pvNtTerminateThread=00007ffdd1f4da50
3821848.2a34: supR3HardenedWinDoReSpawn(2): New child 1eec.1f00 [kernel32].
3831848.2a34: supR3HardenedWinReSpawn: NtSetInformationThread/ThreadHideFromDebugger failed: 0xc0000022 (harmless)
3841848.2a34: supR3HardNtChildGatherData: PebBaseAddress=00000000009f2000 cbPeb=0x388
3851848.2a34: supR3HardNtPuChFindNtdll: uNtDllParentAddr=00007ffdd1eb0000 uNtDllChildAddr=00007ffdd1eb0000
3861848.2a34: supR3HardenedWinSetupChildInit: uLdrInitThunk=00007ffdd1f24b50
3871848.2a34: supR3HardenedWinSetupChildInit: Initial context:
388 rax=0000000000000000 rbx=0000000000000000 rcx=00007ff77e567900 rdx=00000000009f2000
389 rsi=0000000000000000 rdi=0000000000000000 r8 =0000000000000000 r9 =0000000000000000
390 r10=0000000000000000 r11=0000000000000000 r12=0000000000000000 r13=0000000000000000
391 r14=0000000000000000 r15=0000000000000000 P1=0000000000000000 P2=0000000000000000
392 rip=00007ffdd1f02680 rsp=0000000000affd58 rbp=0000000000000000 ctxflags=0010001b
393 cs=0033 ss=002b ds=0000 es=0000 fs=0000 gs=0000 eflags=00000200 mxcrx=00001f80
394 P3=0000000000000000 P4=0000000000000000 P5=0000000000000000 P6=0000000000000000
395 dr0=0000000000000000 dr1=0000000000000000 dr2=0000000000000000 dr3=0000000000000000
396 dr6=0000000000000000 dr7=0000000000000000 vcr=0000000000000000 dcr=0000000000000000
397 lbt=0000000000000000 lbf=0000000000000000 lxt=0000000000000000 lxf=0000000000000000
3981848.2a34: kernel32.dll: timestamp 0x4d6d72d1 (rc=VINF_SUCCESS)
3991848.2a34: supR3HardenedWinSetupChildInit: Start child.
4001848.2a34: supR3HardNtChildWaitFor: Found expected request 0 (PurifyChildAndCloseHandles) after 0 ms.
4011848.2a34: supR3HardNtChildPurify: Startup delay kludge #1/0: 260 ms, 17 sleeps
4021848.2a34: supHardNtVpScanVirtualMemory: enmKind=CHILD_PURIFICATION
4031848.2a34: *0000000000000000-000000000073ffff 0x0001/0x0000 0x0000000
4041848.2a34: *0000000000740000-000000000075ffff 0x0004/0x0004 0x0020000
4051848.2a34: *0000000000760000-000000000077cfff 0x0002/0x0002 0x0040000
4061848.2a34: 000000000077d000-000000000077ffff 0x0001/0x0000 0x0000000
4071848.2a34: *0000000000780000-0000000000783fff 0x0002/0x0002 0x0040000
4081848.2a34: 0000000000784000-000000000078ffff 0x0001/0x0000 0x0000000
4091848.2a34: *0000000000790000-0000000000791fff 0x0004/0x0004 0x0020000
4101848.2a34: 0000000000792000-00000000007fffff 0x0001/0x0000 0x0000000
4111848.2a34: *0000000000800000-00000000009f1fff 0x0000/0x0004 0x0020000
4121848.2a34: 00000000009f2000-00000000009f4fff 0x0004/0x0004 0x0020000
4131848.2a34: 00000000009f5000-00000000009fffff 0x0000/0x0004 0x0020000
4141848.2a34: *0000000000a00000-0000000000afafff 0x0000/0x0004 0x0020000
4151848.2a34: 0000000000afb000-0000000000afdfff 0x0104/0x0004 0x0020000
4161848.2a34: 0000000000afe000-0000000000afffff 0x0004/0x0004 0x0020000
4171848.2a34: 0000000000b00000-000000007ffdffff 0x0001/0x0000 0x0000000
4181848.2a34: *000000007ffe0000-000000007ffe0fff 0x0002/0x0002 0x0020000
4191848.2a34: 000000007ffe1000-000000007ffecfff 0x0001/0x0000 0x0000000
4201848.2a34: *000000007ffed000-000000007ffedfff 0x0002/0x0002 0x0020000
4211848.2a34: 000000007ffee000-00007ff53279ffff 0x0001/0x0000 0x0000000
4221848.2a34: *00007ff5327a0000-00007ff5327a0fff 0x0002/0x0002 0x0040000
4231848.2a34: 00007ff5327a1000-00007ff5327affff 0x0001/0x0000 0x0000000
4241848.2a34: *00007ff5327b0000-00007ff5327d2fff 0x0002/0x0002 0x0040000
4251848.2a34: 00007ff5327d3000-00007ff77e55ffff 0x0001/0x0000 0x0000000
4261848.2a34: *00007ff77e560000-00007ff77e560fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
4271848.2a34: 00007ff77e561000-00007ff77e5d7fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
4281848.2a34: 00007ff77e5d8000-00007ff77e5d8fff 0x0080/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
4291848.2a34: 00007ff77e5d9000-00007ff77e621fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
4301848.2a34: 00007ff77e622000-00007ff77e622fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
4311848.2a34: 00007ff77e623000-00007ff77e623fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
4321848.2a34: 00007ff77e624000-00007ff77e628fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
4331848.2a34: 00007ff77e629000-00007ff77e629fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
4341848.2a34: 00007ff77e62a000-00007ff77e62afff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
4351848.2a34: 00007ff77e62b000-00007ff77e62efff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
4361848.2a34: 00007ff77e62f000-00007ff77e677fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
4371848.2a34: 00007ff77e678000-00007ffdd1eaffff 0x0001/0x0000 0x0000000
4381848.2a34: *00007ffdd1eb0000-00007ffdd1eb0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
4391848.2a34: 00007ffdd1eb1000-00007ffdd1fccfff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
4401848.2a34: 00007ffdd1fcd000-00007ffdd2015fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
4411848.2a34: 00007ffdd2016000-00007ffdd2021fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
4421848.2a34: 00007ffdd2022000-00007ffdd2030fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
4431848.2a34: 00007ffdd2031000-00007ffdd2031fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
4441848.2a34: 00007ffdd2032000-00007ffdd2034fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
4451848.2a34: 00007ffdd2035000-00007ffdd20a7fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
4461848.2a34: 00007ffdd20a8000-00007ffffffeffff 0x0001/0x0000 0x0000000
4471848.2a34: VirtualBoxVM.exe: timestamp 0x61e55350 (rc=VINF_SUCCESS)
4481848.2a34: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe: Signature #1/2: info status: 24202
4491848.2a34: '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe' has no imports
4501848.2a34: '\Device\HarddiskVolume3\Windows\System32\ntdll.dll' has no imports
4511848.2a34: supR3HardNtChildPurify: Done after 302 ms and 0 fixes (loop #0).
4521eec.1f00: Log file opened: 6.1.32r149290 g_hStartupLog=0000000000000004 g_uNtVerCombined=0xa04a6400
4531848.2a34: supR3HardenedEarlyCompact: Removed heap 1 (0x00000000d00000 LB 0x400000)
4541eec.1f00: supR3HardenedVmProcessInit: uNtDllAddr=00007ffdd1eb0000 g_uNtVerCombined=0xa04a6400 (stack ~0000000000aff7e8)
4551848.2a34: supR3HardNtEnableThreadCreationEx:
4561eec.1f00: ntdll.dll: timestamp 0xfe96c48e (rc=VINF_SUCCESS)
4571eec.1f00: New simple heap: #1 0000000000c00000 LB 0x400000 (for 2064384 allocation)
4581eec.1f00: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox'
4591eec.1f00: System32: \Device\HarddiskVolume3\Windows\System32
4601eec.1f00: WinSxS: \Device\HarddiskVolume3\Windows\WinSxS
4611eec.1f00: KnownDllPath: C:\WINDOWS\System32
4621eec.1f00: supR3HardenedVmProcessInit: Opening vboxdrv...
4631eec.1f00: supR3HardenedVmProcessInit: Restoring LdrInitializeThunk...
4641eec.1f00: supR3HardenedVmProcessInit: Returning to LdrInitializeThunk...
4651eec.1f00: Registered Dll notification callback with NTDLL.
4661eec.1f00: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\kernel32.dll)
4671eec.1f00: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\kernel32.dll
4681eec.1f00: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\KERNEL32.DLL (Input=KERNEL32.DLL, rcNtResolve=0xc0150008) *pfFlags=0xffffffff pwszSearchPath=0000000000004001:<flags> [calling]
4691eec.1f00: supR3HardenedDllNotificationCallback: load 00007ffdcf8f0000 LB 0x002ce000 C:\WINDOWS\System32\KERNELBASE.dll [fFlags=0x0]
4701eec.1f00: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\KernelBase.dll)
4711eec.1f00: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\KernelBase.dll
4721eec.1f00: supR3HardenedDllNotificationCallback: load 00007ffdd1940000 LB 0x000bd000 C:\WINDOWS\System32\KERNEL32.DLL [fFlags=0x0]
4731eec.1f00: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
4741eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdd1940000 'C:\WINDOWS\System32\KERNEL32.DLL'
4751eec.1f00: supR3HardenedDllNotificationCallback: load 00007ff77e560000 LB 0x00118000 C:\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe [fFlags=0x0]
4761eec.1f00: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe: Signature #1/2: info status: 24202
4771eec.1f00: '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe' has no imports
4781eec.1f00: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe)
4791eec.1f00: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
4801eec.1f00: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007ffdd1f24b50 pvNtTerminateThread=00007ffdd1f4da50
4811848.2a34: supR3HardNtChildWaitFor: Found expected request 1 (CloseEvents) after 112 ms.
4821eec.1f00: \SystemRoot\System32\ntdll.dll:
4831eec.1f00: CreationTime: 2022-09-14T11:55:47.802921900Z
4841eec.1f00: LastWriteTime: 2022-09-14T11:55:47.871329800Z
4851eec.1f00: ChangeTime: 2022-09-14T12:46:20.003252000Z
4861eec.1f00: FileAttributes: 0x20
4871eec.1f00: Size: 0x1ef590
4881eec.1f00: NT Headers: 0xe8
4891eec.1f00: Timestamp: 0xfe96c48e
4901eec.1f00: Machine: 0x8664 - amd64
4911eec.1f00: Timestamp: 0xfe96c48e
4921eec.1f00: Image Version: 10.0
4931eec.1f00: SizeOfImage: 0x1f8000 (2064384)
4941eec.1f00: Resource Dir: 0x186000 LB 0x700a0
4951eec.1f00: [Version info resource found at 0xd8! (ID/Name: 0x1; SubID/SubName: 0x409)]
4961eec.1f00: [Raw version resource data: 0x1860f0 LB 0x380, codepage 0x0 (reserved 0x0)]
4971eec.1f00: ProductName: Microsoft® Windows® Operating System
4981eec.1f00: ProductVersion: 10.0.19041.1949
4991eec.1f00: FileVersion: 10.0.19041.1949 (WinBuild.160101.0800)
5001eec.1f00: FileDescription: NT Layer DLL
5011eec.1f00: \SystemRoot\System32\kernel32.dll:
5021eec.1f00: CreationTime: 2022-08-09T20:15:01.600493100Z
5031eec.1f00: LastWriteTime: 2022-08-09T20:15:01.619576700Z
5041eec.1f00: ChangeTime: 2022-09-14T11:56:44.930931900Z
5051eec.1f00: FileAttributes: 0x20
5061eec.1f00: Size: 0xbb030
5071eec.1f00: NT Headers: 0xe8
5081eec.1f00: Timestamp: 0x4d6d72d1
5091eec.1f00: Machine: 0x8664 - amd64
5101eec.1f00: Timestamp: 0x4d6d72d1
5111eec.1f00: Image Version: 10.0
5121eec.1f00: SizeOfImage: 0xbd000 (774144)
5131eec.1f00: Resource Dir: 0xbb000 LB 0x520
5141eec.1f00: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
5151eec.1f00: [Raw version resource data: 0xbb0b0 LB 0x3a4, codepage 0x0 (reserved 0x0)]
5161eec.1f00: ProductName: Microsoft® Windows® Operating System
5171eec.1f00: ProductVersion: 10.0.19041.1889
5181eec.1f00: FileVersion: 10.0.19041.1889 (WinBuild.160101.0800)
5191eec.1f00: FileDescription: Windows NT BASE API Client DLL
5201eec.1f00: \SystemRoot\System32\KernelBase.dll:
5211eec.1f00: CreationTime: 2022-09-14T11:55:48.756100000Z
5221eec.1f00: LastWriteTime: 2022-09-14T11:55:48.892002500Z
5231eec.1f00: ChangeTime: 2022-09-14T12:46:19.464132500Z
5241eec.1f00: FileAttributes: 0x20
5251eec.1f00: Size: 0x2d0258
5261eec.1f00: NT Headers: 0x100
5271eec.1f00: Timestamp: 0xcb12e58e
5281eec.1f00: Machine: 0x8664 - amd64
5291eec.1f00: Timestamp: 0xcb12e58e
5301eec.1f00: Image Version: 10.0
5311eec.1f00: SizeOfImage: 0x2ce000 (2940928)
5321eec.1f00: Resource Dir: 0x2a5000 LB 0x548
5331eec.1f00: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
5341eec.1f00: [Raw version resource data: 0x2a50b0 LB 0x3bc, codepage 0x0 (reserved 0x0)]
5351eec.1f00: ProductName: Microsoft® Windows® Operating System
5361eec.1f00: ProductVersion: 10.0.19041.1949
5371eec.1f00: FileVersion: 10.0.19041.1949 (WinBuild.160101.0800)
5381eec.1f00: FileDescription: Windows NT BASE API Client DLL
5391eec.1f00: \SystemRoot\System32\apisetschema.dll:
5401eec.1f00: CreationTime: 2019-12-07T09:08:13.518339400Z
5411eec.1f00: LastWriteTime: 2019-12-07T09:08:13.518339400Z
5421eec.1f00: ChangeTime: 2022-09-14T11:56:42.879974300Z
5431eec.1f00: FileAttributes: 0x20
5441eec.1f00: Size: 0x1f538
5451eec.1f00: NT Headers: 0xd0
5461eec.1f00: Timestamp: 0x31288ce0
5471eec.1f00: Machine: 0x8664 - amd64
5481eec.1f00: Timestamp: 0x31288ce0
5491eec.1f00: Image Version: 10.0
5501eec.1f00: SizeOfImage: 0x20000 (131072)
5511eec.1f00: Resource Dir: 0x1f000 LB 0x408
5521eec.1f00: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
5531eec.1f00: [Raw version resource data: 0x1f060 LB 0x3a8, codepage 0x0 (reserved 0x0)]
5541eec.1f00: ProductName: Microsoft® Windows® Operating System
5551eec.1f00: ProductVersion: 10.0.19041.1
5561eec.1f00: FileVersion: 10.0.19041.1 (WinBuild.160101.0800)
5571eec.1f00: FileDescription: ApiSet Schema DLL
5581eec.1f00: NtOpenDirectoryObject failed on \Driver: 0xc0000022
5591eec.1f00: supR3HardenedWinFindAdversaries: 0x0
5601eec.1f00: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox'
5611eec.1f00: Calling main()
5621eec.1f00: SUPR3HardenedMain: pszProgName=VirtualBoxVM fFlags=0x2
5631eec.1f00: supR3HardenedWinInitAppBin(0x2): '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox'
5641eec.1f00: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe: Signature #1/2: info status: 24202
5651eec.1f00: '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe' has no imports
5661eec.1f00: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe)
5671eec.1f00: SUPR3HardenedMain: Final process, opening VBoxDrv...
5681eec.1f00: supR3HardenedEarlyCompact: Removed heap 1 (0x00000000c00000 LB 0x400000)
5691eec.1f00: supR3HardNtEnableThreadCreationEx:
5701eec.1f00: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxSupLib.dll: Signature #1/2: info status: 24202
5711eec.1f00: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxSupLib.dll)
5721eec.1f00: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxSupLib.dll
5731eec.1f00: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
5741eec.1f00: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxSupLib.dll [lacks WinVerifyTrust]
5751eec.1f00: supR3HardenedDllNotificationCallback: load 00007ffdb4940000 LB 0x00005000 C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL [fFlags=0x0]
5761eec.1f00: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxSupLib.dll [lacks WinVerifyTrust]
5771eec.1f00: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxSupLib.dll [lacks WinVerifyTrust]
5781eec.1f00: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
5791eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdb4940000 'C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL'
5801eec.1f00: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxSupLib.dll [lacks WinVerifyTrust]
5811eec.1f00: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
5821eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdb4940000 'C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL'
5831eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdb4940000 'C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL'
5841eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
5851eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #29 'rpcrt4.dll'.
5861eec.1f00: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\wintrust.dll)
5871eec.1f00: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\wintrust.dll
5881eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
5891eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
5901eec.1f00: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll)
5911eec.1f00: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll
5921eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
5931eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
5941eec.1f00: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\msvcrt.dll)
5951eec.1f00: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\msvcrt.dll
5961eec.1f00: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\Wintrust.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
5971eec.1f00: supR3HardenedDllNotificationCallback: load 00007ffdd1dd0000 LB 0x0009e000 C:\WINDOWS\System32\msvcrt.dll [fFlags=0x0]
5981eec.1f00: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
5991eec.1f00: supR3HardenedDllNotificationCallback: load 00007ffdd0e80000 LB 0x00125000 C:\WINDOWS\System32\RPCRT4.dll [fFlags=0x0]
6001eec.1f00: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
6011eec.1f00: supR3HardenedDllNotificationCallback: load 00007ffdcfea0000 LB 0x00069000 C:\WINDOWS\System32\Wintrust.dll [fFlags=0x0]
6021eec.1f00: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
6031eec.1f00: supR3HardenedDllNotificationCallback: load 00007ffdcf7f0000 LB 0x00100000 C:\WINDOWS\System32\ucrtbase.dll [fFlags=0x0]
6041eec.1f00: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\ucrtbase.dll)
6051eec.1f00: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll
6061eec.1f00: supR3HardenedDllNotificationCallback: load 00007ffdcf690000 LB 0x00156000 C:\WINDOWS\System32\CRYPT32.dll [fFlags=0x0]
6071eec.1f00: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\crypt32.dll)
6081eec.1f00: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\crypt32.dll
6091eec.1f00: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-synch-l1-2-0) -> 0x0, fPresent=1
6101eec.1f00: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-synch-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
6111eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdcf8f0000 'api-ms-win-core-synch-l1-2-0'
6121eec.1f00: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-fibers-l1-1-1) -> 0x0, fPresent=1
6131eec.1f00: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-fibers-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
6141eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdcf8f0000 'api-ms-win-core-fibers-l1-1-1'
6151eec.1f00: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-fibers-l1-1-1) -> 0x0, fPresent=1
6161eec.1f00: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-fibers-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
6171eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdcf8f0000 'api-ms-win-core-fibers-l1-1-1'
6181eec.1f00: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-synch-l1-2-0) -> 0x0, fPresent=1
6191eec.1f00: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-synch-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
6201eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdcf8f0000 'api-ms-win-core-synch-l1-2-0'
6211eec.1f00: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-localization-l1-2-1) -> 0x0, fPresent=1
6221eec.1f00: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-l1-2-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
6231eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdcf8f0000 'api-ms-win-core-localization-l1-2-1'
6241eec.1f00: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\msasn1.dll)
6251eec.1f00: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\msasn1.dll
6261eec.1f00: supR3HardenedDllNotificationCallback: load 00007ffdcf1c0000 LB 0x00012000 C:\WINDOWS\SYSTEM32\MSASN1.dll [fFlags=0x0]
6271eec.1f00: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msasn1.dll [lacks WinVerifyTrust]
6281eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdcfea0000 'C:\WINDOWS\system32\Wintrust.dll'
6291eec.1f00: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\bcrypt.dll)
6301eec.1f00: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\bcrypt.dll
6311eec.1f00: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\bcrypt.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
6321eec.1f00: supR3HardenedDllNotificationCallback: load 00007ffdcfe70000 LB 0x00027000 C:\WINDOWS\System32\bcrypt.dll [fFlags=0x0]
6331eec.1f00: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\bcrypt.dll [lacks WinVerifyTrust]
6341eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdcfe70000 'C:\WINDOWS\system32\bcrypt.dll'
6351eec.1f00: bcrypt.dll loaded at 00007ffdcfe70000, BCryptOpenAlgorithmProvider at 00007ffdcfe751e0, preloading providers:
6361eec.1f00: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll)
6371eec.1f00: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll
6381eec.1f00: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\bcryptprimitives.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
6391eec.1f00: supR3HardenedDllNotificationCallback: load 00007ffdcf5d0000 LB 0x00082000 C:\WINDOWS\System32\bcryptprimitives.dll [fFlags=0x0]
6401eec.1f00: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll [lacks WinVerifyTrust]
6411eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdcf5d0000 'C:\WINDOWS\system32\bcryptprimitives.dll'
6421eec.1f00: BCryptOpenAlgorithmProvider(,'MD2',0,0) -> 0x0 (hAlgo=0000000001010350)
6431eec.1f00: BCryptOpenAlgorithmProvider(,'MD4',0,0) -> 0x0 (hAlgo=00000000010109d0)
6441eec.1f00: BCryptOpenAlgorithmProvider(,'MD5',0,0) -> 0x0 (hAlgo=0000000001010cf0)
6451eec.1f00: BCryptOpenAlgorithmProvider(,'SHA1',0,0) -> 0x0 (hAlgo=0000000001011010)
6461eec.1f00: BCryptOpenAlgorithmProvider(,'SHA256',0,0) -> 0x0 (hAlgo=0000000001011330)
6471eec.1f00: BCryptOpenAlgorithmProvider(,'SHA512',0,0) -> 0x0 (hAlgo=0000000001011650)
6481eec.1f00: BCryptOpenAlgorithmProvider(,'RSA',0,0) -> 0x0 (hAlgo=0000000001011970)
6491eec.1f00: BCryptOpenAlgorithmProvider(,'DSA',0,0) -> 0x0 (hAlgo=0000000001011c90)
6501eec.1f00: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\cryptsp.dll)
6511eec.1f00: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\cryptsp.dll
6521eec.1f00: supR3HardenedDllNotificationCallback: load 00007ffdcef80000 LB 0x00018000 C:\WINDOWS\SYSTEM32\CRYPTSP.dll [fFlags=0x0]
6531eec.1f00: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\cryptsp.dll [lacks WinVerifyTrust]
6541eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #18 'bcrypt.dll'.
