2590.2268: Log file opened: 5.0.14r105127 g_hStartupLog=00000000000000c0 g_uNtVerCombined=0x611db110 2590.2268: \SystemRoot\System32\ntdll.dll: 2590.2268: CreationTime: 2016-01-14T16:20:01.908282300Z 2590.2268: LastWriteTime: 2015-12-30T19:05:33.659216000Z 2590.2268: ChangeTime: 2016-01-14T16:39:40.974353400Z 2590.2268: FileAttributes: 0x20 2590.2268: Size: 0x1a67c0 2590.2268: NT Headers: 0xe0 2590.2268: Timestamp: 0x568429e5 2590.2268: Machine: 0x8664 - amd64 2590.2268: Timestamp: 0x568429e5 2590.2268: Image Version: 6.1 2590.2268: SizeOfImage: 0x1a9000 (1740800) 2590.2268: Resource Dir: 0x14d000 LB 0x5a028 2590.2268: ProductName: Microsoft® Windows® Operating System 2590.2268: ProductVersion: 6.1.7601.19110 2590.2268: FileVersion: 6.1.7601.19110 (win7sp1_gdr.151230-0600) 2590.2268: FileDescription: NT Layer DLL 2590.2268: \SystemRoot\System32\kernel32.dll: 2590.2268: CreationTime: 2016-01-14T16:20:02.364308400Z 2590.2268: LastWriteTime: 2015-12-30T18:57:55.730000000Z 2590.2268: ChangeTime: 2016-01-14T16:39:41.067953600Z 2590.2268: FileAttributes: 0x20 2590.2268: Size: 0x11c000 2590.2268: NT Headers: 0xe8 2590.2268: Timestamp: 0x568429dc 2590.2268: Machine: 0x8664 - amd64 2590.2268: Timestamp: 0x568429dc 2590.2268: Image Version: 6.1 2590.2268: SizeOfImage: 0x11f000 (1175552) 2590.2268: Resource Dir: 0x116000 LB 0x528 2590.2268: ProductName: Microsoft® Windows® Operating System 2590.2268: ProductVersion: 6.1.7601.19110 2590.2268: FileVersion: 6.1.7601.19110 (win7sp1_gdr.151230-0600) 2590.2268: FileDescription: Windows NT BASE API Client DLL 2590.2268: \SystemRoot\System32\KernelBase.dll: 2590.2268: CreationTime: 2016-01-14T16:20:01.135238100Z 2590.2268: LastWriteTime: 2015-12-30T18:57:55.761000000Z 2590.2268: ChangeTime: 2016-01-14T16:39:41.067953600Z 2590.2268: FileAttributes: 0x20 2590.2268: Size: 0x67a00 2590.2268: NT Headers: 0xe8 2590.2268: Timestamp: 0x568429dd 2590.2268: Machine: 0x8664 - amd64 2590.2268: Timestamp: 0x568429dd 2590.2268: Image Version: 6.1 2590.2268: SizeOfImage: 0x6c000 (442368) 2590.2268: Resource Dir: 0x6a000 LB 0x530 2590.2268: ProductName: Microsoft® Windows® Operating System 2590.2268: ProductVersion: 6.1.7601.19110 2590.2268: FileVersion: 6.1.7601.19110 (win7sp1_gdr.151230-0600) 2590.2268: FileDescription: Windows NT BASE API Client DLL 2590.2268: \SystemRoot\System32\apisetschema.dll: 2590.2268: CreationTime: 2016-01-14T16:20:00.643210000Z 2590.2268: LastWriteTime: 2015-12-30T18:54:58.839000000Z 2590.2268: ChangeTime: 2016-01-14T16:39:40.958753400Z 2590.2268: FileAttributes: 0x20 2590.2268: Size: 0x1a00 2590.2268: NT Headers: 0xc0 2590.2268: Timestamp: 0x568428c9 2590.2268: Machine: 0x8664 - amd64 2590.2268: Timestamp: 0x568428c9 2590.2268: Image Version: 6.1 2590.2268: SizeOfImage: 0x50000 (327680) 2590.2268: Resource Dir: 0x30000 LB 0x3f8 2590.2268: ProductName: Microsoft® Windows® Operating System 2590.2268: ProductVersion: 6.1.7601.19110 2590.2268: FileVersion: 6.1.7601.19110 (win7sp1_gdr.151230-0600) 2590.2268: FileDescription: ApiSet Schema DLL 2590.2268: Found driver NisDrv (0x400) 2590.2268: supR3HardenedWinFindAdversaries: 0x1400 2590.2268: \SystemRoot\System32\drivers\MpFilter.sys: 2590.2268: CreationTime: 2015-03-04T16:34:52.000000000Z 2590.2268: LastWriteTime: 2015-03-04T16:34:52.000000000Z 2590.2268: ChangeTime: 2015-08-12T16:13:16.404433700Z 2590.2268: FileAttributes: 0x20 2590.2268: Size: 0x44738 2590.2268: NT Headers: 0xf0 2590.2268: Timestamp: 0x54efb880 2590.2268: Machine: 0x8664 - amd64 2590.2268: Timestamp: 0x54efb880 2590.2268: Image