6551eec.1f00: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\rsaenh.dll)
6561eec.1f00: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
6571eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcrypt.dll'...
6581eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcrypt.dll' -> '\Device\HarddiskVolume3\Windows\System32\bcrypt.dll' [rcNtRedir=0xc0150008]
6591eec.1f00: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\bcrypt.dll [lacks WinVerifyTrust]
6601eec.1f00: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
6611eec.1f00: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
6621eec.1f00: supR3HardenedDllNotificationCallback: load 00007ffdce6a0000 LB 0x00034000 C:\WINDOWS\system32\rsaenh.dll [fFlags=0x0]
6631eec.1f00: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
6641eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdce6a0000 'C:\WINDOWS\system32\rsaenh.dll'
6651eec.1f00: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\cryptbase.dll)
6661eec.1f00: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\cryptbase.dll
6671eec.1f00: supR3HardenedDllNotificationCallback: load 00007ffdcefa0000 LB 0x0000c000 C:\WINDOWS\SYSTEM32\CRYPTBASE.dll [fFlags=0x0]
6681eec.1f00: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\cryptbase.dll [lacks WinVerifyTrust]
6691eec.1f00: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
6701eec.1f00: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\kernel32.dll (Input=kernel32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
6711eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdd1940000 'C:\WINDOWS\System32\kernel32.dll'
6721eec.1f00: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
6731eec.1f00: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\WINTRUST.DLL (Input=WINTRUST.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
6741eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdcfea0000 'C:\WINDOWS\System32\WINTRUST.DLL'
6751eec.1f00: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll [lacks WinVerifyTrust]
6761eec.1f00: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\CRYPT32.dll (rcNtResolve=0xc0150008) *pfFlags=0x2 pwszSearchPath=0000000000000001:<flags> [calling]
6771eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdcf690000 'C:\WINDOWS\System32\CRYPT32.dll'
6781eec.1f00: supR3HardenedDllNotificationCallback: load 00007ffdd1480000 LB 0x0001d000 C:\WINDOWS\System32\imagehlp.dll [fFlags=0x0]
6791eec.1f00: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\imagehlp.dll)
6801eec.1f00: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\imagehlp.dll
6811eec.1f00: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
6821eec.1f00: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
6831eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdce6a0000 'C:\WINDOWS\system32\rsaenh.dll'
6841eec.1f00: supR3HardenedDllNotificationCallback: load 00007ffdd1780000 LB 0x0009c000 C:\WINDOWS\System32\sechost.dll [fFlags=0x0]
6851eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'rpcrt4.dll'.
6861eec.1f00: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\sechost.dll)
6871eec.1f00: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\sechost.dll
6881eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
6891eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'rpcrt4.dll'.
6901eec.1f00: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\gpapi.dll)
6911eec.1f00: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\gpapi.dll
6921eec.1f00: supR3HardenedDllNotificationCallback: load 00007ffdcde70000 LB 0x00023000 C:\WINDOWS\SYSTEM32\gpapi.dll [fFlags=0x0]
6931eec.1f00: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gpapi.dll [lacks WinVerifyTrust]
6941eec.1f00: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\profapi.dll)
6951eec.1f00: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\profapi.dll
6961eec.1f00: supR3HardenedDllNotificationCallback: load 00007ffdcf510000 LB 0x0001f000 C:\WINDOWS\SYSTEM32\profapi.dll [fFlags=0x0]
6971eec.1f00: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\profapi.dll [lacks WinVerifyTrust]
6981eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
6991eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'crypt32.dll'.
7001eec.1f00: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\cryptnet.dll)
7011eec.1f00: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\cryptnet.dll
7021eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'crypt32.dll'...
7031eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'crypt32.dll' -> '\Device\HarddiskVolume3\Windows\System32\crypt32.dll' [rcNtRedir=0xc0150008]
7041eec.1f00: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll [lacks WinVerifyTrust]
7051eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
7061eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
7071eec.1f00: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
7081eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
7091eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
7101eec.1f00: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
7111eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
7121eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
7131eec.1f00: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
7141eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
7151eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
7161eec.1f00: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
7171eec.1f00: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\cryptnet.dll (Input=cryptnet.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
7181eec.1f00: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
7191eec.1f00: supR3HardenedDllNotificationCallback: load 00007ffdb8150000 LB 0x00031000 C:\WINDOWS\System32\cryptnet.dll [fFlags=0x0]
7201eec.1f00: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
7211eec.1f00: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
7221eec.1f00: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x2 pwszSearchPath=0000000000000001:<flags> [calling]
7231eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdb8150000 'C:\WINDOWS\System32\cryptnet.dll'
7241eec.1f00: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
7251eec.1f00: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x2 pwszSearchPath=0000000000000001:<flags> [calling]
7261eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdb8150000 'C:\WINDOWS\System32\cryptnet.dll'
7271eec.1f00: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
7281eec.1f00: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x2 pwszSearchPath=0000000000000001:<flags> [calling]
7291eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdb8150000 'C:\WINDOWS\System32\cryptnet.dll'
7301eec.1f00: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
7311eec.1f00: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x2 pwszSearchPath=0000000000000001:<flags> [calling]
7321eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdb8150000 'C:\WINDOWS\System32\cryptnet.dll'
7331eec.1f00: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
7341eec.1f00: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x2 pwszSearchPath=0000000000000001:<flags> [calling]
7351eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdb8150000 'C:\WINDOWS\System32\cryptnet.dll'
7361eec.1f00: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
7371eec.1f00: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x2 pwszSearchPath=0000000000000001:<flags> [calling]
7381eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdb8150000 'C:\WINDOWS\System32\cryptnet.dll'
7391eec.1f00: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
7401eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdb8150000 'C:\WINDOWS\System32\cryptnet.dll'
7411eec.1f00: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
7421eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdb8150000 'C:\WINDOWS\System32\cryptnet.dll'
7431eec.1f00: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
7441eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdb8150000 'C:\WINDOWS\System32\cryptnet.dll'
7451eec.1f00: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
7461eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdb8150000 'C:\WINDOWS\System32\cryptnet.dll'
7471eec.1f00: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
7481eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdb8150000 'C:\WINDOWS\System32\cryptnet.dll'
7491eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdb8150000 'C:\WINDOWS\System32\cryptnet.dll'
7501eec.1f00: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
7511eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdb8150000 'C:\Windows\System32\cryptnet.dll'
7521eec.1f00: supR3HardenedDllNotificationCallback: load 00007ffdd16d0000 LB 0x000ae000 C:\WINDOWS\System32\advapi32.dll [fFlags=0x0]
7531eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
7541eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'sechost.dll'.
7551eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #27 'rpcrt4.dll'.
7561eec.1f00: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\advapi32.dll)
7571eec.1f00: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\advapi32.dll
7581eec.1f00: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
7591eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
7601eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
7611eec.1f00: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
7621eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'sechost.dll'...
7631eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'sechost.dll' -> '\Device\HarddiskVolume3\Windows\System32\sechost.dll' [rcNtRedir=0xc0150008]
7641eec.1f00: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\sechost.dll [lacks WinVerifyTrust]
7651eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
7661eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
7671eec.1f00: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
7681eec.1f00: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
7691eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdce6a0000 'C:\WINDOWS\system32\rsaenh.dll'
7701eec.1f00: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll [lacks WinVerifyTrust]
7711eec.1f00: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\crypt32.dll (Input=crypt32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
7721eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdcf690000 'C:\WINDOWS\System32\crypt32.dll'
7731eec.1f00: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000000 pwszName=\SystemRoot\System32\ntdll.dll
7741eec.1f00: supR3HardNtViCallWinVerifyTrustCatFile: New context 00000000010afe20
7751eec.1f00: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000010afe20
7761eec.1f00: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=014406C9507F8D19897E3D6E993A6C23EB9E2479
7771eec.1f00: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
7781eec.1f00: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\rpcrt4.dll (Input=rpcrt4.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
7791eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdd0e80000 'C:\WINDOWS\System32\rpcrt4.dll'
7801eec.1f00: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
7811eec.1f00: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
7821eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdce6a0000 'C:\WINDOWS\system32\rsaenh.dll'
7831eec.1f00: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll [lacks WinVerifyTrust]
7841eec.1f00: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\crypt32.dll (Input=crypt32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
7851eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdcf690000 'C:\WINDOWS\System32\crypt32.dll'
7861eec.1f00: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0516~31bf3856ad364e35~amd64~~10.0.19041.2006.cat'; file='\SystemRoot\System32\ntdll.dll'
7871eec.1f00: g_pfnWinVerifyTrust=00007ffdcfea1f00
7881eec.1f00: supR3HardenedScreenImage/preload: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll [redoing WinVerifyTrust]
7891eec.1f00: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
7901eec.1f00: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
7911eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdce6a0000 'C:\WINDOWS\system32\rsaenh.dll'
7921eec.1f00: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll [lacks WinVerifyTrust]
7931eec.1f00: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\crypt32.dll (Input=crypt32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
7941eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdcf690000 'C:\WINDOWS\System32\crypt32.dll'
7951eec.1f00: supR3HardenedScreenImage/preload: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\crypt32.dll'
7961eec.1f00: supR3HardenedScreenImage/preload: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wintrust.dll [redoing WinVerifyTrust]
7971eec.1f00: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
7981eec.1f00: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
7991eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdce6a0000 'C:\WINDOWS\system32\rsaenh.dll'
8001eec.1f00: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll
8011eec.1f00: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\crypt32.dll (Input=crypt32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
8021eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdcf690000 'C:\WINDOWS\System32\crypt32.dll'
8031eec.1f00: supR3HardenedScreenImage/preload: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\wintrust.dll'
8041eec.1f00: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
8051eec.1f00: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
8061eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdce6a0000 'C:\WINDOWS\system32\rsaenh.dll'
8071eec.1f00: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll
8081eec.1f00: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\crypt32.dll (Input=crypt32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
8091eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdcf690000 'C:\WINDOWS\System32\crypt32.dll'
8101eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\advapi32.dll'
8111eec.1f00: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
8121eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdce6a0000 'C:\WINDOWS\system32\rsaenh.dll'
8131eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdcf690000 'C:\WINDOWS\System32\crypt32.dll'
8141eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\cryptnet.dll'
8151eec.1f00: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
8161eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdce6a0000 'C:\WINDOWS\system32\rsaenh.dll'
8171eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdcf690000 'C:\WINDOWS\System32\crypt32.dll'
8181eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\profapi.dll'
8191eec.1f00: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
8201eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdce6a0000 'C:\WINDOWS\system32\rsaenh.dll'
8211eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdcf690000 'C:\WINDOWS\System32\crypt32.dll'
8221eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\gpapi.dll'
8231eec.1f00: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
8241eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdce6a0000 'C:\WINDOWS\system32\rsaenh.dll'
8251eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdcf690000 'C:\WINDOWS\System32\crypt32.dll'
8261eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\sechost.dll'
8271eec.1f00: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
8281eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdce6a0000 'C:\WINDOWS\system32\rsaenh.dll'
8291eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdcf690000 'C:\WINDOWS\System32\crypt32.dll'
8301eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\imagehlp.dll'
8311eec.1f00: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
8321eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdce6a0000 'C:\WINDOWS\system32\rsaenh.dll'
8331eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdcf690000 'C:\WINDOWS\System32\crypt32.dll'
8341eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\cryptbase.dll'
8351eec.1f00: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
8361eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdce6a0000 'C:\WINDOWS\system32\rsaenh.dll'
8371eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdcf690000 'C:\WINDOWS\System32\crypt32.dll'
8381eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\rsaenh.dll'
8391eec.1f00: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
8401eec.1f00: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
8411eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdce6a0000 'C:\WINDOWS\system32\rsaenh.dll'
8421eec.1f00: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll
8431eec.1f00: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\crypt32.dll (Input=crypt32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
8441eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdcf690000 'C:\WINDOWS\System32\crypt32.dll'
8451eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\cryptsp.dll'
8461eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdce6a0000 'C:\WINDOWS\system32\rsaenh.dll'
8471eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdcf690000 'C:\WINDOWS\System32\crypt32.dll'
8481eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll'
8491eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdce6a0000 'C:\WINDOWS\system32\rsaenh.dll'
8501eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdcf690000 'C:\WINDOWS\System32\crypt32.dll'
8511eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\bcrypt.dll'
8521eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdce6a0000 'C:\WINDOWS\system32\rsaenh.dll'
8531eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdcf690000 'C:\WINDOWS\System32\crypt32.dll'
8541eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\msasn1.dll'
8551eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdce6a0000 'C:\WINDOWS\system32\rsaenh.dll'
8561eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdcf690000 'C:\WINDOWS\System32\crypt32.dll'
8571eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\ucrtbase.dll'
8581eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdce6a0000 'C:\WINDOWS\system32\rsaenh.dll'
8591eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdcf690000 'C:\WINDOWS\System32\crypt32.dll'
8601eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll'
8611eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdce6a0000 'C:\WINDOWS\system32\rsaenh.dll'
8621eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdcf690000 'C:\WINDOWS\System32\crypt32.dll'
8631eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll'
8641eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdce6a0000 'C:\WINDOWS\system32\rsaenh.dll'
8651eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 24202) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxSupLib.dll'
8661eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdce6a0000 'C:\WINDOWS\system32\rsaenh.dll'
8671eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 24202) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe'
8681eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdce6a0000 'C:\WINDOWS\system32\rsaenh.dll'
8691eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdcf690000 'C:\WINDOWS\System32\crypt32.dll'
8701eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\KernelBase.dll'
8711eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdce6a0000 'C:\WINDOWS\system32\rsaenh.dll'
8721eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdcf690000 'C:\WINDOWS\System32\crypt32.dll'
8731eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\kernel32.dll'
8741eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdcf690000 'C:\WINDOWS\system32\crypt32.dll'
8751eec.1f00: supR3HardenedWinIsDesiredRootCA: Adding 0x6d709ce53fa7a000 CN=Root CA MUP 001, O=MUP Republike Srbije, L=Beograd, C=CS
8761eec.1f00: supR3HardenedWinIsDesiredRootCA: Adding 0x5ad46780fa5df300 DC=com, DC=microsoft, CN=Microsoft Root Certificate Authority
8771eec.1f00: supR3HardenedWinIsDesiredRootCA: Adding 0xea5386456178582b C=ZA, ST=Western Cape, L=Durbanville, O=Thawte, OU=Thawte Certification, CN=Thawte Timestamping CA
8781eec.1f00: supR3HardenedWinIsDesiredRootCA: Adding 0x560ad29254e89100 C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO RSA Certification Authority
8791eec.1f00: supR3HardenedWinIsDesiredRootCA: Adding 0x3be670c1bd02a900 OU=Copyright (c) 1997 Microsoft Corp., OU=Microsoft Corporation, CN=Microsoft Root Authority
8801eec.1f00: supR3HardenedWinIsDesiredRootCA: Adding 0xe991ee72b03db500 C=US, O=Symantec Corporation, CN=Symantec Enterprise Mobile Root for Microsoft
8811eec.1f00: supR3HardenedWinIsDesiredRootCA: Adding 0x4d3835aa4180b200 C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Root Certificate Authority 2011
8821eec.1f00: supR3HardenedWinIsDesiredRootCA: Adding 0x646e3fe3ba08df00 C=US, O=MSFT, CN=Microsoft Authenticode(tm) Root Authority
8831eec.1f00: supR3HardenedWinIsDesiredRootCA: Adding 0xb063d2ff5836cf00 CN=MUPCA Root, O=MUP Republike Srbije, L=Beograd, C=RS
8841eec.1f00: supR3HardenedWinIsDesiredRootCA: Adding 0xece4e4289e08b900 C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Root Certificate Authority 2010
8851eec.1f00: supR3HardenedWinIsDesiredRootCA: Adding 0x3401b15e3761c700 C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2008 VeriSign, Inc. - For authorized use only, CN=VeriSign Universal Root Certification Authority
8861eec.1f00: supR3HardenedWinIsDesiredRootCA: Adding 0xf3bb4d7e894b420 C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft ECC TS Root Certificate Authority 2018
8871eec.1f00: supR3HardenedWinIsDesiredRootCA: Adding 0x43a9cc371ff5385a O=Microsoft Trust Network, OU=Microsoft Corporation, OU=Microsoft Time Stamping Service Root, OU=Copyright (c) 1997 Microsoft Corp.
8881eec.1f00: supR3HardenedWinIsDesiredRootCA: Adding 0x8f4503224d14d600 C=RS, O=MUP Republike Srbije, OU=MUPCA, CN=MUPCA Root 3
8891eec.1f00: supR3HardenedWinIsDesiredRootCA: Adding 0x2e2d2c7c68f0202e O=VeriSign Trust Network, OU=VeriSign, Inc., OU=VeriSign Time Stamping Service Root, OU=NO LIABILITY ACCEPTED, (c)97 VeriSign, Inc.
8901eec.1f00: supR3HardenedWinIsDesiredRootCA: Adding 0x39b16e90832da400 C=RS, L=Beograd
8911eec.1f00: supR3HardenedWinIsDesiredRootCA: Adding 0xcec3d46562b9be8e C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft ECC Product Root Certificate Authority 2018
8921eec.1f00: supR3HardenedWinIsDesiredRootCA: Adding 0xca58a05dd401ae00 C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Time Stamp Root Certificate Authority 2014
8931eec.1f00: supR3HardenedWinIsDesiredRootCA: Adding 0x61a3a33f81aace00 C=US, ST=UT, L=Salt Lake City, O=The USERTRUST Network, OU=http://www.usertrust.com, CN=UTN-USERFirst-Object
8941eec.1f00: supR3HardenedWinIsDesiredRootCA: Adding 0x3d993fde1950a700 C=US, O=IdenTrust, CN=IdenTrust Commercial Root CA 1
8951eec.1f00: supR3HardenedWinIsDesiredRootCA: Adding 0x6b7bdc34cd37bb00 C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root G2
8961eec.1f00: supR3HardenedWinIsDesiredRootCA: Adding 0x57ba5395b561bf00 C=BM, O=QuoVadis Limited, OU=Root Certification Authority, CN=QuoVadis Root Certification Authority
8971eec.1f00: supR3HardenedWinIsDesiredRootCA: Adding 0xbbde687390e6bf00 C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Trusted Root G4
8981eec.1f00: supR3HardenedWinIsDesiredRootCA: Adding 0x83085097e9afdf00 O=Digital Signature Trust Co., CN=DST Root CA X3
8991eec.1f00: supR3HardenedWinIsDesiredRootCA: Adding 0xe248b7eeee4af00 C=CH, O=SwissSign AG, CN=SwissSign Gold CA - G2
9001eec.1f00: supR3HardenedWinIsDesiredRootCA: Adding 0x780679907625cc00 OU=GlobalSign Root CA - R3, O=GlobalSign, CN=GlobalSign
9011eec.1f00: supR3HardenedWinIsDesiredRootCA: Adding 0x3d98ab22bb04a300 C=IE, O=Baltimore, OU=CyberTrust, CN=Baltimore CyberTrust Root
9021eec.1f00: supR3HardenedWinIsDesiredRootCA: Adding 0xeae16ef49d40be00 C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services
9031eec.1f00: supR3HardenedWinIsDesiredRootCA: Adding 0xc6536f24d57ae723 C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust ECC Certification Authority
9041eec.1f00: supR3HardenedWinIsDesiredRootCA: Adding 0x3714f47324e8ad00 C=US, O=Internet Security Research Group, CN=ISRG Root X1
9051eec.1f00: supR3HardenedWinIsDesiredRootCA: Adding 0xd944bca189a00 C=BM, O=QuoVadis Limited, CN=QuoVadis Root CA 2
9061eec.1f00: supR3HardenedWinIsDesiredRootCA: Adding 0x8ff6fc03c1edbd00 C=US, ST=Arizona, L=Scottsdale, O=Starfield Technologies, Inc., CN=Starfield Root Certificate Authority - G2
9071eec.1f00: supR3HardenedWinIsDesiredRootCA: Adding 0xc6fa4243b695b600 C=US, O=Entrust, Inc., OU=www.entrust.net/CPS is incorporated by reference, OU=(c) 2006 Entrust, Inc., CN=Entrust Root Certification Authority
9081eec.1f00: supR3HardenedWinIsDesiredRootCA: Adding 0xa3ce8d99e60eda00 C=BE, O=GlobalSign nv-sa, OU=Root CA, CN=GlobalSign Root CA
9091eec.1f00: supR3HardenedWinIsDesiredRootCA: Adding 0xa671e9fec832b700 C=US, O=Starfield Technologies, Inc., OU=Starfield Class 2 Certification Authority
9101eec.1f00: supR3HardenedWinIsDesiredRootCA: Adding 0xa8de7211e13be200 C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root CA
9111eec.1f00: supR3HardenedWinIsDesiredRootCA: Adding 0x4ef92ac43a0cd500 C=US, ST=Arizona, L=Scottsdale, O=Starfield Technologies, Inc., CN=Starfield Services Root Certificate Authority - G2
9121eec.1f00: supR3HardenedWinIsDesiredRootCA: Adding 0xd45980fbf0a0ac00 C=US, O=thawte, Inc., OU=Certification Services Division, OU=(c) 2006 thawte, Inc. - For authorized use only, CN=thawte Primary Root CA
9131eec.1f00: supR3HardenedWinIsDesiredRootCA: Adding 0xc9edb72b684ba00 C=US, O=Entrust, Inc., OU=See www.entrust.net/legal-terms, OU=(c) 2009 Entrust, Inc. - for authorized use only, CN=Entrust Root Certification Authority - G2
9141eec.1f00: supR3HardenedWinIsDesiredRootCA: Adding 0xf5cd95e581a4ab00 C=US, O=SecureTrust Corporation, CN=SecureTrust CA
9151eec.1f00: supR3HardenedWinIsDesiredRootCA: Adding 0xbebef0d2217f0bfb C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root G3
9161eec.1f00: supR3HardenedWinIsDesiredRootCA: Adding 0x6f2ebe0e24cfa600 OU=GlobalSign Root CA - R2, O=GlobalSign, CN=GlobalSign
9171eec.1f00: supR3HardenedWinIsDesiredRootCA: Adding 0x14018a1bf29e595c C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification Authority
9181eec.1f00: supR3HardenedWinIsDesiredRootCA: Adding 0x9e5bc2d78b6a3636 C=ZA, ST=Western Cape, L=Cape Town, O=Thawte Consulting cc, OU=Certification Services Division, CN=Thawte Premium Server CA, Email=premium-server@thawte.com
9191eec.1f00: supR3HardenedWinIsDesiredRootCA: Adding 0x7c4fd32ec1b1ce00 C=PL, O=Unizeto Sp. z o.o., CN=Certum CA
9201eec.1f00: supR3HardenedWinIsDesiredRootCA: Adding 0xd4fbe673e5ccc600 C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert High Assurance EV Root CA
9211eec.1f00: supR3HardenedWinIsDesiredRootCA: Adding 0x1b8578514b74ac00 C=US, O=WFA Hotspot 2.0, CN=Hotspot 2.0 Trust Root CA - 03
9221eec.1f00: supR3HardenedWinIsDesiredRootCA: Adding 0xb28612a94b4dad00 O=Entrust.net, OU=www.entrust.net/CPS_2048 incorp. by ref. (limits liab.), OU=(c) 1999 Entrust.net Limited, CN=Entrust.net Certification Authority (2048)
9231eec.1f00: supR3HardenedWinIsDesiredRootCA: Adding 0xe87add30c52db600 C=BE, O=GlobalSign nv-sa, CN=GlobalSign Code Signing Root R45
9241eec.1f00: supR3HardenedWinIsDesiredRootCA: Adding 0x357a29080824af00 C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. - For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority - G5
9251eec.1f00: supR3HardenedWinIsDesiredRootCA: Adding 0x59faf1086271bf00 C=US, ST=Arizona, L=Scottsdale, O=GoDaddy.com, Inc., CN=Go Daddy Root Certificate Authority - G2
9261eec.1f00: supR3HardenedWinIsDesiredRootCA: Adding 0xb16dd37ffeb3b300 C=JP, O=SECOM Trust.net, OU=Security Communication RootCA1
9271eec.1f00: supR3HardenedWinIsDesiredRootCA: Adding 0xc30e361765128000 C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority
9281eec.1f00: supR3HardenedWinIsDesiredRootCA: Adding 0x7b3081c535b843ae C=US, O=Google Trust Services LLC, CN=GTS Root R4
9291eec.1f00: supR3HardenedWinIsDesiredRootCA: Adding 0x491857ead79dde00 C=US, O=The Go Daddy Group, Inc., OU=Go Daddy Class 2 Certification Authority
9301eec.1f00: supR3HardenedWinIsDesiredRootCA: Adding 0xc2ba72a37dfbe300 C=PL, O=Unizeto Technologies S.A., OU=Certum Certification Authority, CN=Certum Trusted Network CA
9311eec.1f00: supR3HardenedWinIsDesiredRootCA: Adding 0x8043e4ce150ead00 C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Assured ID Root CA
9321eec.1f00: supR3HardenedWinIsDesiredRootCA: Adding 0xf2e6331af7b700 C=SE, O=AddTrust AB, OU=AddTrust External TTP Network, CN=AddTrust External CA Root
9331eec.1f00: supR3HardenedWinRetrieveTrustedRootCAs: cAdded=58
9341eec.1f00: SUPR3HardenedMain: Load Runtime...
9351eec.1f00: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll: Signature #1/2: info status: 24202
9361eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdce6a0000 'C:\WINDOWS\system32\rsaenh.dll'
9371eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
9381eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp100.dll'.
9391eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'rpcrt4.dll'.
9401eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'ws2_32.dll'.
9411eec.1f00: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll) WinVerifyTrust
9421eec.1f00: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll
9431eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
9441eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
9451eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdce6a0000 'C:\WINDOWS\system32\rsaenh.dll'
9461eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdcf690000 'C:\WINDOWS\System32\crypt32.dll'
9471eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #26 'rpcrt4.dll'.
9481eec.1f00: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\ws2_32.dll) WinVerifyTrust
9491eec.1f00: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\ws2_32.dll
9501eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
9511eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
9521eec.1f00: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll
9531eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
9541eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
9551eec.1f00: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll: Signature #1/2: info status: 24202
9561eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
9571eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
9581eec.1f00: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll
9591eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdce6a0000 'C:\WINDOWS\system32\rsaenh.dll'
9601eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
9611eec.1f00: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll) WinVerifyTrust
9621eec.1f00: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll
9631eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
9641eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
9651eec.1f00: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll: Signature #1/2: info status: 24202
9661eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
9671eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
9681eec.1f00: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll: Signature #1/2: info status: 24202
9691eec.1f00: Detected WinVerifyTrust recursion: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
9701eec.1f00: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll)
9711eec.1f00: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll
9721eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdce6a0000 'C:\WINDOWS\system32\rsaenh.dll'
9731eec.1f00: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll) WinVerifyTrust
9741eec.1f00: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000a01:<flags> [calling]
9751eec.1f00: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll
9761eec.1f00: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [avoiding WinVerifyTrust]
9771eec.1f00: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll
9781eec.1f00: supR3HardenedDllNotificationCallback: load 000000006fcb0000 LB 0x000d2000 C:\Program Files\Oracle\VirtualBox\MSVCR100.dll [fFlags=0x0]
9791eec.1f00: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [avoiding WinVerifyTrust]
9801eec.1f00: supR3HardenedDllNotificationCallback: load 000000006f130000 LB 0x00098000 C:\Program Files\Oracle\VirtualBox\MSVCP100.dll [fFlags=0x0]
9811eec.1f00: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll
9821eec.1f00: supR3HardenedDllNotificationCallback: load 00007ffdd1d60000 LB 0x0006b000 C:\WINDOWS\System32\WS2_32.dll [fFlags=0x0]
9831eec.1f00: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ws2_32.dll
9841eec.1f00: supR3HardenedDllNotificationCallback: load 00007ffd47460000 LB 0x005eb000 C:\Program Files\Oracle\VirtualBox\VBoxRT.dll [fFlags=0x0]
9851eec.1f00: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll
9861eec.1f00: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
9871eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
9881eec.1f00: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll
9891eec.1f00: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
9901eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd47460000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9911eec.1f00: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
9921eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
9931eec.1f00: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
9941eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
9951eec.1f00: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll
9961eec.1f00: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
9971eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd47460000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9981eec.1f00: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
9991eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10001eec.1f00: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10011eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10021eec.1f00: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll
10031eec.1f00: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
10041eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd47460000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10051eec.1f00: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10061eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10071eec.1f00: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10081eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10091eec.1f00: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll
10101eec.1f00: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
10111eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd47460000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10121eec.1f00: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10131eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10141eec.1f00: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10151eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10161eec.1f00: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll
10171eec.1f00: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
10181eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd47460000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10191eec.1f00: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10201eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10211eec.1f00: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10221eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10231eec.1f00: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll
10241eec.1f00: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
10251eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd47460000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10261eec.1f00: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10271eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10281eec.1f00: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10291eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10301eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd47460000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10311eec.1f00: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10321eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10331eec.1f00: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10341eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10351eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd47460000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10361eec.1f00: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10371eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10381eec.1f00: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10391eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10401eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd47460000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10411eec.1f00: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10421eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10431eec.1f00: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10441eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10451eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd47460000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10461eec.1f00: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10471eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10481eec.1f00: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10491eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10501eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd47460000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10511eec.1f00: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10521eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10531eec.1f00: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10541eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10551eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd47460000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10561eec.1f00: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10571eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10581eec.1f00: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10591eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10601eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd47460000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10611eec.1f00: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10621eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10631eec.1f00: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10641eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10651eec.1f00: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll
10661eec.1f00: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
10671eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd47460000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10681eec.1f00: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10691eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10701eec.1f00: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10711eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10721eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd47460000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10731eec.1f00: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10741eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10751eec.1f00: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10761eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10771eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd47460000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10781eec.1f00: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10791eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10801eec.1f00: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10811eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10821eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd47460000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10831eec.1f00: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10841eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10851eec.1f00: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10861eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10871eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd47460000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10881eec.1f00: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10891eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10901eec.1f00: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10911eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10921eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd47460000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10931eec.1f00: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10941eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10951eec.1f00: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10961eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10971eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd47460000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10981eec.1f00: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10991eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11001eec.1f00: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11011eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11021eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd47460000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11031eec.1f00: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11041eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11051eec.1f00: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11061eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11071eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd47460000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11081eec.1f00: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11091eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11101eec.1f00: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11111eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11121eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd47460000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11131eec.1f00: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11141eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11151eec.1f00: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11161eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11171eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd47460000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11181eec.1f00: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11191eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11201eec.1f00: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11211eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11221eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd47460000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11231eec.1f00: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11241eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11251eec.1f00: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11261eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11271eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd47460000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11281eec.1f00: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11291eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11301eec.1f00: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11311eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11321eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd47460000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11331eec.1f00: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11341eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11351eec.1f00: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11361eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11371eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd47460000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11381eec.1f00: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11391eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11401eec.1f00: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11411eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11421eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd47460000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11431eec.1f00: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11441eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11451eec.1f00: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11461eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11471eec.1f00: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll
11481eec.1f00: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
11491eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd47460000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11501eec.1f00: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11511eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11521eec.1f00: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11531eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11541eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd47460000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11551eec.1f00: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11561eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11571eec.1f00: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11581eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11591eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd47460000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11601eec.1f00: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11611eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11621eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd47460000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11631eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdce6a0000 'C:\WINDOWS\system32\rsaenh.dll'
11641eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 24202) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'
11651eec.1f00: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wintrust.dll
11661eec.1f00: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\Wintrust.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
11671eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdcfea0000 'C:\WINDOWS\system32\Wintrust.dll'
11681eec.1f00: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
11691eec.1f00: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
11701eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdce6a0000 'C:\WINDOWS\system32\rsaenh.dll'
11711eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdcf690000 'C:\WINDOWS\System32\crypt32.dll'
11721eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdce6a0000 'C:\WINDOWS\system32\rsaenh.dll'
11731eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdcf690000 'C:\WINDOWS\System32\crypt32.dll'
11741eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdcf690000 'C:\WINDOWS\system32\crypt32.dll'
11751eec.1f00: SUPR3HardenedMain: Load TrustedMain...
11761eec.1f00: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll: Signature #1/2: info status: 24202
11771eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdce6a0000 'C:\WINDOWS\system32\rsaenh.dll'
11781eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'opengl32.dll'.
11791eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'uicommon.dll'.
11801eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxrt.dll'.
11811eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'msvcp100.dll'.
11821eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'msvcr100.dll'.
11831eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'qt5corevbox.dll'.
11841eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'qt5guivbox.dll'.
11851eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'qt5widgetsvbox.dll'.
11861eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'qt5openglvbox.dll'.
11871eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'user32.dll'.
11881eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'ole32.dll'.
11891eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'oleaut32.dll'.
11901eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #13 'winmm.dll'.
11911eec.1f00: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll) WinVerifyTrust
11921eec.1f00: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll
11931eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
11941eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume3\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008]
11951eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdce6a0000 'C:\WINDOWS\system32\rsaenh.dll'
11961eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdcf690000 'C:\WINDOWS\System32\crypt32.dll'
11971eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcrt.dll'.
11981eec.1f00: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\winmm.dll) WinVerifyTrust
11991eec.1f00: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\winmm.dll
12001eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
12011eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
12021eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
12031eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
12041eec.1f00: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll
12051eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdce6a0000 'C:\WINDOWS\system32\rsaenh.dll'
12061eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdcf690000 'C:\WINDOWS\System32\crypt32.dll'
12071eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcp_win.dll'.
12081eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'combase.dll'.
12091eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #21 'rpcrt4.dll'.
12101eec.1f00: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\oleaut32.dll) WinVerifyTrust
12111eec.1f00: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\oleaut32.dll
12121eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
12131eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
12141eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
12151eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
12161eec.1f00: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll
12171eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
12181eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
12191eec.1f00: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\combase.dll'.
12201eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'rpcrt4.dll'.
12211eec.1f00: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\combase.dll)
12221eec.1f00: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\combase.dll
12231eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
12241eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
12251eec.1f00: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll'.
12261eec.1f00: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll)
12271eec.1f00: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll
12281eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
12291eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
12301eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdce6a0000 'C:\WINDOWS\system32\rsaenh.dll'
12311eec.1f00: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll
12321eec.1f00: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\crypt32.dll (Input=crypt32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
12331eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdcf690000 'C:\WINDOWS\System32\crypt32.dll'
12341eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #21 'rpcrt4.dll'.
12351eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #49 'gdi32.dll'.
12361eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #50 'user32.dll'.
12371eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #51 'combase.dll'.
12381eec.1f00: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\ole32.dll) WinVerifyTrust
12391eec.1f00: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\ole32.dll
12401eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
12411eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
12421eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
12431eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
12441eec.1f00: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\combase.dll [lacks WinVerifyTrust]
12451eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
12461eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
12471eec.1f00: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\user32.dll'.
12481eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'win32u.dll'.
12491eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #37 'gdi32.dll'.
12501eec.1f00: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\user32.dll)
12511eec.1f00: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\user32.dll
12521eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
12531eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
12541eec.1f00: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\gdi32.dll'.
12551eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'win32u.dll'.
12561eec.1f00: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\gdi32.dll)
12571eec.1f00: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\gdi32.dll
12581eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
12591eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
12601eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
12611eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
12621eec.1f00: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\win32u.dll'.
12631eec.1f00: '\Device\HarddiskVolume3\Windows\System32\win32u.dll' has no imports
12641eec.1f00: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\win32u.dll)
12651eec.1f00: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\win32u.dll
12661eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
12671eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
12681eec.1f00: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
12691eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
12701eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
12711eec.1f00: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\win32u.dll [lacks WinVerifyTrust]
12721eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdce6a0000 'C:\WINDOWS\system32\rsaenh.dll'
12731eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdcf690000 'C:\WINDOWS\System32\crypt32.dll'
12741eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'win32u.dll'.
12751eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #37 'gdi32.dll'.
12761eec.1f00: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\user32.dll) WinVerifyTrust
12771eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5openglvbox.dll'...
12781eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5openglvbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5openglvbox.dll' [rcNtRedir=0xc0150008]
12791eec.1f00: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll: Signature #1/2: info status: 24202
12801eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
12811eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
12821eec.1f00: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
12831eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
12841eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
12851eec.1f00: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\win32u.dll [lacks WinVerifyTrust]
12861eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdce6a0000 'C:\WINDOWS\system32\rsaenh.dll'
12871eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'qt5widgetsvbox.dll'.
12881eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'qt5guivbox.dll'.
12891eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5corevbox.dll'.
12901eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'msvcr100.dll'.
12911eec.1f00: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll) WinVerifyTrust
12921eec.1f00: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll
12931eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5widgetsvbox.dll'...
12941eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5widgetsvbox.dll' [rcNtRedir=0xc0150008]
12951eec.1f00: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll: Signature #1/2: info status: 24202
12961eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
12971eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
12981eec.1f00: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll
12991eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
13001eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
13011eec.1f00: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll: Signature #1/2: info status: 24202
13021eec.1f00: Detected WinVerifyTrust recursion: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll'.
13031eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'.
13041eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'shell32.dll'.
13051eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'ole32.dll'.
13061eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'advapi32.dll'.
13071eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'ws2_32.dll'.
13081eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'mpr.dll'.
13091eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'msvcp100.dll'.
13101eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'msvcr100.dll'.
13111eec.1f00: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll)
13121eec.1f00: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll
13131eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
13141eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
13151eec.1f00: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll: Signature #1/2: info status: 24202
13161eec.1f00: Detected WinVerifyTrust recursion: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll'.
13171eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'ole32.dll'.
13181eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'opengl32.dll'.
13191eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'gdi32.dll'.
13201eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
13211eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'qt5corevbox.dll'.
13221eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'msvcp100.dll'.
13231eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msvcr100.dll'.
13241eec.1f00: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll)
13251eec.1f00: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll
13261eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5widgetsvbox.dll'...
13271eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5widgetsvbox.dll' [rcNtRedir=0xc0150008]
13281eec.1f00: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll: Signature #1/2: info status: 24202
13291eec.1f00: Detected WinVerifyTrust recursion: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'.
13301eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'gdi32.dll'.
13311eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'.
13321eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5guivbox.dll'.
13331eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'qt5corevbox.dll'.
13341eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'shell32.dll'.
13351eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'msvcp100.dll'.
13361eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msvcr100.dll'.
13371eec.1f00: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll)
13381eec.1f00: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll
13391eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
13401eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
13411eec.1f00: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll
13421eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
13431eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
13441eec.1f00: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll
13451eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
13461eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume3\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
13471eec.1f00: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\shell32.dll'.
13481eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcp_win.dll'.
13491eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #72 'user32.dll'.
13501eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #74 'gdi32.dll'.
13511eec.1f00: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\shell32.dll)
13521eec.1f00: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\shell32.dll
13531eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
13541eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
13551eec.1f00: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
13561eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
13571eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
13581eec.1f00: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
13591eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
13601eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
13611eec.1f00: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
13621eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
13631eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
13641eec.1f00: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
13651eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
13661eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
13671eec.1f00: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll
13681eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
13691eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
13701eec.1f00: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll
13711eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
13721eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
13731eec.1f00: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
13741eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
13751eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
13761eec.1f00: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
13771eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
13781eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
13791eec.1f00: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
13801eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
13811eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume3\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008]
13821eec.1f00: Detected WinVerifyTrust recursion: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume3\Windows\System32\opengl32.dll'.
13831eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
13841eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'advapi32.dll'.
13851eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
13861eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'gdi32.dll'.
13871eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'glu32.dll'.
13881eec.1f00: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\opengl32.dll)
13891eec.1f00: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\opengl32.dll
13901eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
13911eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
13921eec.1f00: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ole32.dll
13931eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
13941eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
13951eec.1f00: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll
13961eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
13971eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
13981eec.1f00: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll
13991eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mpr.dll'...