Version: 6.3 2590.2268: SizeOfImage: 0x44000 (278528) 2590.2268: Resource Dir: 0x42000 LB 0xd50 2590.2268: ProductName: Microsoft Malware Protection 2590.2268: ProductVersion: 4.8.0200.0 2590.2268: FileVersion: 4.8.0200.0 2590.2268: FileDescription: Microsoft antimalware file system filter driver 2590.2268: \SystemRoot\System32\drivers\NisDrvWFP.sys: 2590.2268: CreationTime: 2013-09-27T06:53:06.000000000Z 2590.2268: LastWriteTime: 2015-03-04T16:34:52.000000000Z 2590.2268: ChangeTime: 2015-08-12T16:13:16.314428500Z 2590.2268: FileAttributes: 0x20 2590.2268: Size: 0x1e698 2590.2268: NT Headers: 0xf0 2590.2268: Timestamp: 0x54efb8af 2590.2268: Machine: 0x8664 - amd64 2590.2268: Timestamp: 0x54efb8af 2590.2268: Image Version: 6.3 2590.2268: SizeOfImage: 0x1f000 (126976) 2590.2268: Resource Dir: 0x1c000 LB 0x1b90 2590.2268: ProductName: Microsoft Malware Protection 2590.2268: ProductVersion: 4.8.0200.0 2590.2268: FileVersion: 4.8.0200.0 2590.2268: FileDescription: Microsoft Network Realtime Inspection Driver 2590.2268: \SystemRoot\System32\AntiTheftCredentialProvider.dll: 2590.2268: CreationTime: 2015-04-13T12:15:58.305930700Z 2590.2268: LastWriteTime: 2014-08-13T08:21:10.000000000Z 2590.2268: ChangeTime: 2015-04-13T12:15:23.263926400Z 2590.2268: FileAttributes: 0x20 2590.2268: Size: 0x9dc88 2590.2268: NT Headers: 0x108 2590.2268: Timestamp: 0x53eb1d24 2590.2268: Machine: 0x8664 - amd64 2590.2268: Timestamp: 0x53eb1d24 2590.2268: Image Version: 1.0 2590.2268: SizeOfImage: 0xa1000 (659456) 2590.2268: Resource Dir: 0x8d000 LB 0x11498 2590.2268: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox' 2590.2268: Calling main() 2590.2268: SUPR3HardenedMain: pszProgName=VirtualBox fFlags=0x3 2590.2268: supR3HardenedWinInitAppBin(0x3): '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox' 2590.2268: System32: \Device\HarddiskVolume3\Windows\System32 2590.2268: WinSxS: \Device\HarddiskVolume3\Windows\winsxs 2590.2268: KnownDllPath: C:\Windows\system32 2590.2268: '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports 2590.2268: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe) 2590.2268: supR3HardNtEnableThreadCreation: 2590.2268: bcrypt.dll loaded at 000007fefcc00000, BCryptOpenAlgorithmProvider at 000007fefcc02640, preloading providers: 2590.2268: BCryptOpenAlgorithmProvider(,'MD2',0,0) -> 0x0 (hAlgo=00000000003c3400) 2590.2268: BCryptOpenAlgorithmProvider(,'MD4',0,0) -> 0x0 (hAlgo=00000000003c3c90) 2590.2268: BCryptOpenAlgorithmProvider(,'MD5',0,0) -> 0x0 (hAlgo=00000000003c3f60) 2590.2268: BCryptOpenAlgorithmProvider(,'SHA1',0,0) -> 0x0 (hAlgo=00000000003c4230) 2590.2268: BCryptOpenAlgorithmProvider(,'SHA256',0,0) -> 0x0 (hAlgo=00000000003c4500) 2590.2268: BCryptOpenAlgorithmProvider(,'SHA512',0,0) -> 0x0 (hAlgo=00000000003c47d0) 2590.2268: BCryptOpenAlgorithmProvider(,'RSA',0,0) -> 0x0 (hAlgo=00000000003c4ae0) 2590.2268: BCryptOpenAlgorithmProvider(,'DSA',0,0) -> 0x0 (hAlgo=00000000003c4d90) 2590.2268: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000000 pwszName=\SystemRoot\System32\ntdll.dll 2590.2268: supR3HardNtViCallWinVerifyTrustCatFile: New context 00000000032809d0 2590.2268: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000032809d0 2590.2268: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=99113493CCEA6CE03AD58304FCE46D35B665BC85 2590.2268: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_60_for_KB3121212~31bf3856ad364e35~amd64~~6.1.1.2.cat'; file='\SystemRoot\System32\ntdll.dll' 2590.2268: g_pfnWinVerifyTrust=000007fefd371010 