14001eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'mpr.dll' -> '\Device\HarddiskVolume3\Windows\System32\mpr.dll' [rcNtRedir=0xc0150008]
14011eec.1f00: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\mpr.dll'.
14021eec.1f00: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\mpr.dll)
14031eec.1f00: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\mpr.dll
14041eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
14051eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
14061eec.1f00: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ws2_32.dll
14071eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
14081eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
14091eec.1f00: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll
14101eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
14111eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
14121eec.1f00: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ole32.dll
14131eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
14141eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume3\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
14151eec.1f00: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll [lacks WinVerifyTrust]
14161eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
14171eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
14181eec.1f00: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
14191eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'glu32.dll'...
14201eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'glu32.dll' -> '\Device\HarddiskVolume3\Windows\System32\glu32.dll' [rcNtRedir=0xc0150008]
14211eec.1f00: Detected WinVerifyTrust recursion: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume3\Windows\System32\glu32.dll'.
14221eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
14231eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'user32.dll'.
14241eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'opengl32.dll'.
14251eec.1f00: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\glu32.dll)
14261eec.1f00: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\glu32.dll
14271eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
14281eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
14291eec.1f00: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
14301eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
14311eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
14321eec.1f00: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
14331eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
14341eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
14351eec.1f00: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll
14361eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
14371eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
14381eec.1f00: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll
14391eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
14401eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
14411eec.1f00: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
14421eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
14431eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
14441eec.1f00: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
14451eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
14461eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
14471eec.1f00: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll [lacks WinVerifyTrust]
14481eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
14491eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume3\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008]
14501eec.1f00: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\opengl32.dll [lacks WinVerifyTrust]
14511eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
14521eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
14531eec.1f00: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
14541eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
14551eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
14561eec.1f00: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll
14571eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdce6a0000 'C:\WINDOWS\system32\rsaenh.dll'
14581eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'gdi32.dll'.
14591eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'.
14601eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5guivbox.dll'.
14611eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'qt5corevbox.dll'.
14621eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'shell32.dll'.
14631eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'msvcp100.dll'.
14641eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msvcr100.dll'.
14651eec.1f00: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll) WinVerifyTrust
14661eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
14671eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
14681eec.1f00: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [redoing WinVerifyTrust]
14691eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
14701eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
14711eec.1f00: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll
14721eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
14731eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
14741eec.1f00: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll
14751eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
14761eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume3\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
14771eec.1f00: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll [lacks WinVerifyTrust]
14781eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
14791eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
14801eec.1f00: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
14811eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
14821eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
14831eec.1f00: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
14841eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
14851eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
14861eec.1f00: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
14871eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
14881eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
14891eec.1f00: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
14901eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdce6a0000 'C:\WINDOWS\system32\rsaenh.dll'
14911eec.1f00: supR3HardenedScreenImage/Imports: 0 (was 24202) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll'
14921eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
14931eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
14941eec.1f00: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [redoing WinVerifyTrust]
14951eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdce6a0000 'C:\WINDOWS\system32\rsaenh.dll'
14961eec.1f00: supR3HardenedScreenImage/Imports: 0 (was 24202) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll'
14971eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
14981eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
14991eec.1f00: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll
15001eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
15011eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
15021eec.1f00: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll
15031eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
15041eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
15051eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'uicommon.dll'...
15061eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'uicommon.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\uicommon.dll' [rcNtRedir=0xc0150008]
15071eec.1f00: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\UICommon.dll: Signature #1/2: info status: 24202
15081eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdce6a0000 'C:\WINDOWS\system32\rsaenh.dll'
15091eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'vboxrt.dll'.
15101eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcr100.dll'.
15111eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5corevbox.dll'.
15121eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'qt5guivbox.dll'.
15131eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'qt5widgetsvbox.dll'.
15141eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'user32.dll'.
15151eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'advapi32.dll'.
15161eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'ole32.dll'.
15171eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'oleaut32.dll'.
15181eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'rpcrt4.dll'.
15191eec.1f00: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\UICommon.dll) WinVerifyTrust
15201eec.1f00: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\UICommon.dll
15211eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
15221eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume3\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008]
15231eec.1f00: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\opengl32.dll [redoing WinVerifyTrust]
15241eec.1f00: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000534 pwszName=\Device\HarddiskVolume3\Windows\System32\opengl32.dll
15251eec.1f00: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000010afe20
15261eec.1f00: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000010afe20
15271eec.1f00: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=B4171C0BCE32E15678A635F6C1468B16A3DEDB0C
15281eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
15291eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
15301eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
15311eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
15321eec.1f00: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll
15331eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
15341eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
15351eec.1f00: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ole32.dll
15361eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
15371eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
15381eec.1f00: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll
15391eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
15401eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
15411eec.1f00: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
15421eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5widgetsvbox.dll'...
15431eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5widgetsvbox.dll' [rcNtRedir=0xc0150008]
15441eec.1f00: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [lacks WinVerifyTrust]
15451eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
15461eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
15471eec.1f00: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll
15481eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
15491eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
15501eec.1f00: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll
15511eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
15521eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
15531eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
15541eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
15551eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdce6a0000 'C:\WINDOWS\system32\rsaenh.dll'
15561eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdcf690000 'C:\WINDOWS\System32\crypt32.dll'
15571eec.1f00: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0312~31bf3856ad364e35~amd64~~10.0.19041.2006.cat'; file='\Device\HarddiskVolume3\Windows\System32\opengl32.dll'
15581eec.1f00: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
15591eec.1f00: supR3HardenedScreenImage/Imports: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\opengl32.dll'
15601eec.1f00: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000a01:<flags> [calling]
15611eec.1f00: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll
15621eec.1f00: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\opengl32.dll
15631eec.1f00: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\UICommon.dll
15641eec.1f00: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll
15651eec.1f00: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll
15661eec.1f00: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [avoiding WinVerifyTrust]
15671eec.1f00: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll
15681eec.1f00: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmm.dll
15691eec.1f00: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\glu32.dll [avoiding WinVerifyTrust]
15701eec.1f00: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\mpr.dll [avoiding WinVerifyTrust]
15711eec.1f00: supR3HardenedDllNotificationCallback: load 00007ffdcf660000 LB 0x00022000 C:\WINDOWS\System32\win32u.dll [fFlags=0x0]
15721eec.1f00: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\win32u.dll [avoiding WinVerifyTrust]
15731eec.1f00: supR3HardenedDllNotificationCallback: load 00007ffdcfdd0000 LB 0x0009d000 C:\WINDOWS\System32\msvcp_win.dll [fFlags=0x0]
15741eec.1f00: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll [avoiding WinVerifyTrust]
15751eec.1f00: supR3HardenedDllNotificationCallback: load 00007ffdcfbc0000 LB 0x0010b000 C:\WINDOWS\System32\gdi32full.dll [fFlags=0x0]
15761eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcp_win.dll'.
15771eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #35 'gdi32.dll'.
15781eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #37 'user32.dll'.
15791eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #38 'win32u.dll'.
15801eec.1f00: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\gdi32full.dll)
15811eec.1f00: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\gdi32full.dll
15821eec.1f00: supR3HardenedDllNotificationCallback: load 00007ffdcff10000 LB 0x0002a000 C:\WINDOWS\System32\GDI32.dll [fFlags=0x0]
15831eec.1f00: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [avoiding WinVerifyTrust]
15841eec.1f00: supR3HardenedDllNotificationCallback: load 00007ffdd1500000 LB 0x001a0000 C:\WINDOWS\System32\USER32.dll [fFlags=0x0]
15851eec.1f00: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [avoiding WinVerifyTrust]
15861eec.1f00: supR3HardenedDllNotificationCallback: load 00007ffdd1a00000 LB 0x00354000 C:\WINDOWS\System32\combase.dll [fFlags=0x0]
15871eec.1f00: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\combase.dll [avoiding WinVerifyTrust]
15881eec.1f00: supR3HardenedDllNotificationCallback: load 00007ffda91e0000 LB 0x0002c000 C:\WINDOWS\SYSTEM32\GLU32.dll [fFlags=0x0]
15891eec.1f00: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\glu32.dll [avoiding WinVerifyTrust]
15901eec.1f00: supR3HardenedDllNotificationCallback: load 00007ffda9210000 LB 0x00127000 C:\WINDOWS\SYSTEM32\OPENGL32.dll [fFlags=0x0]
15911eec.1f00: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\opengl32.dll
15921eec.1f00: supR3HardenedDllNotificationCallback: load 00007ffdd0720000 LB 0x00743000 C:\WINDOWS\System32\SHELL32.dll [fFlags=0x0]
15931eec.1f00: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll [avoiding WinVerifyTrust]
15941eec.1f00: supR3HardenedDllNotificationCallback: load 00007ffdd0fb0000 LB 0x0012a000 C:\WINDOWS\System32\ole32.dll [fFlags=0x0]
15951eec.1f00: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ole32.dll
15961eec.1f00: supR3HardenedDllNotificationCallback: load 00007ffdb4d50000 LB 0x0001d000 C:\WINDOWS\SYSTEM32\MPR.dll [fFlags=0x0]
15971eec.1f00: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\mpr.dll [avoiding WinVerifyTrust]
15981eec.1f00: supR3HardenedDllNotificationCallback: load 000000006f740000 LB 0x00565000 C:\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [fFlags=0x0]
15991eec.1f00: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll
16001eec.1f00: supR3HardenedDllNotificationCallback: load 00007ffd46e60000 LB 0x005f7000 C:\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [fFlags=0x0]
16011eec.1f00: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll
16021eec.1f00: supR3HardenedDllNotificationCallback: load 000000006f1d0000 LB 0x00561000 C:\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [fFlags=0x0]
16031eec.1f00: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [avoiding WinVerifyTrust]
16041eec.1f00: supR3HardenedDllNotificationCallback: load 00007ffdd05f0000 LB 0x000cd000 C:\WINDOWS\System32\OLEAUT32.dll [fFlags=0x0]
16051eec.1f00: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll
16061eec.1f00: supR3HardenedDllNotificationCallback: load 00007ffd44b40000 LB 0x02320000 C:\Program Files\Oracle\VirtualBox\UICommon.dll [fFlags=0x0]
16071eec.1f00: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\UICommon.dll
16081eec.1f00: supR3HardenedDllNotificationCallback: load 000000006f0d0000 LB 0x00054000 C:\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll [fFlags=0x0]
16091eec.1f00: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll
16101eec.1f00: supR3HardenedDllNotificationCallback: load 00007ffdb5dc0000 LB 0x00027000 C:\WINDOWS\SYSTEM32\WINMM.dll [fFlags=0x0]
16111eec.1f00: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmm.dll
16121eec.1f00: supR3HardenedDllNotificationCallback: load 00007ffd55c80000 LB 0x001c9000 C:\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll [fFlags=0x0]
16131eec.1f00: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll
16141eec.1f00: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\gdi32full.dll'.
16151eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\gdi32full.dll' [rescheduled]
16161eec.1f00: Detected loader lock ownership: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume3\Windows\System32\glu32.dll'.
16171eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 22900 (was 22900) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\glu32.dll' [rescheduled]
16181eec.1f00: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\mpr.dll'.
16191eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\mpr.dll' [rescheduled]
16201eec.1f00: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\shell32.dll'.
16211eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\shell32.dll' [rescheduled]
16221eec.1f00: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'.
16231eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll' [rescheduled]
16241eec.1f00: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\win32u.dll'.
16251eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rescheduled]
16261eec.1f00: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\gdi32.dll'.
16271eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rescheduled]
16281eec.1f00: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\user32.dll'.
16291eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rescheduled]
16301eec.1f00: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll'.
16311eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rescheduled]
16321eec.1f00: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\combase.dll'.
16331eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rescheduled]
16341eec.1f00: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\kernel32.dll
16351eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
16361eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
16371eec.1f00: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\win32u.dll [redoing WinVerifyTrust]
16381eec.1f00: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\win32u.dll'.
16391eec.1f00: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume3\Windows\System32\win32u.dll
16401eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
16411eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
16421eec.1f00: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [redoing WinVerifyTrust]
16431eec.1f00: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\user32.dll'.
16441eec.1f00: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume3\Windows\System32\user32.dll
16451eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
16461eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
16471eec.1f00: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [redoing WinVerifyTrust]
16481eec.1f00: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\gdi32.dll'.
16491eec.1f00: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume3\Windows\System32\gdi32.dll
16501eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
16511eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
16521eec.1f00: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll [redoing WinVerifyTrust]
16531eec.1f00: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll'.
16541eec.1f00: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll
16551eec.1f00: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\kernel32.dll (Input=kernel32, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
16561eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdd1940000 'C:\WINDOWS\System32\kernel32.dll'
16571eec.1f00: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\gdi32full.dll'.
16581eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\gdi32full.dll' [rescheduled]
16591eec.1f00: Detected loader lock ownership: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume3\Windows\System32\glu32.dll'.
16601eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 22900 (was 22900) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\glu32.dll' [rescheduled]
16611eec.1f00: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\mpr.dll'.
16621eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\mpr.dll' [rescheduled]
16631eec.1f00: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\shell32.dll'.
16641eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\shell32.dll' [rescheduled]
16651eec.1f00: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'.
16661eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll' [rescheduled]
16671eec.1f00: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\win32u.dll'.
16681eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rescheduled]
16691eec.1f00: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\gdi32.dll'.
16701eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rescheduled]
16711eec.1f00: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\user32.dll'.
16721eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rescheduled]
16731eec.1f00: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll'.
16741eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rescheduled]
16751eec.1f00: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\combase.dll'.
16761eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rescheduled]
16771eec.1f00: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\gdi32full.dll'.
16781eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\gdi32full.dll' [rescheduled]
16791eec.1f00: Detected loader lock ownership: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume3\Windows\System32\glu32.dll'.
16801eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 22900 (was 22900) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\glu32.dll' [rescheduled]
16811eec.1f00: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\mpr.dll'.
16821eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\mpr.dll' [rescheduled]
16831eec.1f00: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\shell32.dll'.
16841eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\shell32.dll' [rescheduled]
16851eec.1f00: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'.
16861eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll' [rescheduled]
16871eec.1f00: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\win32u.dll'.
16881eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rescheduled]
16891eec.1f00: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\gdi32.dll'.
16901eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rescheduled]
16911eec.1f00: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\user32.dll'.
16921eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rescheduled]
16931eec.1f00: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll'.
16941eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rescheduled]
16951eec.1f00: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\combase.dll'.
16961eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rescheduled]
16971eec.1f00: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-string-l1-1-0) -> 0x0, fPresent=1
16981eec.1f00: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-string-l1-1-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
16991eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdcf8f0000 'api-ms-win-core-string-l1-1-0'
17001eec.1f00: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\gdi32full.dll'.
17011eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\gdi32full.dll' [rescheduled]
17021eec.1f00: Detected loader lock ownership: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume3\Windows\System32\glu32.dll'.
17031eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 22900 (was 22900) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\glu32.dll' [rescheduled]
17041eec.1f00: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\mpr.dll'.
17051eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\mpr.dll' [rescheduled]
17061eec.1f00: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\shell32.dll'.
17071eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\shell32.dll' [rescheduled]
17081eec.1f00: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'.
17091eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll' [rescheduled]
17101eec.1f00: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\win32u.dll'.
17111eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rescheduled]
17121eec.1f00: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\gdi32.dll'.
17131eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rescheduled]
17141eec.1f00: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\user32.dll'.
17151eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rescheduled]
17161eec.1f00: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll'.
17171eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rescheduled]
17181eec.1f00: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\combase.dll'.
17191eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rescheduled]
17201eec.1f00: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\gdi32full.dll'.
17211eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\gdi32full.dll' [rescheduled]
17221eec.1f00: Detected loader lock ownership: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume3\Windows\System32\glu32.dll'.
17231eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 22900 (was 22900) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\glu32.dll' [rescheduled]
17241eec.1f00: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\mpr.dll'.
17251eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\mpr.dll' [rescheduled]
17261eec.1f00: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\shell32.dll'.
17271eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\shell32.dll' [rescheduled]
17281eec.1f00: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'.
17291eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll' [rescheduled]
17301eec.1f00: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\win32u.dll'.
17311eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rescheduled]
17321eec.1f00: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\gdi32.dll'.
17331eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rescheduled]
17341eec.1f00: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\user32.dll'.
17351eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rescheduled]
17361eec.1f00: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll'.
17371eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rescheduled]
17381eec.1f00: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\combase.dll'.
17391eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rescheduled]
17401eec.1f00: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-datetime-l1-1-1) -> 0x0, fPresent=1
17411eec.1f00: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-datetime-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
17421eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdcf8f0000 'api-ms-win-core-datetime-l1-1-1'
17431eec.1f00: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\gdi32full.dll'.
17441eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\gdi32full.dll' [rescheduled]
17451eec.1f00: Detected loader lock ownership: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume3\Windows\System32\glu32.dll'.
17461eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 22900 (was 22900) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\glu32.dll' [rescheduled]
17471eec.1f00: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\mpr.dll'.
17481eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\mpr.dll' [rescheduled]
17491eec.1f00: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\shell32.dll'.
17501eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\shell32.dll' [rescheduled]
17511eec.1f00: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'.
17521eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll' [rescheduled]
17531eec.1f00: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\win32u.dll'.
17541eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rescheduled]
17551eec.1f00: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\gdi32.dll'.
17561eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rescheduled]
17571eec.1f00: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\user32.dll'.
17581eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rescheduled]
17591eec.1f00: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll'.
17601eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rescheduled]
17611eec.1f00: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\combase.dll'.
17621eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rescheduled]
17631eec.1f00: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\gdi32full.dll'.
17641eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\gdi32full.dll' [rescheduled]
17651eec.1f00: Detected loader lock ownership: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume3\Windows\System32\glu32.dll'.
17661eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 22900 (was 22900) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\glu32.dll' [rescheduled]
17671eec.1f00: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\mpr.dll'.
17681eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\mpr.dll' [rescheduled]
17691eec.1f00: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\shell32.dll'.
17701eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\shell32.dll' [rescheduled]
17711eec.1f00: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'.
17721eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll' [rescheduled]
17731eec.1f00: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\win32u.dll'.
17741eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rescheduled]
17751eec.1f00: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\gdi32.dll'.
17761eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rescheduled]
17771eec.1f00: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\user32.dll'.
17781eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rescheduled]
17791eec.1f00: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll'.
17801eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rescheduled]
17811eec.1f00: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\combase.dll'.
17821eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rescheduled]
17831eec.1f00: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-localization-obsolete-l1-2-0) -> 0x0, fPresent=1
17841eec.1f00: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-obsolete-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
17851eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdcf8f0000 'api-ms-win-core-localization-obsolete-l1-2-0'
17861eec.1f00: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\gdi32full.dll'.
17871eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\gdi32full.dll' [rescheduled]
17881eec.1f00: Detected loader lock ownership: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume3\Windows\System32\glu32.dll'.
17891eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 22900 (was 22900) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\glu32.dll' [rescheduled]
17901eec.1f00: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\mpr.dll'.
17911eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\mpr.dll' [rescheduled]
17921eec.1f00: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\shell32.dll'.
17931eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\shell32.dll' [rescheduled]
17941eec.1f00: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'.
17951eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll' [rescheduled]
17961eec.1f00: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\win32u.dll'.
17971eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rescheduled]
17981eec.1f00: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\gdi32.dll'.
17991eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rescheduled]
18001eec.1f00: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\user32.dll'.
18011eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rescheduled]
18021eec.1f00: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll'.
18031eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rescheduled]
18041eec.1f00: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\combase.dll'.
18051eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rescheduled]
18061eec.1f00: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\gdi32full.dll'.
18071eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\gdi32full.dll' [rescheduled]
18081eec.1f00: Detected loader lock ownership: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume3\Windows\System32\glu32.dll'.
18091eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 22900 (was 22900) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\glu32.dll' [rescheduled]
18101eec.1f00: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\mpr.dll'.
18111eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\mpr.dll' [rescheduled]
18121eec.1f00: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\shell32.dll'.
18131eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\shell32.dll' [rescheduled]
18141eec.1f00: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'.
18151eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll' [rescheduled]
18161eec.1f00: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\win32u.dll'.
18171eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rescheduled]
18181eec.1f00: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\gdi32.dll'.
18191eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rescheduled]
18201eec.1f00: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\user32.dll'.
18211eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rescheduled]
18221eec.1f00: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll'.
18231eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rescheduled]
18241eec.1f00: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\combase.dll'.
18251eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rescheduled]
18261eec.1f00: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\imm32.dll'.
18271eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'user32.dll'.
18281eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #25 'win32u.dll'.