2590.2268: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000000000003c0 pwszName=\Device\HarddiskVolume3\Windows\System32\crypt32.dll 2590.2268: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000032809d0 2590.2268: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000032809d0 2590.2268: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=BFD41401EDEBD4D914977D62B588ECABEE60CFD3 2590.2268: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_112_for_KB3040272~31bf3856ad364e35~amd64~~6.1.1.1.cat'; file='\Device\HarddiskVolume3\Windows\System32\crypt32.dll' 2590.2268: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900) 2590.2268: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. 2590.2268: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msasn1.dll'. 2590.2268: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\crypt32.dll) WinVerifyTrust 2590.2268: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\crypt32.dll 2590.2268: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000000000003d8 pwszName=\Device\HarddiskVolume3\Windows\System32\wintrust.dll 2590.2268: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000032809d0 2590.2268: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000032809d0 2590.2268: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=E1BBE4EB6D114F50142F24E2E2749EFD81021486 2590.2268: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_75_for_KB3040272~31bf3856ad364e35~amd64~~6.1.1.1.cat'; file='\Device\HarddiskVolume3\Windows\System32\wintrust.dll' 2590.2268: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900) 2590.2268: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. 2590.2268: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'crypt32.dll'. 2590.2268: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msasn1.dll'. 2590.2268: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'rpcrt4.dll'. 2590.2268: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\wintrust.dll) WinVerifyTrust 2590.2268: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\wintrust.dll 2590.2268: supR3HardenedWinIsDesiredRootCA: Adding 0xfeb04c7efedfb800 O=Kaspersky Lab ZAO, CN=%PersonalRootCertificateName% 2590.2268: supR3HardenedWinIsDesiredRootCA: Adding 0x5ad46780fa5df300 DC=com, DC=microsoft, CN=Microsoft Root Certificate Authority 2590.2268: supR3HardenedWinIsDesiredRootCA: Adding 0xea5386456178582b C=ZA, ST=Western Cape, L=Durbanville, O=Thawte, OU=Thawte Certification, CN=Thawte Timestamping CA 2590.2268: supR3HardenedWinIsDesiredRootCA: Adding 0x3be670c1bd02a900 OU=Copyright (c) 1997 Microsoft Corp., OU=Microsoft Corporation, CN=Microsoft Root Authority 2590.2268: supR3HardenedWinIsDesiredRootCA: Adding 0x4d3835aa4180b200 C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Root Certificate Authority 2011 2590.2268: supR3HardenedWinIsDesiredRootCA: Adding 0x646e3fe3ba08df00 C=US, O=MSFT, CN=Microsoft Authenticode(tm) Root Authority 2590.2268: supR3HardenedWinIsDesiredRootCA: skipping - not-self-signed: C=BZ, ST=Belize, L=Belize City, O=DT Soft Ltd, OU=Digital ID Class 3 - Microsoft Software Validation v2, CN=DT Soft Ltd 2590.2268: supR3HardenedWinIsDesiredRootCA: Adding 0xece4e4289e08b900 C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Root Certificate Authority 2010 2590.2268: supR3HardenedWinIsDesiredRootCA: skipping - not-self-signed: C=BZ, ST=Belize, L=Belize city, O=Disc Soft Ltd, CN=Disc Soft Ltd, Email=finpr@disc-soft.com 2590.2268: supR3HardenedWinIsDesiredRootCA: Adding 0xe840e6dbe281be00 C=IL, ST=Gush Dan, L=Hertzilia, O=GreenTeam Internet, Ltd., OU=Web, CN=cloudguard.me 2590.2268: supR3HardenedWinIsDesiredRootCA: Adding 0x43a9cc371ff5385a O=Microsoft Trust Network, OU=Microsoft Corporation, OU=Microsoft Time Stamping Service Root, OU=Copyright (c) 1997 Microsoft Corp. 2590.2268: supR3HardenedWinIsDesiredRootCA: Adding 0x2e2d2c7c68f0202e O=VeriSign Trust Network, OU=VeriSign, Inc., OU=VeriSign Time Stamping Service Root, OU=NO LIABILITY ACCEPTED, (c)97 VeriSign, Inc. 2590.2268: supR3HardenedWinIsDesiredRootCA: Adding 0xced08517f4c2a400 CN=localhost, O=Skype Click to Call, OU=Skype Click to Call 2590.2268: supR3HardenedWinIsDesiredRootCA: Adding 0xd8dbfb2c27bfb200 C=US, O=thawte, Inc., OU=Certification Services Division, OU=(c) 2008 thawte, Inc. - For authorized use only, CN=thawte Primary Root CA - G3 2590.2268: supR3HardenedWinIsDesiredRootCA: Adding 0x61a3a33f81aace00 C=US, ST=UT, L=Salt Lake City, O=The USERTRUST Network, OU=http://www.usertrust.com, CN=UTN-USERFirst-Object 2590.2268: supR3HardenedWinIsDesiredRootCA: Adding 0xf4fd306318ccda00 C=US, O=GeoTrust Inc., CN=GeoTrust Global CA 2590.2268: supR3HardenedWinIsDesiredRootCA: Adding 0x83085097e9afdf00 O=Digital Signature Trust Co., CN=DST Root CA X3 2590.2268: supR3HardenedWinIsDesiredRootCA: Adding 0x780679907625cc00 OU=GlobalSign Root CA - R3, O=GlobalSign, CN=GlobalSign 2590.2268: supR3HardenedWinIsDesiredRootCA: Adding 0x3d98ab22bb04a300 C=IE, O=Baltimore, OU=CyberTrust, CN=Baltimore CyberTrust Root 2590.2268: supR3HardenedWinIsDesiredRootCA: Adding 0xa0ee62086758b15d C=US, O=Equifax, OU=Equifax Secure Certificate Authority 2590.2268: supR3HardenedWinIsDesiredRootCA: Adding 0x9403a4b8727eb000 C=TW, O=TAIWAN-CA, OU=Root CA, CN=TWCA Root Certification Authority 2590.2268: supR3HardenedWinIsDesiredRootCA: Adding 0xd944bca189a00 C=BM, O=QuoVadis Limited, CN=QuoVadis Root CA 2 2590.2268: supR3HardenedWinIsDesiredRootCA: Adding 0x8ff6fc03c1edbd00 C=US, ST=Arizona, L=Scottsdale, O=Starfield Technologies, Inc., CN=Starfield Root Certificate Authority - G2 2590.2268: supR3HardenedWinIsDesiredRootCA: Adding 0xc6fa4243b695b600 C=US, O=Entrust, Inc., OU=www.entrust.net/CPS is incorporated by reference, OU=(c) 2006 Entrust, Inc., CN=Entrust Root Certification Authority 2590.2268: supR3HardenedWinIsDesiredRootCA: Adding 0xa3ce8d99e60eda00 C=BE, O=GlobalSign nv-sa, OU=Root CA, CN=GlobalSign Root CA 2590.2268: supR3HardenedWinIsDesiredRootCA: Adding 0xa671e9fec832b700 C=US, O=Starfield Technologies, Inc., OU=Starfield Class 2 Certification Authority 2590.2268: supR3HardenedWinIsDesiredRootCA: Adding 0xa8de7211e13be200 C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root CA 2590.2268: supR3HardenedWinIsDesiredRootCA: Adding 0x7ae89c50f0b6a00f C=US, O=GTE Corporation, OU=GTE CyberTrust Solutions, Inc., CN=GTE CyberTrust Global Root 2590.2268: supR3HardenedWinIsDesiredRootCA: Adding 0xd45980fbf0a0ac00 C=US, O=thawte, Inc., OU=Certification Services Division, OU=(c) 2006 thawte, Inc. - For authorized use only, CN=thawte Primary Root CA 2590.2268: supR3HardenedWinIsDesiredRootCA: Adding 0x4d3835aa4180b200 C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Root Certificate Authority 2011 2590.2268: supR3HardenedWinIsDesiredRootCA: Adding 0xc9edb72b684ba00 C=US, O=Entrust, Inc., OU=See www.entrust.net/legal-terms, OU=(c) 2009 Entrust, Inc. - for authorized use only, CN=Entrust Root Certification Authority - G2 2590.2268: supR3HardenedWinIsDesiredRootCA: Adding 0xf5cd95e581a4ab00 C=US, O=SecureTrust Corporation, CN=SecureTrust CA 2590.2268: supR3HardenedWinIsDesiredRootCA: Adding 0x298be035a30bab00 