18291eec.1f00: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\imm32.dll)
18301eec.1f00: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\imm32.dll
18311eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
18321eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
18331eec.1f00: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\win32u.dll [redoing WinVerifyTrust]
18341eec.1f00: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\win32u.dll'.
18351eec.1f00: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume3\Windows\System32\win32u.dll
18361eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
18371eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
18381eec.1f00: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [redoing WinVerifyTrust]
18391eec.1f00: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\user32.dll'.
18401eec.1f00: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume3\Windows\System32\user32.dll
18411eec.1f00: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\IMM32.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
18421eec.1f00: supR3HardenedDllNotificationCallback: load 00007ffdd16a0000 LB 0x00030000 C:\WINDOWS\System32\IMM32.DLL [fFlags=0x0]
18431eec.1f00: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\imm32.dll [avoiding WinVerifyTrust]
18441eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdd16a0000 'C:\WINDOWS\system32\IMM32.DLL'
18451eec.1f00: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\imm32.dll'.
18461eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\imm32.dll' [rescheduled]
18471eec.1f00: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\gdi32full.dll'.
18481eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\gdi32full.dll' [rescheduled]
18491eec.1f00: Detected loader lock ownership: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume3\Windows\System32\glu32.dll'.
18501eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 22900 (was 22900) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\glu32.dll' [rescheduled]
18511eec.1f00: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\mpr.dll'.
18521eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\mpr.dll' [rescheduled]
18531eec.1f00: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\shell32.dll'.
18541eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\shell32.dll' [rescheduled]
18551eec.1f00: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'.
18561eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll' [rescheduled]
18571eec.1f00: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\win32u.dll'.
18581eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rescheduled]
18591eec.1f00: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\gdi32.dll'.
18601eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rescheduled]
18611eec.1f00: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\user32.dll'.
18621eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rescheduled]
18631eec.1f00: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll'.
18641eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rescheduled]
18651eec.1f00: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\combase.dll'.
18661eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rescheduled]
18671eec.1f00: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\imm32.dll'.
18681eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\imm32.dll' [rescheduled]
18691eec.1f00: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\gdi32full.dll'.
18701eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\gdi32full.dll' [rescheduled]
18711eec.1f00: Detected loader lock ownership: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume3\Windows\System32\glu32.dll'.
18721eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 22900 (was 22900) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\glu32.dll' [rescheduled]
18731eec.1f00: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\mpr.dll'.
18741eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\mpr.dll' [rescheduled]
18751eec.1f00: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\shell32.dll'.
18761eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\shell32.dll' [rescheduled]
18771eec.1f00: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'.
18781eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll' [rescheduled]
18791eec.1f00: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\win32u.dll'.
18801eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rescheduled]
18811eec.1f00: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\gdi32.dll'.
18821eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rescheduled]
18831eec.1f00: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\user32.dll'.
18841eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rescheduled]
18851eec.1f00: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll'.
18861eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rescheduled]
18871eec.1f00: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\combase.dll'.
18881eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rescheduled]
18891eec.1f00: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll
18901eec.1f00: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\ADVAPI32.DLL (Input=ADVAPI32.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
18911eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdd16d0000 'C:\WINDOWS\System32\ADVAPI32.DLL'
18921eec.1f00: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\imm32.dll'.
18931eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\imm32.dll' [rescheduled]
18941eec.1f00: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\gdi32full.dll'.
18951eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\gdi32full.dll' [rescheduled]
18961eec.1f00: Detected loader lock ownership: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume3\Windows\System32\glu32.dll'.
18971eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 22900 (was 22900) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\glu32.dll' [rescheduled]
18981eec.1f00: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\mpr.dll'.
18991eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\mpr.dll' [rescheduled]
19001eec.1f00: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\shell32.dll'.
19011eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\shell32.dll' [rescheduled]
19021eec.1f00: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'.
19031eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll' [rescheduled]
19041eec.1f00: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\win32u.dll'.
19051eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rescheduled]
19061eec.1f00: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\gdi32.dll'.
19071eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rescheduled]
19081eec.1f00: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\user32.dll'.
19091eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rescheduled]
19101eec.1f00: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll'.
19111eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rescheduled]
19121eec.1f00: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\combase.dll'.
19131eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rescheduled]
19141eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd55c80000 'C:\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll'
19151eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdce6a0000 'C:\WINDOWS\system32\rsaenh.dll'
19161eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdcf690000 'C:\WINDOWS\System32\crypt32.dll'
19171eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\imm32.dll'
19181eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdce6a0000 'C:\WINDOWS\system32\rsaenh.dll'
19191eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdcf690000 'C:\WINDOWS\System32\crypt32.dll'
19201eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\gdi32full.dll'
19211eec.1f00: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000518 pwszName=\Device\HarddiskVolume3\Windows\System32\glu32.dll
19221eec.1f00: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000010afe20
19231eec.1f00: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000010afe20
19241eec.1f00: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=8DD21BB0BC55257A0C778F7A2D24BA87D12879DB
19251eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdce6a0000 'C:\WINDOWS\system32\rsaenh.dll'
19261eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdcf690000 'C:\WINDOWS\System32\crypt32.dll'
19271eec.1f00: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0312~31bf3856ad364e35~amd64~~10.0.19041.2006.cat'; file='\Device\HarddiskVolume3\Windows\System32\glu32.dll'
19281eec.1f00: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
19291eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\glu32.dll'
19301eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdce6a0000 'C:\WINDOWS\system32\rsaenh.dll'
19311eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdcf690000 'C:\WINDOWS\System32\crypt32.dll'
19321eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\mpr.dll'
19331eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdce6a0000 'C:\WINDOWS\system32\rsaenh.dll'
19341eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdcf690000 'C:\WINDOWS\System32\crypt32.dll'
19351eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\shell32.dll'
19361eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdce6a0000 'C:\WINDOWS\system32\rsaenh.dll'
19371eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 24202) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'
19381eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdce6a0000 'C:\WINDOWS\system32\rsaenh.dll'
19391eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdcf690000 'C:\WINDOWS\System32\crypt32.dll'
19401eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\win32u.dll'
19411eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdce6a0000 'C:\WINDOWS\system32\rsaenh.dll'
19421eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdcf690000 'C:\WINDOWS\System32\crypt32.dll'
19431eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\gdi32.dll'
19441eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdce6a0000 'C:\WINDOWS\system32\rsaenh.dll'
19451eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdcf690000 'C:\WINDOWS\System32\crypt32.dll'
19461eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\user32.dll'
19471eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdce6a0000 'C:\WINDOWS\system32\rsaenh.dll'
19481eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdcf690000 'C:\WINDOWS\System32\crypt32.dll'
19491eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll'
19501eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdce6a0000 'C:\WINDOWS\system32\rsaenh.dll'
19511eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdcf690000 'C:\WINDOWS\System32\crypt32.dll'
19521eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\combase.dll'
19531eec.1f00: SUPR3HardenedMain: Calling TrustedMain (00007ffd55c816c0)...
19541eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #32 'combase.dll'.
19551eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #33 'msvcp_win.dll'.
19561eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #35 'wldp.dll'.
19571eec.1f00: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\windows.storage.dll)
19581eec.1f00: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\windows.storage.dll
19591eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
19601eec.1f00: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\wldp.dll)
19611eec.1f00: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\wldp.dll
19621eec.1f00: supR3HardenedDllNotificationCallback: load 00007ffdcf030000 LB 0x00030000 C:\WINDOWS\SYSTEM32\Wldp.dll [fFlags=0x0]
19631eec.1f00: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wldp.dll [avoiding WinVerifyTrust]
19641eec.1f00: supR3HardenedDllNotificationCallback: load 00007ffdcd6a0000 LB 0x00795000 C:\WINDOWS\SYSTEM32\windows.storage.dll [fFlags=0x0]
19651eec.1f00: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\windows.storage.dll [avoiding WinVerifyTrust]
19661eec.1f00: supR3HardenedDllNotificationCallback: load 00007ffdcffc0000 LB 0x000ad000 C:\WINDOWS\System32\SHCORE.dll [fFlags=0x0]
19671eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
19681eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #42 'combase.dll'.
19691eec.1f00: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\SHCore.dll)
19701eec.1f00: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\SHCore.dll
19711eec.1f00: supR3HardenedDllNotificationCallback: load 00007ffdd1420000 LB 0x00055000 C:\WINDOWS\System32\shlwapi.dll [fFlags=0x0]
19721eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcrt.dll'.
19731eec.1f00: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\shlwapi.dll)
19741eec.1f00: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\shlwapi.dll
19751eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
19761eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
19771eec.1f00: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll
19781eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
19791eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
19801eec.1f00: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\combase.dll
19811eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
19821eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
19831eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
19841eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
19851eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'wldp.dll'...
19861eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'wldp.dll' -> '\Device\HarddiskVolume3\Windows\System32\wldp.dll' [rcNtRedir=0xc0150008]
19871eec.1f00: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wldp.dll [lacks WinVerifyTrust]
19881eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
19891eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
19901eec.1f00: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll
19911eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
19921eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
19931eec.1f00: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\combase.dll
19941eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdce6a0000 'C:\WINDOWS\system32\rsaenh.dll'
19951eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdcf690000 'C:\WINDOWS\System32\crypt32.dll'
19961eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\shlwapi.dll'
19971eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdce6a0000 'C:\WINDOWS\system32\rsaenh.dll'
19981eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdcf690000 'C:\WINDOWS\System32\crypt32.dll'
19991eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\SHCore.dll'
20001eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdce6a0000 'C:\WINDOWS\system32\rsaenh.dll'
20011eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdcf690000 'C:\WINDOWS\System32\crypt32.dll'
20021eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\wldp.dll'
20031eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdce6a0000 'C:\WINDOWS\system32\rsaenh.dll'
20041eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdcf690000 'C:\WINDOWS\System32\crypt32.dll'
20051eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\windows.storage.dll'
20061eec.1f00: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\platforms\qwindows.dll: Signature #1/2: info status: 24202
20071eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdce6a0000 'C:\WINDOWS\system32\rsaenh.dll'
20081eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'gdi32.dll'.
20091eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'ole32.dll'.
20101eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'user32.dll'.
20111eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'imm32.dll'.
20121eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'winmm.dll'.
20131eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'oleaut32.dll'.
20141eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'shell32.dll'.
20151eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'advapi32.dll'.
20161eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'qt5guivbox.dll'.
20171eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'qt5corevbox.dll'.
20181eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'msvcr100.dll'.
20191eec.1f00: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\platforms\qwindows.dll) WinVerifyTrust
20201eec.1f00: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\platforms\qwindows.dll
20211eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
20221eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
20231eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
20241eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
20251eec.1f00: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll
20261eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
20271eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
20281eec.1f00: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll
20291eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
20301eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
20311eec.1f00: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll
20321eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
20331eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume3\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
20341eec.1f00: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
20351eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
20361eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
20371eec.1f00: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll
20381eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
20391eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume3\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008]
20401eec.1f00: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmm.dll
20411eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'imm32.dll'...
20421eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'imm32.dll' -> '\Device\HarddiskVolume3\Windows\System32\imm32.dll' [rcNtRedir=0xc0150008]
20431eec.1f00: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\imm32.dll
20441eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
20451eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
20461eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
20471eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
20481eec.1f00: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ole32.dll
20491eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
20501eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
20511eec.1f00: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\platforms\qwindows.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
20521eec.1f00: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\platforms\qwindows.dll
20531eec.1f00: supR3HardenedDllNotificationCallback: load 00007ffd54190000 LB 0x0012e000 C:\Program Files\Oracle\VirtualBox\platforms\qwindows.dll [fFlags=0x0]
20541eec.1f00: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\platforms\qwindows.dll
20551eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd54190000 'C:\Program Files\Oracle\VirtualBox\platforms\qwindows.dll'
20561eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'msvcrt.dll'.
20571eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'rpcrt4.dll'.
20581eec.1f00: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll)
20591eec.1f00: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll
20601eec.1f00: supR3HardenedDllNotificationCallback: load 00007ffdcde50000 LB 0x00012000 C:\WINDOWS\SYSTEM32\kernel.appcore.dll [fFlags=0x0]
20611eec.1f00: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll [avoiding WinVerifyTrust]
20621eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
20631eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
20641eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
20651eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
20661eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdce6a0000 'C:\WINDOWS\system32\rsaenh.dll'
20671eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdcf690000 'C:\WINDOWS\System32\crypt32.dll'
20681eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll'
20691eec.1f00: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000408 pwszName=\Device\HarddiskVolume3\Windows\System32\uxtheme.dll
20701eec.1f00: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000010afe20
20711eec.1f00: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000010afe20
20721eec.1f00: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=701BFCEE1A399A1718E6AD19A8B89B9E45D98837
20731eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdce6a0000 'C:\WINDOWS\system32\rsaenh.dll'
20741eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdcf690000 'C:\WINDOWS\System32\crypt32.dll'
20751eec.1f00: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package05113~31bf3856ad364e35~amd64~~10.0.19041.2006.cat'; file='\Device\HarddiskVolume3\Windows\System32\uxtheme.dll'
20761eec.1f00: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
20771eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
20781eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #33 'gdi32.dll'.
20791eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #34 'user32.dll'.
20801eec.1f00: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\uxtheme.dll) WinVerifyTrust
20811eec.1f00: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\uxtheme.dll
20821eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
20831eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
20841eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
20851eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
20861eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
20871eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
20881eec.1f00: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\uxtheme.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
20891eec.1f00: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\uxtheme.dll
20901eec.1f00: supR3HardenedDllNotificationCallback: load 00007ffdccba0000 LB 0x0009e000 C:\WINDOWS\system32\uxtheme.dll [fFlags=0x0]
20911eec.1f00: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\uxtheme.dll
20921eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdccba0000 'C:\WINDOWS\system32\uxtheme.dll'
20931eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdd1500000 'C:\WINDOWS\system32\user32.dll'
20941eec.1f00: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
20951eec.1f00: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\shell32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
20961eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdd0720000 'C:\WINDOWS\system32\shell32.dll'
20971eec.1f00: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\SHCore.dll
20981eec.1f00: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\SHCore.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
20991eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdcffc0000 'C:\WINDOWS\system32\SHCore.dll'
21001eec.1f00: supR3HardenedMonitor_LdrLoadDll: error opening 'C:\WINDOWS\system32\wintab32.dll': 0 (NtPath=\??\C:\WINDOWS\system32\wintab32.dll; Input=C:\WINDOWS\system32\wintab32.dll; rcNtGetDll=0x0
21011eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0xc0000034 'C:\WINDOWS\system32\wintab32.dll'
21021eec.1f00: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmm.dll
21031eec.1f00: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\winmm.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
21041eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdb5dc0000 'C:\WINDOWS\system32\winmm.dll'
21051eec.1f00: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmm.dll
21061eec.1f00: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\winmm.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
21071eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdb5dc0000 'C:\WINDOWS\system32\winmm.dll'
21081eec.1f00: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
21091eec.1f00: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\shell32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
21101eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdd0720000 'C:\WINDOWS\system32\shell32.dll'
21111eec.1f00: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\uxtheme.dll
21121eec.1f00: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\uxtheme.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
21131eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdccba0000 'C:\WINDOWS\system32\uxtheme.dll'
21141eec.1f00: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll
21151eec.1f00: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\advapi32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
21161eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdd16d0000 'C:\WINDOWS\system32\advapi32.dll'
21171eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdce6a0000 'C:\WINDOWS\system32\rsaenh.dll'
21181eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdcf690000 'C:\WINDOWS\System32\crypt32.dll'
21191eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #13 'rpcrt4.dll'.
21201eec.1f00: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\userenv.dll) WinVerifyTrust
21211eec.1f00: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\userenv.dll
21221eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
21231eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
21241eec.1f00: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\userenv.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
21251eec.1f00: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\userenv.dll
21261eec.1f00: supR3HardenedDllNotificationCallback: load 00007ffdcf4d0000 LB 0x0002e000 C:\WINDOWS\system32\userenv.dll [fFlags=0x0]
21271eec.1f00: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\userenv.dll
21281eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdcf4d0000 'C:\WINDOWS\system32\userenv.dll'
21291eec.1f00: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\kernel32.dll
21301eec.1f00: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\kernel32.dll (Input=kernel32, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
21311eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdd1940000 'C:\WINDOWS\System32\kernel32.dll'
21321eec.1f00: supR3HardenedDllNotificationCallback: load 00007ffdd00d0000 LB 0x000a9000 C:\WINDOWS\System32\clbcatq.dll [fFlags=0x0]
21331eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
21341eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #30 'rpcrt4.dll'.
21351eec.1f00: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\clbcatq.dll)
21361eec.1f00: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\clbcatq.dll
21371eec.1c0c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
21381eec.1c0c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
21391eec.1c0c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
21401eec.1c0c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
21411eec.1c0c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
21421eec.1c0c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
21431eec.1c0c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdce6a0000 'C:\WINDOWS\system32\rsaenh.dll'
21441eec.1c0c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdcf690000 'C:\WINDOWS\System32\crypt32.dll'
21451eec.1c0c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\clbcatq.dll'
21461eec.1c0c: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxC.dll: Signature #1/2: info status: 24202
21471eec.1c0c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdce6a0000 'C:\WINDOWS\system32\rsaenh.dll'
21481eec.1c0c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
21491eec.1c0c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp100.dll'.
21501eec.1c0c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxrt.dll'.
21511eec.1c0c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'advapi32.dll'.
21521eec.1c0c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'ole32.dll'.
21531eec.1c0c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'oleaut32.dll'.
21541eec.1c0c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxC.dll) WinVerifyTrust
21551eec.1c0c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxC.dll
21561eec.1c0c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
21571eec.1c0c: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
21581eec.1c0c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll
21591eec.1c0c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
21601eec.1c0c: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
21611eec.1c0c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ole32.dll
21621eec.1c0c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
21631eec.1c0c: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
21641eec.1c0c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll
21651eec.1c0c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
21661eec.1c0c: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
21671eec.1c0c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
21681eec.1c0c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
21691eec.1c0c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll
21701eec.1c0c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
21711eec.1c0c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
21721eec.1c0c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxC.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
21731eec.1c0c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxC.dll
21741eec.1c0c: supR3HardenedDllNotificationCallback: load 00007ffd44770000 LB 0x003c2000 C:\Program Files\Oracle\VirtualBox\VBoxC.dll [fFlags=0x0]
21751eec.1c0c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxC.dll
21761eec.1c0c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd44770000 'C:\Program Files\Oracle\VirtualBox\VBoxC.dll'
21771eec.1c0c: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxProxyStub.dll: Signature #1/2: info status: 24202
21781eec.1c0c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdce6a0000 'C:\WINDOWS\system32\rsaenh.dll'
21791eec.1c0c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
21801eec.1c0c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
21811eec.1c0c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'advapi32.dll'.
21821eec.1c0c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'shlwapi.dll'.
21831eec.1c0c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'ole32.dll'.
21841eec.1c0c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'oleaut32.dll'.
21851eec.1c0c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'rpcrt4.dll'.
21861eec.1c0c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxProxyStub.dll) WinVerifyTrust
21871eec.1c0c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxProxyStub.dll
21881eec.1c0c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
21891eec.1c0c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
21901eec.1c0c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
21911eec.1c0c: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
21921eec.1c0c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll
21931eec.1c0c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
21941eec.1c0c: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
21951eec.1c0c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ole32.dll
21961eec.1c0c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shlwapi.dll'...
21971eec.1c0c: supR3HardenedWinVerifyCacheProcessImportTodos: 'shlwapi.dll' -> '\Device\HarddiskVolume3\Windows\System32\shlwapi.dll' [rcNtRedir=0xc0150008]
21981eec.1c0c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shlwapi.dll
21991eec.1c0c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
22001eec.1c0c: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
22011eec.1c0c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll
22021eec.1c0c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
22031eec.1c0c: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
22041eec.1c0c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
22051eec.1c0c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
22061eec.1c0c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxProxyStub.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
22071eec.1c0c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxProxyStub.dll
22081eec.1c0c: supR3HardenedDllNotificationCallback: load 00007ffd53fb0000 LB 0x000ef000 C:\Program Files\Oracle\VirtualBox\VBoxProxyStub.dll [fFlags=0x0]
22091eec.1c0c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxProxyStub.dll
22101eec.1c0c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd53fb0000 'C:\Program Files\Oracle\VirtualBox\VBoxProxyStub.dll'
22111eec.1c0c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll
22121eec.1c0c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\oleaut32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
22131eec.1c0c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdd05f0000 'C:\Windows\System32\oleaut32.dll'
22141eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdcff10000 'C:\WINDOWS\system32\gdi32.dll'
22151eec.2768: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdce6a0000 'C:\WINDOWS\system32\rsaenh.dll'
22161eec.2768: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdce6a0000 'C:\WINDOWS\system32\rsaenh.dll'
22171eec.2768: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxPuelMainVM.dll: Signature #1/2: info status: 24202
22181eec.2768: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdce6a0000 'C:\WINDOWS\system32\rsaenh.dll'
22191eec.2768: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
22201eec.2768: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
22211eec.2768: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxPuelMainVM.dll) WinVerifyTrust
22221eec.2768: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxPuelMainVM.dll
22231eec.2768: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
22241eec.2768: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
22251eec.2768: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
22261eec.2768: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
22271eec.2768: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxPuelMainVM.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
22281eec.2768: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxPuelMainVM.dll
22291eec.2768: supR3HardenedDllNotificationCallback: load 00007ffdb4930000 LB 0x0000e000 C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxPuelMainVM.DLL [fFlags=0x0]
22301eec.2768: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxPuelMainVM.dll
22311eec.2768: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdb4930000 'C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxPuelMainVM.DLL'
22321eec.1f00: supR3HardenedDllNotificationCallback: load 00007ffdd1820000 LB 0x00115000 C:\WINDOWS\System32\MSCTF.dll [fFlags=0x0]
22331eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
22341eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'oleaut32.dll'.