C=DE, O=Deutsche Telekom AG, OU=T-TeleSec Trust Center, CN=Deutsche Telekom Root CA 2 2590.2268: supR3HardenedWinIsDesiredRootCA: Adding 0xabd0695c5d11d15e C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification Authority - G2, OU=(c) 1998 VeriSign, Inc. - For authorized use only, OU=VeriSign Trust Network 2590.2268: supR3HardenedWinIsDesiredRootCA: Adding 0x6f2ebe0e24cfa600 OU=GlobalSign Root CA - R2, O=GlobalSign, CN=GlobalSign 2590.2268: supR3HardenedWinIsDesiredRootCA: Adding 0x14018a1bf29e595c C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification Authority 2590.2268: supR3HardenedWinIsDesiredRootCA: Adding 0x35f812d09650dc00 C=FR, O=Certplus, CN=Class 2 Primary CA 2590.2268: supR3HardenedWinIsDesiredRootCA: Adding 0xc66d30927ebce400 C=US, O=Network Solutions L.L.C., CN=Network Solutions Certificate Authority 2590.2268: supR3HardenedWinIsDesiredRootCA: Adding 0x9e5bc2d78b6a3636 C=ZA, ST=Western Cape, L=Cape Town, O=Thawte Consulting cc, OU=Certification Services Division, CN=Thawte Premium Server CA, Email=premium-server@thawte.com 2590.2268: supR3HardenedWinIsDesiredRootCA: Adding 0x7c4fd32ec1b1ce00 C=PL, O=Unizeto Sp. z o.o., CN=Certum CA 2590.2268: supR3HardenedWinIsDesiredRootCA: Adding 0xd4fbe673e5ccc600 C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert High Assurance EV Root CA 2590.2268: supR3HardenedWinIsDesiredRootCA: Adding 0x16e64d2a56ccf200 C=US, ST=Arizona, L=Scottsdale, O=Starfield Technologies, Inc., OU=http://certificates.starfieldtech.com/repository/, CN=Starfield Services Root Certificate Authority 2590.2268: supR3HardenedWinIsDesiredRootCA: Adding 0xb28612a94b4dad00 O=Entrust.net, OU=www.entrust.net/CPS_2048 incorp. by ref. (limits liab.), OU=(c) 1999 Entrust.net Limited, CN=Entrust.net Certification Authority (2048) 2590.2268: supR3HardenedWinIsDesiredRootCA: Adding 0x357a29080824af00 C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. - For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority - G5 2590.2268: supR3HardenedWinIsDesiredRootCA: Adding 0x59faf1086271bf00 C=US, ST=Arizona, L=Scottsdale, O=GoDaddy.com, Inc., CN=Go Daddy Root Certificate Authority - G2 2590.2268: supR3HardenedWinIsDesiredRootCA: Adding 0x466cbc09db88c100 C=IL, O=StartCom Ltd., OU=Secure Digital Certificate Signing, CN=StartCom Certification Authority 2590.2268: supR3HardenedWinIsDesiredRootCA: Adding 0x30669a4e82fa800 C=US, O=America Online Inc., CN=America Online Root Certification Authority 1 2590.2268: supR3HardenedWinIsDesiredRootCA: Adding 0xb16dd37ffeb3b300 C=JP, O=SECOM Trust.net, OU=Security Communication RootCA1 2590.2268: supR3HardenedWinIsDesiredRootCA: Adding 0x3401b15e3761c700 C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2008 VeriSign, Inc. - For authorized use only, CN=VeriSign Universal Root Certification Authority 2590.2268: supR3HardenedWinIsDesiredRootCA: Adding 0x7cd4ff7b15b8be00 C=US, O=GeoTrust Inc., CN=GeoTrust Primary Certification Authority 2590.2268: supR3HardenedWinIsDesiredRootCA: Adding 0x20b7075b3689b600 C=IL, O=StartCom Ltd., CN=StartCom Certification Authority G2 2590.2268: supR3HardenedWinIsDesiredRootCA: Adding 0x491857ead79dde00 C=US, O=The Go Daddy Group, Inc., OU=Go Daddy Class 2 Certification Authority 2590.2268: supR3HardenedWinIsDesiredRootCA: Adding 0xab549401526569d3 L=Internet, O=VeriSign, Inc., OU=VeriSign Commercial Software Publishers CA 2590.2268: supR3HardenedWinIsDesiredRootCA: Adding 0x92ac5ed85c2d0e9b C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2007 