22351eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #36 'user32.dll'.
22361eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #37 'gdi32.dll'.
22371eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #38 'imm32.dll'.
22381eec.1f00: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\msctf.dll)
22391eec.1f00: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\msctf.dll
22401eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'imm32.dll'...
22411eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'imm32.dll' -> '\Device\HarddiskVolume3\Windows\System32\imm32.dll' [rcNtRedir=0xc0150008]
22421eec.1f00: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\imm32.dll
22431eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
22441eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
22451eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
22461eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
22471eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
22481eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
22491eec.1f00: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll
22501eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
22511eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
22521eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdce6a0000 'C:\WINDOWS\system32\rsaenh.dll'
22531eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdcf690000 'C:\WINDOWS\System32\crypt32.dll'
22541eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\msctf.dll'
22551eec.1f00: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000000000009a8 pwszName=\Device\HarddiskVolume3\Windows\System32\DataExchange.dll
22561eec.1f00: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000010afe20
22571eec.1f00: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000010afe20
22581eec.1f00: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=F602E8855BCD942955FA9DBB13C4E4D44C41A311
22591eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdce6a0000 'C:\WINDOWS\system32\rsaenh.dll'
22601eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdcf690000 'C:\WINDOWS\System32\crypt32.dll'
22611eec.1f00: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0510~31bf3856ad364e35~amd64~~10.0.19041.1889.cat'; file='\Device\HarddiskVolume3\Windows\System32\DataExchange.dll'
22621eec.1f00: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
22631eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
22641eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #26 'd3d11.dll'.
22651eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #27 'dcomp.dll'.
22661eec.1f00: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\DataExchange.dll) WinVerifyTrust
22671eec.1f00: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\DataExchange.dll
22681eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'dcomp.dll'...
22691eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'dcomp.dll' -> '\Device\HarddiskVolume3\Windows\System32\dcomp.dll' [rcNtRedir=0xc0150008]
22701eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdce6a0000 'C:\WINDOWS\system32\rsaenh.dll'
22711eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdcf690000 'C:\WINDOWS\System32\crypt32.dll'
22721eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'win32u.dll'.
22731eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp_win.dll'.
22741eec.1f00: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\dcomp.dll) WinVerifyTrust
22751eec.1f00: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\dcomp.dll
22761eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'd3d11.dll'...
22771eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'd3d11.dll' -> '\Device\HarddiskVolume3\Windows\System32\d3d11.dll' [rcNtRedir=0xc0150008]
22781eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
22791eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
22801eec.1f00: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll
22811eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
22821eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
22831eec.1f00: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\win32u.dll
22841eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdce6a0000 'C:\WINDOWS\system32\rsaenh.dll'
22851eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdcf690000 'C:\WINDOWS\System32\crypt32.dll'
22861eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
22871eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #26 'dxgi.dll'.
22881eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #28 'win32u.dll'.
22891eec.1f00: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\d3d11.dll) WinVerifyTrust
22901eec.1f00: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\d3d11.dll
22911eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
22921eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
22931eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
22941eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
22951eec.1f00: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\win32u.dll
22961eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'dxgi.dll'...
22971eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'dxgi.dll' -> '\Device\HarddiskVolume3\Windows\System32\dxgi.dll' [rcNtRedir=0xc0150008]
22981eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdce6a0000 'C:\WINDOWS\system32\rsaenh.dll'
22991eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdcf690000 'C:\WINDOWS\System32\crypt32.dll'
23001eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
23011eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'win32u.dll'.
23021eec.1f00: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\dxgi.dll) WinVerifyTrust
23031eec.1f00: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\dxgi.dll
23041eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
23051eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
23061eec.1f00: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll
23071eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
23081eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
23091eec.1f00: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\win32u.dll
23101eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
23111eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
23121eec.1f00: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\dataexchange.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
23131eec.1f00: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\DataExchange.dll
23141eec.1f00: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\d3d11.dll
23151eec.1f00: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\dcomp.dll
23161eec.1f00: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\dxgi.dll
23171eec.1f00: supR3HardenedDllNotificationCallback: load 00007ffdcdec0000 LB 0x000f3000 C:\WINDOWS\system32\dxgi.dll [fFlags=0x0]
23181eec.1f00: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\dxgi.dll
23191eec.1f00: supR3HardenedDllNotificationCallback: load 00007ffdcb300000 LB 0x00263000 C:\WINDOWS\system32\d3d11.dll [fFlags=0x0]
23201eec.1f00: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\d3d11.dll
23211eec.1f00: supR3HardenedDllNotificationCallback: load 00007ffdcc680000 LB 0x001e4000 C:\WINDOWS\system32\dcomp.dll [fFlags=0x0]
23221eec.1f00: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\dcomp.dll
23231eec.1f00: supR3HardenedDllNotificationCallback: load 00007ffda2ef0000 LB 0x0003e000 C:\WINDOWS\system32\dataexchange.dll [fFlags=0x0]
23241eec.1f00: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\DataExchange.dll
23251eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdcff10000 'C:\WINDOWS\System32\gdi32.dll'
23261eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffda2ef0000 'C:\WINDOWS\system32\dataexchange.dll'
23271eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #30 'rpcrt4.dll'.
23281eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #43 'combase.dll'.
23291eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #45 'msvcp_win.dll'.
23301eec.1f00: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\twinapi.appcore.dll)
23311eec.1f00: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\twinapi.appcore.dll
23321eec.1f00: supR3HardenedDllNotificationCallback: load 00007ffdc7790000 LB 0x00200000 C:\WINDOWS\system32\twinapi.appcore.dll [fFlags=0x0]
23331eec.1f00: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\twinapi.appcore.dll [avoiding WinVerifyTrust]
23341eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
23351eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
23361eec.1f00: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll
23371eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
23381eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
23391eec.1f00: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\combase.dll
23401eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
23411eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
23421eec.1f00: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll
23431eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdce6a0000 'C:\WINDOWS\system32\rsaenh.dll'
23441eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdcf690000 'C:\WINDOWS\System32\crypt32.dll'
23451eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\twinapi.appcore.dll'
23461eec.1f00: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\SHCore.dll
23471eec.1f00: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\Shcore.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
23481eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdcffc0000 'C:\WINDOWS\system32\Shcore.dll'
23491eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
23501eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #15 'oleaut32.dll'.
23511eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #17 'rpcrt4.dll'.
23521eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #20 'coreuicomponents.dll'.
23531eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #21 'coremessaging.dll'.
23541eec.1f00: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\TextInputFramework.dll)
23551eec.1f00: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\TextInputFramework.dll
23561eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
23571eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #35 'coremessaging.dll'.
23581eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #40 'rpcrt4.dll'.
23591eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #48 'shcore.dll'.
23601eec.1f00: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\CoreUIComponents.dll)
23611eec.1f00: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\CoreUIComponents.dll
23621eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
23631eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #20 'ws2_32.dll'.
23641eec.1f00: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\CoreMessaging.dll)
23651eec.1f00: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\CoreMessaging.dll
23661eec.1f00: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\ntmarta.dll)
23671eec.1f00: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\ntmarta.dll
23681eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'combase.dll'.
23691eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #24 'rpcrt4.dll'.
23701eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #32 'bcryptprimitives.dll'.
23711eec.1f00: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\WinTypes.dll)
23721eec.1f00: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\WinTypes.dll
23731eec.1f00: supR3HardenedDllNotificationCallback: load 00007ffdce2d0000 LB 0x00033000 C:\WINDOWS\SYSTEM32\ntmarta.dll [fFlags=0x0]
23741eec.1f00: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ntmarta.dll [avoiding WinVerifyTrust]
23751eec.1f00: supR3HardenedDllNotificationCallback: load 00007ffdcc240000 LB 0x000f2000 C:\WINDOWS\System32\CoreMessaging.dll [fFlags=0x0]
23761eec.1f00: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\CoreMessaging.dll [avoiding WinVerifyTrust]
23771eec.1f00: supR3HardenedDllNotificationCallback: load 00007ffdcad40000 LB 0x00154000 C:\WINDOWS\SYSTEM32\wintypes.dll [fFlags=0x0]
23781eec.1f00: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\WinTypes.dll [avoiding WinVerifyTrust]
23791eec.1f00: supR3HardenedDllNotificationCallback: load 00007ffdcbeb0000 LB 0x0035e000 C:\WINDOWS\System32\CoreUIComponents.dll [fFlags=0x0]
23801eec.1f00: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\CoreUIComponents.dll [avoiding WinVerifyTrust]
23811eec.1f00: supR3HardenedDllNotificationCallback: load 00007ffdab0a0000 LB 0x000f9000 C:\WINDOWS\SYSTEM32\textinputframework.dll [fFlags=0x0]
23821eec.1f00: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\TextInputFramework.dll [avoiding WinVerifyTrust]
23831eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcryptprimitives.dll'...
23841eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcryptprimitives.dll' -> '\Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll' [rcNtRedir=0xc0150008]
23851eec.1f00: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll
23861eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
23871eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
23881eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
23891eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
23901eec.1f00: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\combase.dll
23911eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
23921eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
23931eec.1f00: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ws2_32.dll
23941eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
23951eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
23961eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shcore.dll'...
23971eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'shcore.dll' -> '\Device\HarddiskVolume3\Windows\System32\shcore.dll' [rcNtRedir=0xc0150008]
23981eec.1f00: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\SHCore.dll
23991eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
24001eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
24011eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'coremessaging.dll'...
24021eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'coremessaging.dll' -> '\Device\HarddiskVolume3\Windows\System32\coremessaging.dll' [rcNtRedir=0xc0150008]
24031eec.1f00: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\CoreMessaging.dll [lacks WinVerifyTrust]
24041eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
24051eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
24061eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'coremessaging.dll'...
24071eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'coremessaging.dll' -> '\Device\HarddiskVolume3\Windows\System32\coremessaging.dll' [rcNtRedir=0xc0150008]
24081eec.1f00: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\CoreMessaging.dll [lacks WinVerifyTrust]
24091eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'coreuicomponents.dll'...
24101eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'coreuicomponents.dll' -> '\Device\HarddiskVolume3\Windows\System32\coreuicomponents.dll' [rcNtRedir=0xc0150008]
24111eec.1f00: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\CoreUIComponents.dll [lacks WinVerifyTrust]
24121eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
24131eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
24141eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
24151eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
24161eec.1f00: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll
24171eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
24181eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
24191eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdce6a0000 'C:\WINDOWS\system32\rsaenh.dll'
24201eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdcf690000 'C:\WINDOWS\System32\crypt32.dll'
24211eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\WinTypes.dll'
24221eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdce6a0000 'C:\WINDOWS\system32\rsaenh.dll'
24231eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdcf690000 'C:\WINDOWS\System32\crypt32.dll'
24241eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\ntmarta.dll'
24251eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdce6a0000 'C:\WINDOWS\system32\rsaenh.dll'
24261eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdcf690000 'C:\WINDOWS\System32\crypt32.dll'
24271eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\CoreMessaging.dll'
24281eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdce6a0000 'C:\WINDOWS\system32\rsaenh.dll'
24291eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdcf690000 'C:\WINDOWS\System32\crypt32.dll'
24301eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\CoreUIComponents.dll'
24311eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdce6a0000 'C:\WINDOWS\system32\rsaenh.dll'
24321eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdcf690000 'C:\WINDOWS\System32\crypt32.dll'
24331eec.1f00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\TextInputFramework.dll'
24341eec.1f00: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(ext-ms-win-rtcore-ntuser-window-ext-l1-1-0.dll) -> 0x0, fPresent=1
24351eec.1f00: supR3HardenedMonitor_LdrLoadDll: pName=ext-ms-win-rtcore-ntuser-window-ext-l1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
24361eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdd1500000 'ext-ms-win-rtcore-ntuser-window-ext-l1-1-0.dll'
24371eec.1f00: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(ext-ms-win-rtcore-ntuser-integration-l1-1-0.dll) -> 0x0, fPresent=1
24381eec.1f00: supR3HardenedMonitor_LdrLoadDll: pName=ext-ms-win-rtcore-ntuser-integration-l1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
24391eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdd1500000 'ext-ms-win-rtcore-ntuser-integration-l1-1-0.dll'
24401eec.1f00: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-com-l1-1-0.dll) -> 0x0, fPresent=1
24411eec.1f00: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-com-l1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
24421eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdd1a00000 'api-ms-win-core-com-l1-1-0.dll'
24431eec.1f00: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msctf.dll
24441eec.1f00: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\MSCTF.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
24451eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdd1820000 'C:\WINDOWS\System32\MSCTF.dll'
24461eec.1f00: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ole32.dll
24471eec.1f00: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\ole32.dll (Input=ole32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
24481eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdd0fb0000 'C:\WINDOWS\System32\ole32.dll'
24491eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdd05f0000 'C:\WINDOWS\System32\OLEAUT32.dll'
24501eec.1f00: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000b34 pwszName=\Device\HarddiskVolume3\Windows\System32\wbem\wbemprox.dll
24511eec.1f00: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000010afe20
24521eec.1f00: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000010afe20
24531eec.1f00: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=D5E9B4B8E891F6D9AAF89D119CB8AAE1934ED673
24541eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdce6a0000 'C:\WINDOWS\system32\rsaenh.dll'
24551eec.1f00: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll
24561eec.1f00: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\crypt32.dll (Input=crypt32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
24571eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdcf690000 'C:\WINDOWS\System32\crypt32.dll'
24581eec.1f00: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package04~31bf3856ad364e35~amd64~~10.0.19041.2006.cat'; file='\Device\HarddiskVolume3\Windows\System32\wbem\wbemprox.dll'
24591eec.1f00: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
24601eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
24611eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'ws2_32.dll'.
24621eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #18 'wbemcomn.dll'.
24631eec.1f00: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\wbem\wbemprox.dll) WinVerifyTrust
24641eec.1f00: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\wbem\wbemprox.dll
24651eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'wbemcomn.dll'...
24661eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'wbemcomn.dll' -> '\Device\HarddiskVolume3\Windows\System32\wbemcomn.dll' [rcNtRedir=0xc0150008]
24671eec.1f00: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000b48 pwszName=\Device\HarddiskVolume3\Windows\System32\wbemcomn.dll
24681eec.1f00: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000010afe20
24691eec.1f00: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000010afe20
24701eec.1f00: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=B97C1D711C478066C1314800E4F6D26F93811194
24711eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdce6a0000 'C:\WINDOWS\system32\rsaenh.dll'
24721eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdcf690000 'C:\WINDOWS\System32\crypt32.dll'
24731eec.1f00: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package04~31bf3856ad364e35~amd64~~10.0.19041.2006.cat'; file='\Device\HarddiskVolume3\Windows\System32\wbemcomn.dll'
24741eec.1f00: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
24751eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
24761eec.1f00: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\wbemcomn.dll) WinVerifyTrust
24771eec.1f00: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\wbemcomn.dll
24781eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
24791eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
24801eec.1f00: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ws2_32.dll
24811eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
24821eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
24831eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
24841eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
24851eec.1f00: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\wbem\wbemprox.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
24861eec.1f00: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wbem\wbemprox.dll
24871eec.1f00: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wbemcomn.dll
24881eec.1f00: supR3HardenedDllNotificationCallback: load 00007ffdbf3a0000 LB 0x00090000 C:\WINDOWS\SYSTEM32\wbemcomn.dll [fFlags=0x0]
24891eec.1f00: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wbemcomn.dll
24901eec.1f00: supR3HardenedDllNotificationCallback: load 00007ffdbd5b0000 LB 0x00011000 C:\WINDOWS\system32\wbem\wbemprox.dll [fFlags=0x0]
24911eec.1f00: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wbem\wbemprox.dll
24921eec.1f00: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(API-MS-Win-Core-LocalRegistry-L1-1-0.dll) -> 0x0, fPresent=1
24931eec.1f00: supR3HardenedMonitor_LdrLoadDll: pName=API-MS-Win-Core-LocalRegistry-L1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
24941eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdcf8f0000 'API-MS-Win-Core-LocalRegistry-L1-1-0.dll'
24951eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdbd5b0000 'C:\WINDOWS\system32\wbem\wbemprox.dll'
24961eec.1f00: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000b94 pwszName=\Device\HarddiskVolume3\Windows\System32\wbem\wbemsvc.dll
24971eec.1f00: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000010afe20
24981eec.1f00: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000010afe20
24991eec.1f00: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=8CA332CD27CD01F33F85EB4BED516FAA617B555A
25001eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdce6a0000 'C:\WINDOWS\system32\rsaenh.dll'
25011eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdcf690000 'C:\WINDOWS\System32\crypt32.dll'
25021eec.1f00: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package04~31bf3856ad364e35~amd64~~10.0.19041.2006.cat'; file='\Device\HarddiskVolume3\Windows\System32\wbem\wbemsvc.dll'
25031eec.1f00: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
25041eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
25051eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'rpcrt4.dll'.
25061eec.1f00: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\wbem\wbemsvc.dll) WinVerifyTrust
25071eec.1f00: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\wbem\wbemsvc.dll
25081eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
25091eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
25101eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
25111eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
25121eec.1f00: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\wbem\wbemsvc.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
25131eec.1f00: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wbem\wbemsvc.dll
25141eec.1f00: supR3HardenedDllNotificationCallback: load 00007ffdbcd50000 LB 0x00014000 C:\WINDOWS\system32\wbem\wbemsvc.dll [fFlags=0x0]
25151eec.1f00: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wbem\wbemsvc.dll
25161eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdbcd50000 'C:\WINDOWS\system32\wbem\wbemsvc.dll'
25171eec.1f00: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-localization-l1-2-0.dll) -> 0x0, fPresent=1
25181eec.1f00: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-l1-2-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
25191eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdcf8f0000 'api-ms-win-core-localization-l1-2-0.dll'
25201eec.1f00: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-localization-obsolete-l1-1-0.dll) -> 0x0, fPresent=1
25211eec.1f00: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-obsolete-l1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
25221eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdcf8f0000 'api-ms-win-core-localization-obsolete-l1-1-0.dll'
25231eec.1f00: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000ba8 pwszName=\Device\HarddiskVolume3\Windows\System32\wbem\fastprox.dll
25241eec.1f00: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000010afe20
25251eec.1f00: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000010afe20
25261eec.1f00: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=184DC69A17259EC62BC6A74793DCE28D7CC5A1AC
25271eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdce6a0000 'C:\WINDOWS\system32\rsaenh.dll'
25281eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdcf690000 'C:\WINDOWS\System32\crypt32.dll'
25291eec.1f00: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package04~31bf3856ad364e35~amd64~~10.0.19041.2006.cat'; file='\Device\HarddiskVolume3\Windows\System32\wbem\fastprox.dll'
25301eec.1f00: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
25311eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
25321eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #20 'wbemcomn.dll'.
25331eec.1f00: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\wbem\fastprox.dll) WinVerifyTrust
25341eec.1f00: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\wbem\fastprox.dll
25351eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'wbemcomn.dll'...
25361eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'wbemcomn.dll' -> '\Device\HarddiskVolume3\Windows\System32\wbemcomn.dll' [rcNtRedir=0xc0150008]
25371eec.1f00: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wbemcomn.dll
25381eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
25391eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
25401eec.1f00: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\wbem\fastprox.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
25411eec.1f00: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wbem\fastprox.dll
25421eec.1f00: supR3HardenedDllNotificationCallback: load 00007ffdbcd70000 LB 0x0010b000 C:\WINDOWS\system32\wbem\fastprox.dll [fFlags=0x0]
25431eec.1f00: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wbem\fastprox.dll
25441eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdbcd70000 'C:\WINDOWS\system32\wbem\fastprox.dll'
25451eec.1f00: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000bb4 pwszName=\Device\HarddiskVolume3\Windows\System32\amsi.dll
25461eec.1f00: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000010afe20
25471eec.1f00: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000010afe20
25481eec.1f00: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=4E037358D3BFB2BDA56CED3A1B6A631D12D37E28
25491eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdce6a0000 'C:\WINDOWS\system32\rsaenh.dll'
25501eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdcf690000 'C:\WINDOWS\System32\crypt32.dll'
25511eec.1f00: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package05~31bf3856ad364e35~amd64~~10.0.19041.1889.cat'; file='\Device\HarddiskVolume3\Windows\System32\amsi.dll'
25521eec.1f00: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
25531eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
25541eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #14 'rpcrt4.dll'.
25551eec.1f00: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\amsi.dll) WinVerifyTrust
25561eec.1f00: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\amsi.dll
25571eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
25581eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
25591eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
25601eec.1f00: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
25611eec.1f00: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\amsi.dll (Input=amsi.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
25621eec.1f00: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\amsi.dll
25631eec.1f00: supR3HardenedDllNotificationCallback: load 00007ffdbc5a0000 LB 0x00020000 C:\WINDOWS\System32\amsi.dll [fFlags=0x0]
25641eec.1f00: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\amsi.dll
25651eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdbc5a0000 'C:\WINDOWS\System32\amsi.dll'
25661eec.1f00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdd16d0000 'C:\WINDOWS\System32\ADVAPI32.dll'
25671eec.267c: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxVMM.dll: Signature #1/2: info status: 24202
25681eec.267c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdce6a0000 'C:\WINDOWS\system32\rsaenh.dll'
25691eec.267c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
25701eec.267c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
25711eec.267c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxVMM.dll) WinVerifyTrust
25721eec.267c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxVMM.dll
25731eec.267c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
25741eec.267c: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
25751eec.267c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
25761eec.267c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
25771eec.267c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxVMM.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
25781eec.267c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxVMM.dll
25791eec.267c: supR3HardenedDllNotificationCallback: load 00007ffd529b0000 LB 0x0037e000 C:\Program Files\Oracle\VirtualBox\VBoxVMM.DLL [fFlags=0x0]
25801eec.267c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxVMM.dll
25811eec.267c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd529b0000 'C:\Program Files\Oracle\VirtualBox\VBoxVMM.DLL'
25821eec.29d0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdd0fb0000 'C:\WINDOWS\system32\ole32.dll'
25831eec.2990: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdd0fb0000 'C:\WINDOWS\system32\ole32.dll'
25841eec.2828: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdd0fb0000 'C:\WINDOWS\system32\ole32.dll'
25851eec.29d0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdce6a0000 'C:\WINDOWS\system32\rsaenh.dll'
25861eec.2738: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxSharedClipboard.dll: Signature #1/2: info status: 24202
25871eec.2738: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdce6a0000 'C:\WINDOWS\system32\rsaenh.dll'
25881eec.2738: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
25891eec.2738: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp100.dll'.
25901eec.2738: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxvmm.dll'.
25911eec.2738: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'vboxrt.dll'.
25921eec.2738: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'user32.dll'.
25931eec.2738: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxSharedClipboard.dll) WinVerifyTrust
25941eec.2738: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxSharedClipboard.dll
25951eec.2738: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
25961eec.2738: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
25971eec.2738: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll
25981eec.2738: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
25991eec.2738: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
26001eec.2738: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxvmm.dll'...
26011eec.2738: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxvmm.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxvmm.dll' [rcNtRedir=0xc0150008]
26021eec.2738: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxVMM.dll
26031eec.2738: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
26041eec.2738: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
26051eec.2738: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
26061eec.2738: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
26071eec.2738: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxSharedClipboard.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
26081eec.2738: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxSharedClipboard.dll
26091eec.2738: supR3HardenedDllNotificationCallback: load 00007ffdab740000 LB 0x00010000 C:\Program Files\Oracle\VirtualBox\VBoxSharedClipboard.DLL [fFlags=0x0]
26101eec.2738: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxSharedClipboard.dll
26111eec.2738: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdab740000 'C:\Program Files\Oracle\VirtualBox\VBoxSharedClipboard.DLL'
26121eec.2014: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxDragAndDropSvc.dll: Signature #1/2: info status: 24202
26131eec.2014: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdce6a0000 'C:\WINDOWS\system32\rsaenh.dll'
26141eec.2014: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
26151eec.2014: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp100.dll'.
26161eec.2014: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxrt.dll'.
26171eec.2014: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxDragAndDropSvc.dll) WinVerifyTrust
26181eec.2014: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxDragAndDropSvc.dll
26191eec.2014: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
26201eec.2014: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
26211eec.2014: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
26221eec.2014: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
26231eec.2014: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
26241eec.2014: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
26251eec.2014: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll
26261eec.2014: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxDragAndDropSvc.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
26271eec.2014: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxDragAndDropSvc.dll
26281eec.2014: supR3HardenedDllNotificationCallback: load 00007ffdaaf20000 LB 0x0000d000 C:\Program Files\Oracle\VirtualBox\VBoxDragAndDropSvc.DLL [fFlags=0x0]
26291eec.2014: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxDragAndDropSvc.dll
26301eec.2014: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdaaf20000 'C:\Program Files\Oracle\VirtualBox\VBoxDragAndDropSvc.DLL'
26311eec.29d0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
26321eec.29d0: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\Shell32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
26331eec.29d0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdd0720000 'C:\WINDOWS\system32\Shell32.dll'
26341eec.29d0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxVMM.dll
26351eec.29d0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxVMM.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
26361eec.29d0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd529b0000 'C:\Program Files\Oracle\VirtualBox\VBoxVMM.DLL'
26371eec.29d0: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.dll: Signature #1/2: info status: 24202
26381eec.29d0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdce6a0000 'C:\WINDOWS\system32\rsaenh.dll'
26391eec.29d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
26401eec.29d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
26411eec.29d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
26421eec.29d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'ole32.dll'.
26431eec.29d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'oleaut32.dll'.
26441eec.29d0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.dll) WinVerifyTrust
26451eec.29d0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.dll
26461eec.29d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
26471eec.29d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
26481eec.29d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
26491eec.29d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
26501eec.29d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
26511eec.29d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
26521eec.29d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
26531eec.29d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
26541eec.29d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
26551eec.29d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
26561eec.29d0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
26571eec.29d0: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.dll
26581eec.29d0: supR3HardenedDllNotificationCallback: load 00007ffd88c00000 LB 0x00041000 C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.DLL [fFlags=0x0]
26591eec.29d0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.dll
26601eec.29d0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd88c00000 'C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.DLL'
26611eec.29d0: supR3HardenedDllNotificationCallback: Unload 00007ffd88c00000 LB 0x00041000 C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.DLL [flags=0x0]
26621eec.29d0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdce6a0000 'C:\WINDOWS\system32\rsaenh.dll'
26631eec.29d0: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxDD.dll: Signature #1/2: info status: 24202
26641eec.29d0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdce6a0000 'C:\WINDOWS\system32\rsaenh.dll'
26651eec.29d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
26661eec.29d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxvmm.dll'.
26671eec.29d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxrt.dll'.
26681eec.29d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'vboxddu.dll'.
26691eec.29d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'vboxdd2.dll'.
26701eec.29d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'user32.dll'.
26711eec.29d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'setupapi.dll'.
26721eec.29d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'ws2_32.dll'.
26731eec.29d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'ole32.dll'.
26741eec.29d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'iphlpapi.dll'.
26751eec.29d0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxDD.dll) WinVerifyTrust
26761eec.29d0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxDD.dll
26771eec.29d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'iphlpapi.dll'...
26781eec.29d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'iphlpapi.dll' -> '\Device\HarddiskVolume3\Windows\System32\iphlpapi.dll' [rcNtRedir=0xc0150008]
26791eec.29d0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdce6a0000 'C:\WINDOWS\system32\rsaenh.dll'
26801eec.29d0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdcf690000 'C:\WINDOWS\System32\crypt32.dll'
26811eec.29d0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\IPHLPAPI.DLL) WinVerifyTrust
26821eec.29d0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\IPHLPAPI.DLL
26831eec.29d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
26841eec.29d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
26851eec.29d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
26861eec.29d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
26871eec.29d0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ws2_32.dll
26881eec.29d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'setupapi.dll'...
26891eec.29d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'setupapi.dll' -> '\Device\HarddiskVolume3\Windows\System32\setupapi.dll' [rcNtRedir=0xc0150008]
26901eec.29d0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdce6a0000 'C:\WINDOWS\system32\rsaenh.dll'
26911eec.29d0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdcf690000 'C:\WINDOWS\System32\crypt32.dll'
26921eec.29d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
26931eec.29d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #28 'rpcrt4.dll'.
26941eec.29d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #35 'cfgmgr32.dll'.
26951eec.29d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #41 'bcrypt.dll'.
26961eec.29d0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\setupapi.dll) WinVerifyTrust
26971eec.29d0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\setupapi.dll
26981eec.29d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
26991eec.29d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
27001eec.29d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxdd2.dll'...
27011eec.29d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxdd2.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxdd2.dll' [rcNtRedir=0xc0150008]
27021eec.29d0: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxDD2.dll: Signature #1/2: info status: 24202
27031eec.29d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcrypt.dll'...
27041eec.29d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcrypt.dll' -> '\Device\HarddiskVolume3\Windows\System32\bcrypt.dll' [rcNtRedir=0xc0150008]
27051eec.29d0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\bcrypt.dll
27061eec.29d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'cfgmgr32.dll'...
27071eec.29d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'cfgmgr32.dll' -> '\Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll' [rcNtRedir=0xc0150008]
27081eec.29d0: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll'.
27091eec.29d0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll)
27101eec.29d0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll
27111eec.29d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
27121eec.29d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
27131eec.29d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
27141eec.29d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
27151eec.29d0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdce6a0000 'C:\WINDOWS\system32\rsaenh.dll'
27161eec.29d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
27171eec.29d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
27181eec.29d0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxDD2.dll) WinVerifyTrust
27191eec.29d0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxDD2.dll
27201eec.29d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxddu.dll'...
27211eec.29d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxddu.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxddu.dll' [rcNtRedir=0xc0150008]
27221eec.29d0: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxDDU.dll: Signature #1/2: info status: 24202
27231eec.29d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
27241eec.29d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
27251eec.29d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
27261eec.29d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
27271eec.29d0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdce6a0000 'C:\WINDOWS\system32\rsaenh.dll'
27281eec.29d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
27291eec.29d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
27301eec.29d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
27311eec.29d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'setupapi.dll'.
27321eec.29d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'advapi32.dll'.
27331eec.29d0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxDDU.dll) WinVerifyTrust
27341eec.29d0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxDDU.dll
27351eec.29d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
27361eec.29d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
27371eec.29d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxvmm.dll'...
27381eec.29d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxvmm.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxvmm.dll' [rcNtRedir=0xc0150008]
27391eec.29d0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxVMM.dll
27401eec.29d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
27411eec.29d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
27421eec.29d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
27431eec.29d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
27441eec.29d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'setupapi.dll'...
27451eec.29d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'setupapi.dll' -> '\Device\HarddiskVolume3\Windows\System32\setupapi.dll' [rcNtRedir=0xc0150008]
27461eec.29d0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\setupapi.dll
27471eec.29d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
27481eec.29d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
27491eec.29d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
27501eec.29d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
27511eec.29d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
27521eec.29d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
27531eec.29d0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxDD.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
27541eec.29d0: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxDD.dll
27551eec.29d0: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxDDU.dll
27561eec.29d0: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxDD2.dll
27571eec.29d0: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\IPHLPAPI.DLL
27581eec.29d0: supR3HardenedDllNotificationCallback: load 00007ffdcfcd0000 LB 0x0004e000 C:\WINDOWS\System32\cfgmgr32.dll [fFlags=0x0]
27591eec.29d0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll [avoiding WinVerifyTrust]
27601eec.29d0: supR3HardenedDllNotificationCallback: load 00007ffdd0180000 LB 0x0046f000 C:\WINDOWS\System32\SETUPAPI.dll [fFlags=0x0]
27611eec.29d0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\setupapi.dll
27621eec.29d0: supR3HardenedDllNotificationCallback: load 00007ffd58770000 LB 0x00066000 C:\Program Files\Oracle\VirtualBox\VBoxDDU.dll [fFlags=0x0]
27631eec.29d0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxDDU.dll
27641eec.29d0: supR3HardenedDllNotificationCallback: load 00007ffd51740000 LB 0x0085c000 C:\Program Files\Oracle\VirtualBox\VBoxDD2.dll [fFlags=0x0]
27651eec.29d0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxDD2.dll
27661eec.29d0: supR3HardenedDllNotificationCallback: load 00007ffdcea30000 LB 0x0003b000 C:\WINDOWS\SYSTEM32\IPHLPAPI.DLL [fFlags=0x0]
27671eec.29d0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\IPHLPAPI.DLL
27681eec.29d0: supR3HardenedDllNotificationCallback: load 00007ffd51fa0000 LB 0x00a03000 C:\Program Files\Oracle\VirtualBox\VBoxDD.DLL [fFlags=0x0]
27691eec.29d0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxDD.dll
27701eec.29d0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd51fa0000 'C:\Program Files\Oracle\VirtualBox\VBoxDD.DLL'
27711eec.29d0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdce6a0000 'C:\WINDOWS\system32\rsaenh.dll'
27721eec.29d0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdcf690000 'C:\WINDOWS\System32\crypt32.dll'
27731eec.29d0: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll'
27741eec.29d0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdce6a0000 'C:\WINDOWS\system32\rsaenh.dll'
27751eec.29d0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.dll
27761eec.29d0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
27771eec.29d0: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.dll
27781eec.29d0: supR3HardenedDllNotificationCallback: load 00007ffd88c00000 LB 0x00041000 C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.DLL [fFlags=0x0]
27791eec.29d0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.dll
27801eec.29d0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd88c00000 'C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.DLL'
27811eec.29d0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdce6a0000 'C:\WINDOWS\system32\rsaenh.dll'
27821eec.29d0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxC.dll
27831eec.29d0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxC.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
27841eec.29d0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd44770000 'C:\Program Files\Oracle\VirtualBox\VBoxC.DLL'
27851eec.29d0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdce6a0000 'C:\WINDOWS\system32\rsaenh.dll'
27861eec.29d0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxDD2.dll
27871eec.29d0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxDD2.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
27881eec.29d0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd51740000 'C:\Program Files\Oracle\VirtualBox\VBoxDD2.DLL'
27891eec.29d0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdce6a0000 'C:\WINDOWS\system32\rsaenh.dll'
27901eec.29d0: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxEhciR3.dll: Signature #1/2: info status: 24202
27911eec.29d0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdce6a0000 'C:\WINDOWS\system32\rsaenh.dll'
27921eec.29d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
27931eec.29d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
27941eec.29d0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxEhciR3.dll) WinVerifyTrust
27951eec.29d0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxEhciR3.dll
27961eec.29d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
27971eec.29d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
27981eec.29d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
27991eec.29d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
28001eec.29d0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxEhciR3.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
28011eec.29d0: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxEhciR3.dll
28021eec.29d0: supR3HardenedDllNotificationCallback: load 00007ffd88be0000 LB 0x00018000 C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxEhciR3.DLL [fFlags=0x0]
28031eec.29d0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxEhciR3.dll
28041eec.29d0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd88be0000 'C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxEhciR3.DLL'
28051eec.29d0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdce6a0000 'C:\WINDOWS\system32\rsaenh.dll'
28061eec.29d0: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxNvmeR3.dll: Signature #1/2: info status: 24202
28071eec.29d0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdce6a0000 'C:\WINDOWS\system32\rsaenh.dll'
28081eec.29d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
28091eec.29d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
28101eec.29d0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxNvmeR3.dll) WinVerifyTrust
28111eec.29d0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxNvmeR3.dll
28121eec.29d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
28131eec.29d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
28141eec.29d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
28151eec.29d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
28161eec.29d0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxNvmeR3.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
28171eec.29d0: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxNvmeR3.dll
28181eec.29d0: supR3HardenedDllNotificationCallback: load 00007ffd88bc0000 LB 0x00012000 C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxNvmeR3.DLL [fFlags=0x0]
28191eec.29d0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxNvmeR3.dll
28201eec.29d0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd88bc0000 'C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxNvmeR3.DLL'
28211eec.29d0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdce6a0000 'C:\WINDOWS\system32\rsaenh.dll'
28221eec.29d0: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbCardReaderR3.dll: Signature #1/2: info status: 24202
28231eec.29d0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdce6a0000 'C:\WINDOWS\system32\rsaenh.dll'
28241eec.29d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
28251eec.29d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
28261eec.29d0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbCardReaderR3.dll) WinVerifyTrust
28271eec.29d0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbCardReaderR3.dll
28281eec.29d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
28291eec.29d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
28301eec.29d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
28311eec.29d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
28321eec.29d0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbCardReaderR3.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
28331eec.29d0: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbCardReaderR3.dll
28341eec.29d0: supR3HardenedDllNotificationCallback: load 00007ffd88ba0000 LB 0x00018000 C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbCardReaderR3.DLL [fFlags=0x0]
28351eec.29d0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbCardReaderR3.dll
28361eec.29d0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd88ba0000 'C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbCardReaderR3.DLL'
28371eec.29d0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdce6a0000 'C:\WINDOWS\system32\rsaenh.dll'
28381eec.29d0: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbWebcamR3.dll: Signature #1/2: info status: 24202
28391eec.29d0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdce6a0000 'C:\WINDOWS\system32\rsaenh.dll'
28401eec.29d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
28411eec.29d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
28421eec.29d0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbWebcamR3.dll) WinVerifyTrust
28431eec.29d0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbWebcamR3.dll
28441eec.29d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
28451eec.29d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
28461eec.29d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
28471eec.29d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
28481eec.29d0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbWebcamR3.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
28491eec.29d0: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbWebcamR3.dll
28501eec.29d0: supR3HardenedDllNotificationCallback: load 00007ffd88b80000 LB 0x00019000 C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbWebcamR3.DLL [fFlags=0x0]
28511eec.29d0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbWebcamR3.dll
28521eec.29d0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd88b80000 'C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbWebcamR3.DLL'
28531eec.29d0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdce6a0000 'C:\WINDOWS\system32\rsaenh.dll'
28541eec.2a98: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxSharedFolders.dll: Signature #1/2: info status: 24202
28551eec.2a98: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdce6a0000 'C:\WINDOWS\system32\rsaenh.dll'
28561eec.2a98: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
28571eec.2a98: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxvmm.dll'.
28581eec.2a98: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxrt.dll'.
28591eec.2a98: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxSharedFolders.dll) WinVerifyTrust
28601eec.2a98: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxSharedFolders.dll
28611eec.2a98: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
28621eec.2a98: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
28631eec.2a98: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxvmm.dll'...
28641eec.2a98: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxvmm.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxvmm.dll' [rcNtRedir=0xc0150008]
28651eec.2a98: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxVMM.dll
28661eec.2a98: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
28671eec.2a98: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
28681eec.2a98: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxSharedFolders.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
28691eec.2a98: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxSharedFolders.dll
28701eec.2a98: supR3HardenedDllNotificationCallback: load 00007ffd88b60000 LB 0x00014000 C:\Program Files\Oracle\VirtualBox\VBoxSharedFolders.DLL [fFlags=0x0]
28711eec.2a98: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxSharedFolders.dll
28721eec.2a98: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd88b60000 'C:\Program Files\Oracle\VirtualBox\VBoxSharedFolders.DLL'
28731eec.2a44: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxGuestControlSvc.dll: Signature #1/2: info status: 24202
28741eec.2a44: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdce6a0000 'C:\WINDOWS\system32\rsaenh.dll'
28751eec.2a44: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
28761eec.2a44: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp100.dll'.
28771eec.2a44: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxvmm.dll'.
28781eec.2a44: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'vboxrt.dll'.
28791eec.2a44: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxGuestControlSvc.dll) WinVerifyTrust
28801eec.2a44: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxGuestControlSvc.dll
28811eec.2a44: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
28821eec.2a44: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
28831eec.2a44: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxvmm.dll'...
28841eec.2a44: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxvmm.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxvmm.dll' [rcNtRedir=0xc0150008]
28851eec.2a44: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxVMM.dll
28861eec.2a44: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
28871eec.2a44: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
28881eec.2a44: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
28891eec.2a44: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
28901eec.2a44: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxGuestControlSvc.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
28911eec.2a44: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxGuestControlSvc.dll
28921eec.2a44: supR3HardenedDllNotificationCallback: load 00007ffda2e80000 LB 0x0000c000 C:\Program Files\Oracle\VirtualBox\VBoxGuestControlSvc.DLL [fFlags=0x0]
28931eec.2a44: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxGuestControlSvc.dll
28941eec.2a44: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffda2e80000 'C:\Program Files\Oracle\VirtualBox\VBoxGuestControlSvc.DLL'
28951eec.29c0: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxGuestPropSvc.dll: Signature #1/2: info status: 24202
28961eec.29c0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdce6a0000 'C:\WINDOWS\system32\rsaenh.dll'
28971eec.29c0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
28981eec.29c0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp100.dll'.
28991eec.29c0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxrt.dll'.