VeriSign, Inc. - For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority - G4 2590.2268: supR3HardenedWinIsDesiredRootCA: Adding 0x1f78fc529cbacb00 C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 1999 VeriSign, Inc. - For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority - G3 2590.2268: supR3HardenedWinIsDesiredRootCA: Adding 0x8043e4ce150ead00 C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Assured ID Root CA 2590.2268: supR3HardenedWinIsDesiredRootCA: Adding 0xa8b43f38c3f7b100 C=US, ST=UT, L=Salt Lake City, O=The USERTRUST Network, OU=http://www.usertrust.com, CN=UTN-USERFirst-Hardware 2590.2268: supR3HardenedWinIsDesiredRootCA: Adding 0x331d58625ee2dc00 C=US, O=GeoTrust Inc., OU=(c) 2008 GeoTrust Inc. - For authorized use only, CN=GeoTrust Primary Certification Authority - G3 2590.2268: supR3HardenedWinIsDesiredRootCA: Adding 0xf2e6331af7b700 C=SE, O=AddTrust AB, OU=AddTrust External TTP Network, CN=AddTrust External CA Root 2590.2268: supR3HardenedWinRetrieveTrustedRootCAs: cAdded=57 2590.2268: SUPR3HardenedMain: Load Runtime... 2590.2268: SUPR3HardenedMain: Load TrustedMain... 2590.2268: SUPR3HardenedMain: Calling TrustedMain (000007fee09510d0)... 1960.2644: Log file opened: 5.0.14r105127 g_hStartupLog=00000000000000c8 g_uNtVerCombined=0x611db110 1960.2644: \SystemRoot\System32\ntdll.dll: 1960.2644: CreationTime: 2016-01-14T16:20:01.908282300Z 1960.2644: LastWriteTime: 2015-12-30T19:05:33.659216000Z 1960.2644: ChangeTime: 2016-01-14T16:39:40.974353400Z 1960.2644: FileAttributes: 0x20 1960.2644: Size: 0x1a67c0 1960.2644: NT Headers: 0xe0 1960.2644: Timestamp: 0x568429e5 1960.2644: Machine: 0x8664 - amd64 1960.2644: Timestamp: 0x568429e5 1960.2644: Image Version: 6.1 1960.2644: SizeOfImage: 0x1a9000 (1740800) 1960.2644: Resource Dir: 0x14d000 LB 0x5a028 1960.2644: ProductName: Microsoft® Windows® Operating System 1960.2644: ProductVersion: 6.1.7601.19110 1960.2644: FileVersion: 6.1.7601.19110 (win7sp1_gdr.151230-0600) 1960.2644: FileDescription: NT Layer DLL 1960.2644: \SystemRoot\System32\kernel32.dll: 1960.2644: CreationTime: 2016-01-14T16:20:02.364308400Z 1960.2644: LastWriteTime: 2015-12-30T18:57:55.730000000Z 1960.2644: ChangeTime: 2016-01-14T16:39:41.067953600Z 1960.2644: FileAttributes: 0x20 1960.2644: Size: 0x11c000 1960.2644: NT Headers: 0xe8 1960.2644: Timestamp: 0x568429dc 1960.2644: Machine: 0x8664 - amd64 1960.2644: Timestamp: 0x568429dc 1960.2644: Image Version: 6.1 1960.2644: SizeOfImage: 0x11f000 (1175552) 1960.2644: Resource Dir: 0x116000 LB 0x528 1960.2644: ProductName: Microsoft® Windows® Operating System 1960.2644: ProductVersion: 6.1.7601.19110 1960.2644: FileVersion: 6.1.7601.19110 (win7sp1_gdr.151230-0600) 1960.2644: FileDescription: Windows NT BASE API Client DLL 1960.2644: \SystemRoot\System32\KernelBase.dll: 1960.2644: CreationTime: 2016-01-14T16:20:01.135238100Z 1960.2644: LastWriteTime: 2015-12-30T18:57:55.761000000Z 1960.2644: ChangeTime: 2016-01-14T16:39:41.067953600Z 1960.2644: FileAttributes: 0x20 1960.2644: Size: 0x67a00 1960.2644: NT Headers: 0xe8 1960.2644: Timestamp: 0x568429dd 1960.2644: Machine: 0x8664 - amd64 1960.2644: Timestamp: 0x568429dd 1960.2644: Image Version: 6.1 1960.2644: SizeOfImage: 0x6c000 (442368) 1960.2644: Resource Dir: 0x6a000 LB 0x530 1960.2644: ProductName: Microsoft® Windows® Operating System 1960.2644: ProductVersion: 6.1.7601.19110 1960.2644: FileVersion: 6.1.7601.19110 (win7sp1_gdr.151230-0600) 1960.2644: FileDescription: Windows NT BASE API Client DLL 1960.2644: \SystemRoot\System32\apisetschema.dll: 1960.2644: CreationTime: 2016-01-14T16:20:00.643210000Z 1960.2644: LastWriteTime: 2015-12-30T18:54:58.839000000Z 1960.2644: ChangeTime: 2016-01-14T16:39:40.958753400Z 1960.2644: FileAttributes: 0x20 1960.2644: Size: 0x1a00 1960.2644: NT Headers: 0xc0 1960.2644: Timestamp: 0x568428c9 1960.2644: Machine: 0x8664 - amd64 1960.2644: Timestamp: 0x568428c9 1960.2644: Image Version: 6.1 1960.2644: SizeOfImage: 0x50000 (327680) 1960.2644: Resource Dir: 0x30000 LB 0x3f8 1960.2644: ProductName: Microsoft® Windows® Operating System 1960.2644: ProductVersion: 6.1.7601.19110 1960.2644: FileVersion: 6.1.7601.19110 (win7sp1_gdr.151230-0600) 1960.2644: FileDescription: ApiSet Schema DLL 1960.2644: Found driver NisDrv (0x400) 1960.2644: supR3HardenedWinFindAdversaries: 0x1400 1960.2644: \SystemRoot\System32\drivers\MpFilter.sys: 1960.2644: CreationTime: 2015-03-04T16:34:52.000000000Z 1960.2644: LastWriteTime: 2015-03-04T16:34:52.000000000Z 1960.2644: ChangeTime: 2015-08-12T16:13:16.404433700Z 1960.2644: FileAttributes: 0x20 1960.2644: Size: 0x44738 1960.2644: NT Headers: 0xf0 1960.2644: Timestamp: 0x54efb880 1960.2644: Machine: 0x8664 - amd64 1960.2644: Timestamp: 0x54efb880 1960.2644: Image Version: 6.3 1960.2644: SizeOfImage: 0x44000 (278528) 1960.2644: Resource Dir: 0x42000 LB 0xd50 1960.2644: ProductName: Microsoft Malware Protection 1960.2644: ProductVersion: 4.8.0200.0 1960.2644: FileVersion: 4.8.0200.0 1960.2644: FileDescription: Microsoft antimalware file system filter driver 1960.2644: \SystemRoot\System32\drivers\NisDrvWFP.sys: 1960.2644: CreationTime: 2013-09-27T06:53:06.000000000Z 1960.2644: LastWriteTime: 2015-03-04T16:34:52.000000000Z 1960.2644: ChangeTime: 2015-08-12T16:13:16.314428500Z 1960.2644: FileAttributes: 0x20 1960.2644: Size: 0x1e698 1960.2644: NT Headers: 0xf0 1960.2644: Timestamp: 0x54efb8af 1960.2644: Machine: 0x8664 - amd64 1960.2644: Timestamp: 0x54efb8af 1960.2644: Image Version: 6.3 1960.2644: SizeOfImage: 0x1f000 (126976) 1960.2644: Resource Dir: 0x1c000 LB 0x1b90 1960.2644: ProductName: Microsoft Malware Protection 1960.2644: ProductVersion: 4.8.0200.0 1960.2644: FileVersion: 4.8.0200.0 1960.2644: FileDescription: Microsoft Network Realtime Inspection Driver 1960.2644: \SystemRoot\System32\AntiTheftCredentialProvider.dll: 1960.2644: CreationTime: 2015-04-13T12:15:58.305930700Z 1960.2644: LastWriteTime: 2014-08-13T08:21:10.000000000Z 1960.2644: ChangeTime: 2015-04-13T12:15:23.263926400Z 1960.2644: FileAttributes: 0x20 1960.2644: Size: 0x9dc88 1960.2644: NT Headers: 0x108 1960.2644: Timestamp: 0x53eb1d24 1960.2644: Machine: 0x8664 - amd64 1960.2644: Timestamp: 0x53eb1d24 1960.2644: Image Version: 1.0 1960.2644: SizeOfImage: 0xa1000 (659456) 1960.2644: Resource Dir: 0x8d000 LB 0x11498 1960.2644: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox' 1960.2644: Calling main() 1960.2644: SUPR3HardenedMain: pszProgName=VBoxHeadless fFlags=0x0 1960.2644: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox' 1960.2644: SUPR3HardenedMain: Respawn #1 1960.2644: System32: \Device\HarddiskVolume3\Windows\System32 1960.2644: WinSxS: \Device\HarddiskVolume3\Windows\winsxs 1960.2644: KnownDllPath: C:\Windows\system32 1960.2644: '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxHeadless.exe' has no imports 1960.2644: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxHeadless.exe) 1960.2644: supR3HardNtEnableThreadCreation: 1960.2644: supR3HardNtDisableThreadCreation: pvLdrInitThunk=000000007751b630 pvNtTerminateThread=000000007753dee0 1960.2644: supR3HardenedWinDoReSpawn(1): New child 108c.2748 [kernel32]. 