29001eec.29c0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxGuestPropSvc.dll) WinVerifyTrust
29011eec.29c0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxGuestPropSvc.dll
29021eec.29c0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
29031eec.29c0: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
29041eec.29c0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
29051eec.29c0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
29061eec.29c0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
29071eec.29c0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
29081eec.29c0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxGuestPropSvc.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
29091eec.29c0: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxGuestPropSvc.dll
29101eec.29c0: supR3HardenedDllNotificationCallback: load 00007ffda10c0000 LB 0x0000d000 C:\Program Files\Oracle\VirtualBox\VBoxGuestPropSvc.DLL [fFlags=0x0]
29111eec.29c0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxGuestPropSvc.dll
29121eec.29c0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffda10c0000 'C:\Program Files\Oracle\VirtualBox\VBoxGuestPropSvc.DLL'
29131eec.29d0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdce6a0000 'C:\WINDOWS\system32\rsaenh.dll'
29141eec.29d0: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VDPluginCrypt.dll: Signature #1/2: info status: 24202
29151eec.29d0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdce6a0000 'C:\WINDOWS\system32\rsaenh.dll'
29161eec.29d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
29171eec.29d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
29181eec.29d0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VDPluginCrypt.dll) WinVerifyTrust
29191eec.29d0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VDPluginCrypt.dll
29201eec.29d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
29211eec.29d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
29221eec.29d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
29231eec.29d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
29241eec.29d0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VDPluginCrypt.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
29251eec.29d0: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VDPluginCrypt.dll
29261eec.29d0: supR3HardenedDllNotificationCallback: load 00007ffd6f110000 LB 0x0000a000 C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VDPluginCrypt.DLL [fFlags=0x0]
29271eec.29d0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VDPluginCrypt.dll
29281eec.29d0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffd6f110000 'C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VDPluginCrypt.DLL'
29291eec.29d0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\IPHLPAPI.DLL
29301eec.29d0: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\Iphlpapi.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
29311eec.29d0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdcea30000 'C:\WINDOWS\system32\Iphlpapi.dll'
29321eec.29d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'rpcrt4.dll'.
29331eec.29d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'nsi.dll'.
29341eec.29d0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\winnsi.dll)
29351eec.29d0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\winnsi.dll
29361eec.29d0: supR3HardenedDllNotificationCallback: load 00007ffdd0e70000 LB 0x00008000 C:\WINDOWS\System32\NSI.dll [fFlags=0x0]
29371eec.29d0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\nsi.dll)
29381eec.29d0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\nsi.dll
29391eec.29d0: supR3HardenedDllNotificationCallback: load 00007ffdc7ed0000 LB 0x0000b000 C:\WINDOWS\SYSTEM32\WINNSI.DLL [fFlags=0x0]
29401eec.29d0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winnsi.dll [avoiding WinVerifyTrust]
29411eec.29d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'rpcrt4.dll'.
29421eec.29d0: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\dhcpcsvc6.dll)
29431eec.29d0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\dhcpcsvc6.dll
29441eec.29d0: supR3HardenedDllNotificationCallback: load 00007ffdc7e90000 LB 0x00017000 C:\WINDOWS\SYSTEM32\dhcpcsvc6.DLL [fFlags=0x0]
29451eec.29d0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\dhcpcsvc6.dll [avoiding WinVerifyTrust]
29461eec.29d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'rpcrt4.dll'.
29471eec.29d0: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\dhcpcsvc.dll)
29481eec.29d0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\dhcpcsvc.dll
29491eec.29d0: supR3HardenedDllNotificationCallback: load 00007ffdc73e0000 LB 0x0001d000 C:\WINDOWS\SYSTEM32\dhcpcsvc.DLL [fFlags=0x0]
29501eec.29d0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\dhcpcsvc.dll [avoiding WinVerifyTrust]
29511eec.29d0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\dnsapi.dll)
29521eec.29d0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\dnsapi.dll
29531eec.29d0: supR3HardenedDllNotificationCallback: load 00007ffdcea70000 LB 0x000ca000 C:\WINDOWS\SYSTEM32\DNSAPI.dll [fFlags=0x0]
29541eec.29d0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\dnsapi.dll [avoiding WinVerifyTrust]
29551eec.29d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
29561eec.29d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
29571eec.29d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
29581eec.29d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
29591eec.29d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'nsi.dll'...
29601eec.29d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'nsi.dll' -> '\Device\HarddiskVolume3\Windows\System32\nsi.dll' [rcNtRedir=0xc0150008]
29611eec.29d0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\nsi.dll [lacks WinVerifyTrust]
29621eec.29d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
29631eec.29d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
29641eec.29d0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdce6a0000 'C:\WINDOWS\system32\rsaenh.dll'
29651eec.29d0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdcf690000 'C:\WINDOWS\System32\crypt32.dll'
29661eec.29d0: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\dnsapi.dll'
29671eec.29d0: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000fd8 pwszName=\Device\HarddiskVolume3\Windows\System32\dhcpcsvc.dll
29681eec.29d0: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000010afe20
29691eec.29d0: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000010afe20
29701eec.29d0: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=B02354978604D55C52F44B6BA54FB45525EF8F2F
29711eec.29d0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdce6a0000 'C:\WINDOWS\system32\rsaenh.dll'
29721eec.29d0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdcf690000 'C:\WINDOWS\System32\crypt32.dll'
29731eec.29d0: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0516~31bf3856ad364e35~amd64~~10.0.19041.2006.cat'; file='\Device\HarddiskVolume3\Windows\System32\dhcpcsvc.dll'
29741eec.29d0: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
29751eec.29d0: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\dhcpcsvc.dll'
29761eec.29d0: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000e54 pwszName=\Device\HarddiskVolume3\Windows\System32\dhcpcsvc6.dll
29771eec.29d0: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000010afe20
29781eec.29d0: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000010afe20
29791eec.29d0: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=16F93264539A7475C55C2AD42B5E0949F49DAF16
29801eec.29d0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdce6a0000 'C:\WINDOWS\system32\rsaenh.dll'
29811eec.29d0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdcf690000 'C:\WINDOWS\System32\crypt32.dll'
29821eec.29d0: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0516~31bf3856ad364e35~amd64~~10.0.19041.2006.cat'; file='\Device\HarddiskVolume3\Windows\System32\dhcpcsvc6.dll'
29831eec.29d0: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
29841eec.29d0: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\dhcpcsvc6.dll'
29851eec.29d0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdce6a0000 'C:\WINDOWS\system32\rsaenh.dll'
29861eec.29d0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdcf690000 'C:\WINDOWS\System32\crypt32.dll'
29871eec.29d0: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\nsi.dll'
29881eec.29d0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdce6a0000 'C:\WINDOWS\system32\rsaenh.dll'
29891eec.29d0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdcf690000 'C:\WINDOWS\System32\crypt32.dll'
29901eec.29d0: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\winnsi.dll'
29911eec.29d0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdce6a0000 'C:\WINDOWS\system32\rsaenh.dll'
29921eec.29d0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdcf690000 'C:\WINDOWS\System32\crypt32.dll'
29931eec.29d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcp_win.dll'.
29941eec.29d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #16 'rpcrt4.dll'.
29951eec.29d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #28 'devobj.dll'.
29961eec.29d0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\MMDevAPI.dll) WinVerifyTrust
29971eec.29d0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\MMDevAPI.dll
29981eec.29d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'devobj.dll'...
29991eec.29d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'devobj.dll' -> '\Device\HarddiskVolume3\Windows\System32\devobj.dll' [rcNtRedir=0xc0150008]
30001eec.29d0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdce6a0000 'C:\WINDOWS\system32\rsaenh.dll'
30011eec.29d0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdcf690000 'C:\WINDOWS\System32\crypt32.dll'
30021eec.29d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #18 'cfgmgr32.dll'.
30031eec.29d0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\devobj.dll) WinVerifyTrust
30041eec.29d0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\devobj.dll
30051eec.29d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
30061eec.29d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
30071eec.29d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
30081eec.29d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
30091eec.29d0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll
30101eec.29d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'cfgmgr32.dll'...
30111eec.29d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'cfgmgr32.dll' -> '\Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll' [rcNtRedir=0xc0150008]
30121eec.29d0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll
30131eec.29d0: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\MMDevApi.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
30141eec.29d0: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\MMDevAPI.dll
30151eec.29d0: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\devobj.dll
30161eec.29d0: supR3HardenedDllNotificationCallback: load 00007ffdcf380000 LB 0x0002c000 C:\WINDOWS\System32\DEVOBJ.dll [fFlags=0x0]
30171eec.29d0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\devobj.dll
30181eec.29d0: supR3HardenedDllNotificationCallback: load 00007ffdc8260000 LB 0x00085000 C:\WINDOWS\System32\MMDevApi.dll [fFlags=0x0]
30191eec.29d0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\MMDevAPI.dll
30201eec.29d0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdc8260000 'C:\WINDOWS\System32\MMDevApi.dll'
30211eec.29d0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\MMDevAPI.dll
30221eec.29d0: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\MMDEVAPI.DLL (Input=MMDEVAPI.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
30231eec.29d0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdc8260000 'C:\WINDOWS\System32\MMDEVAPI.DLL'
30241eec.2a5c: '\Device\HarddiskVolume3\Windows\System32\tzres.dll' has no imports
30251eec.2a5c: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\tzres.dll)
30261eec.2a5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\tzres.dll
30271eec.2a5c: supR3HardenedMonitor_NtCreateSection: NtMapViewOfSection failed on 00000000000011d8 (hFile=0000000000000aa0) with 0xc0000022 -> STATUS_TRUST_FAILURE
30281eec.2a5c: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\tzres.dll [avoiding WinVerifyTrust]
30291eec.2a5c: supR3HardenedMonitor_NtCreateSection: NtMapViewOfSection failed on 0000000000000aa0 (hFile=00000000000011d8) with 0xc0000022 -> STATUS_TRUST_FAILURE
30301eec.2a5c: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000000000011a4 pwszName=\Device\HarddiskVolume3\Windows\System32\tzres.dll
30311eec.2a5c: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000010afe20
30321eec.2a5c: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000010afe20
30331eec.2a5c: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=C60D23108187B637B3516BEB4EFF40A2CC4F0ADF
30341eec.2a5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdce6a0000 'C:\WINDOWS\system32\rsaenh.dll'
30351eec.2a5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdcf690000 'C:\WINDOWS\System32\crypt32.dll'
30361eec.2a5c: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0516~31bf3856ad364e35~amd64~~10.0.19041.2006.cat'; file='\Device\HarddiskVolume3\Windows\System32\tzres.dll'
30371eec.2a5c: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
30381eec.2a5c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\tzres.dll'
30391eec.2a5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdce6a0000 'C:\WINDOWS\system32\rsaenh.dll'
30401eec.2a5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdcf690000 'C:\WINDOWS\System32\crypt32.dll'
30411eec.2a5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'ws2_32.dll'.
30421eec.2a5c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #21 'rpcrt4.dll'.
30431eec.2a5c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\mswsock.dll) WinVerifyTrust
30441eec.2a5c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\mswsock.dll
30451eec.2a5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
30461eec.2a5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
30471eec.2a5c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
30481eec.2a5c: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
30491eec.2a5c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ws2_32.dll
30501eec.2a5c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\mswsock.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
30511eec.2a5c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\mswsock.dll
30521eec.2a5c: supR3HardenedDllNotificationCallback: load 00007ffdced90000 LB 0x0006a000 C:\WINDOWS\system32\mswsock.dll [fFlags=0x0]
30531eec.2a5c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\mswsock.dll
30541eec.2a5c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdced90000 'C:\WINDOWS\system32\mswsock.dll'
30551eec.2a00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdce6a0000 'C:\WINDOWS\system32\rsaenh.dll'
30561eec.2a00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdcf690000 'C:\WINDOWS\System32\crypt32.dll'
30571eec.2a00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcp_win.dll'.
30581eec.2a00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'rpcrt4.dll'.
30591eec.2a00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'oleaut32.dll'.
30601eec.2a00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #29 'mmdevapi.dll'.
30611eec.2a00: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\AudioSes.dll) WinVerifyTrust
30621eec.2a00: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\AudioSes.dll
30631eec.2a00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mmdevapi.dll'...
30641eec.2a00: supR3HardenedWinVerifyCacheProcessImportTodos: 'mmdevapi.dll' -> '\Device\HarddiskVolume3\Windows\System32\mmdevapi.dll' [rcNtRedir=0xc0150008]
30651eec.2a00: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\MMDevAPI.dll
30661eec.2a00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
30671eec.2a00: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
30681eec.2a00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
30691eec.2a00: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
30701eec.2a00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
30711eec.2a00: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
30721eec.2a00: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll
30731eec.2a00: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\AUDIOSES.DLL (Input=AUDIOSES.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
30741eec.2a00: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\AudioSes.dll
30751eec.2a00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'rpcrt4.dll'.
30761eec.2a00: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\powrprof.dll)
30771eec.2a00: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\powrprof.dll
30781eec.2a00: supR3HardenedDllNotificationCallback: load 00007ffdceb50000 LB 0x0004b000 C:\WINDOWS\SYSTEM32\powrprof.dll [fFlags=0x0]
30791eec.2a00: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\powrprof.dll [avoiding WinVerifyTrust]
30801eec.2a00: supR3HardenedDllNotificationCallback: load 00007ffdc84f0000 LB 0x00182000 C:\WINDOWS\System32\AUDIOSES.DLL [fFlags=0x0]
30811eec.2a00: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\AudioSes.dll
30821eec.2a00: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\umpdc.dll)
30831eec.2a00: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\umpdc.dll
30841eec.2a00: supR3HardenedDllNotificationCallback: load 00007ffdcea10000 LB 0x00012000 C:\WINDOWS\SYSTEM32\UMPDC.dll [fFlags=0x0]
30851eec.2a00: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\umpdc.dll [avoiding WinVerifyTrust]
30861eec.2a00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdc84f0000 'C:\WINDOWS\System32\AUDIOSES.DLL'
30871eec.2a00: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
30881eec.2a00: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
30891eec.2a00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdce6a0000 'C:\WINDOWS\system32\rsaenh.dll'
30901eec.2a00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdcf690000 'C:\WINDOWS\System32\crypt32.dll'
30911eec.2a00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\umpdc.dll'
30921eec.2a00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdce6a0000 'C:\WINDOWS\system32\rsaenh.dll'
30931eec.2a00: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdcf690000 'C:\WINDOWS\System32\crypt32.dll'
30941eec.2a00: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\powrprof.dll'
30951eec.2738: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffdd1500000 'C:\WINDOWS\system32\User32.dll'
30961eec.29c0: supR3HardenedDllNotificationCallback: Unload 00007ffda10c0000 LB 0x0000d000 C:\Program Files\Oracle\VirtualBox\VBoxGuestPropSvc.DLL [flags=0x0]
30971eec.2a44: supR3HardenedDllNotificationCallback: Unload 00007ffda2e80000 LB 0x0000c000 C:\Program Files\Oracle\VirtualBox\VBoxGuestControlSvc.DLL [flags=0x0]
30981eec.2a98: supR3HardenedDllNotificationCallback: Unload 00007ffd88b60000 LB 0x00014000 C:\Program Files\Oracle\VirtualBox\VBoxSharedFolders.DLL [flags=0x0]
30991eec.2014: supR3HardenedDllNotificationCallback: Unload 00007ffdaaf20000 LB 0x0000d000 C:\Program Files\Oracle\VirtualBox\VBoxDragAndDropSvc.DLL [flags=0x0]
31001eec.2738: supR3HardenedDllNotificationCallback: Unload 00007ffdab740000 LB 0x00010000 C:\Program Files\Oracle\VirtualBox\VBoxSharedClipboard.DLL [flags=0x0]
31011eec.29d0: supR3HardenedDllNotificationCallback: Unload 00007ffd88b80000 LB 0x00019000 C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbWebcamR3.DLL [flags=0x0]
31021eec.29d0: supR3HardenedDllNotificationCallback: Unload 00007ffd88ba0000 LB 0x00018000 C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbCardReaderR3.DLL [flags=0x0]
31031eec.29d0: supR3HardenedDllNotificationCallback: Unload 00007ffd88bc0000 LB 0x00012000 C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxNvmeR3.DLL [flags=0x0]
31041eec.29d0: supR3HardenedDllNotificationCallback: Unload 00007ffd88be0000 LB 0x00018000 C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxEhciR3.DLL [flags=0x0]
31051eec.29d0: supR3HardenedDllNotificationCallback: Unload 00007ffd88c00000 LB 0x00041000 C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.DLL [flags=0x0]
31061eec.29d0: supR3HardenedDllNotificationCallback: Unload 00007ffd51fa0000 LB 0x00a03000 C:\Program Files\Oracle\VirtualBox\VBoxDD.DLL [flags=0x0]
31071eec.29d0: supR3HardenedDllNotificationCallback: Unload 00007ffd58770000 LB 0x00066000 C:\Program Files\Oracle\VirtualBox\VBoxDDU.dll [flags=0x0]
31081eec.29d0: supR3HardenedDllNotificationCallback: Unload 00007ffd51740000 LB 0x0085c000 C:\Program Files\Oracle\VirtualBox\VBoxDD2.dll [flags=0x0]
31091eec.29d0: supR3HardenedDllNotificationCallback: Unload 00007ffdd0180000 LB 0x0046f000 C:\WINDOWS\System32\SETUPAPI.dll [flags=0x0]
31101eec.1f00: supR3HardenedDllNotificationCallback: Unload 00007ffdb4930000 LB 0x0000e000 C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxPuelMainVM.DLL [flags=0x0]
31111eec.1f00: supR3HardenedDllNotificationCallback: Unload 00007ffdbcd50000 LB 0x00014000 C:\WINDOWS\system32\wbem\wbemsvc.dll [flags=0x0]
31121eec.1f00: supR3HardenedDllNotificationCallback: Unload 00007ffdbcd70000 LB 0x0010b000 C:\WINDOWS\system32\wbem\fastprox.dll [flags=0x0]
31131eec.1f00: supR3HardenedDllNotificationCallback: Unload 00007ffdbd5b0000 LB 0x00011000 C:\WINDOWS\system32\wbem\wbemprox.dll [flags=0x0]
31141eec.1f00: supR3HardenedDllNotificationCallback: Unload 00007ffdbf3a0000 LB 0x00090000 C:\WINDOWS\SYSTEM32\wbemcomn.dll [flags=0x0]
31151eec.1f00: supR3HardenedDllNotificationCallback: Unload 00007ffda2ef0000 LB 0x0003e000 C:\WINDOWS\system32\dataexchange.dll [flags=0x0]
31161eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcp_win.dll'.
31171eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #14 'rpcrt4.dll'.
31181eec.1f00: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #28 'win32u.dll'.
31191eec.1f00: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\DXCore.dll)
31201eec.1f00: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\DXCore.dll
31211eec.1f00: supR3HardenedDllNotificationCallback: load 00007ffdc3aa0000 LB 0x0003b000 C:\WINDOWS\SYSTEM32\dxcore.dll [fFlags=0x0]
31221eec.1f00: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\DXCore.dll [avoiding WinVerifyTrust]
31231eec.1f00: supR3HardenedDllNotificationCallback: Unload 00007ffdcb300000 LB 0x00263000 C:\WINDOWS\system32\d3d11.dll [flags=0x0]
31241eec.1f00: supR3HardenedDllNotificationCallback: Unload 00007ffdcdec0000 LB 0x000f3000 C:\WINDOWS\system32\dxgi.dll [flags=0x0]
31251eec.1f00: supR3HardenedDllNotificationCallback: Unload 00007ffdcc680000 LB 0x001e4000 C:\WINDOWS\system32\dcomp.dll [flags=0x0]
31261eec.1f00: supR3HardenedDllNotificationCallback: Unload 00007ffdc7790000 LB 0x00200000 C:\WINDOWS\system32\twinapi.appcore.dll [flags=0x0]
31271eec.1f00: supR3HardenedDllNotificationCallback: Unload 00007ffd53fb0000 LB 0x000ef000 C:\Program Files\Oracle\VirtualBox\VBoxProxyStub.dll [flags=0x0]
31281eec.1f00: supR3HardenedDllNotificationCallback: Unload 00007ffd44770000 LB 0x003c2000 C:\Program Files\Oracle\VirtualBox\VBoxC.dll [flags=0x0]
31291eec.1f00: Terminating the normal way: rcExit=0
31301848.2a34: supR3HardNtChildWaitFor[2]: Quitting: ExitCode=0x0 (rcNtWait=0x0, rcNt1=0x0, rcNt2=0x103, rcNt3=0x103, 2014579 ms, the end);
3131364.7c8: supR3HardNtChildWaitFor[1]: Quitting: ExitCode=0x0 (rcNtWait=0x0, rcNt1=0x0, rcNt2=0x103, rcNt3=0x103, 2015064 ms, the end);

© 2024 Oracle Support Privacy / Do Not Sell My Info Terms of Use Trademark Policy