1960.2644: supR3HardNtChildGatherData: PebBaseAddress=000007fffffdc000 cbPeb=0x380 1960.2644: supR3HardNtPuChFindNtdll: uNtDllParentAddr=00000000774f0000 uNtDllChildAddr=00000000774f0000 1960.2644: supR3HardenedWinSetupChildInit: uLdrInitThunk=000000007751b630 1960.2644: supR3HardenedWinSetupChildInit: Start child. 1960.2644: supR3HardNtChildWaitFor: Found expected request 0 (PurifyChildAndCloseHandles) after 0 ms. 1960.2644: supR3HardNtChildPurify: Startup delay kludge #1/0: 513 ms, 45 sleeps 1960.2644: supHardNtVpScanVirtualMemory: enmKind=CHILD_PURIFICATION 1960.2644: *0000000000000000-fffffffffffeffff 0x0001/0x0000 0x0000000 1960.2644: *0000000000010000-fffffffffffeffff 0x0004/0x0004 0x0020000 1960.2644: *0000000000030000-000000000002bfff 0x0002/0x0002 0x0040000 1960.2644: 0000000000034000-0000000000027fff 0x0001/0x0000 0x0000000 1960.2644: *0000000000040000-000000000003efff 0x0004/0x0004 0x0020000 1960.2644: 0000000000041000-0000000000031fff 0x0001/0x0000 0x0000000 1960.2644: *0000000000050000-000000000004efff 0x0004/0x0004 0x0020000 1960.2644: 0000000000051000-ffffffffffe81fff 0x0001/0x0000 0x0000000 1960.2644: *0000000000220000-0000000000123fff 0x0000/0x0004 0x0020000 1960.2644: 000000000031c000-0000000000318fff 0x0104/0x0004 0x0020000 1960.2644: 000000000031f000-000000000031dfff 0x0004/0x0004 0x0020000 1960.2644: 0000000000320000-ffffffff8914ffff 0x0001/0x0000 0x0000000 1960.2644: *00000000774f0000-00000000774f0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll 1960.2644: 00000000774f1000-00000000775eefff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll 1960.2644: 00000000775ef000-000000007761dfff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll 1960.2644: 000000007761e000-0000000077625fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll 1960.2644: 0000000077626000-0000000077626fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll 1960.2644: 0000000077627000-0000000077629fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll 1960.2644: 000000007762a000-0000000077698fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll 1960.2644: 0000000077699000-000000006fd51fff 0x0001/0x0000 0x0000000 1960.2644: *000000007efe0000-000000007dfdffff 0x0000/0x0002 0x0020000 1960.2644: *000000007ffe0000-000000007ffdefff 0x0002/0x0002 0x0020000 1960.2644: 000000007ffe1000-000000007ffd1fff 0x0000/0x0002 0x0020000 1960.2644: 000000007fff0000-ffffffffc076ffff 0x0001/0x0000 0x0000000 1960.2644: *000000013f870000-000000013f870fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxHeadless.exe 1960.2644: 000000013f871000-000000013f8f7fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxHeadless.exe 1960.2644: 000000013f8f8000-000000013f8f8fff 0x0080/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxHeadless.exe 1960.2644: 000000013f8f9000-000000013f943fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxHeadless.exe 1960.2644: 000000013f944000-000000013f944fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxHeadless.exe 1960.2644: 000000013f945000-000000013f945fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxHeadless.exe 1960.2644: 000000013f946000-000000013f94afff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxHeadless.exe 1960.2644: 000000013f94b000-000000013f94bfff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxHeadless.exe 1960.2644: 000000013f94c000-000000013f94cfff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxHeadless.exe 1960.2644: 000000013f94d000-000000013f950fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxHeadless.exe 1960.2644: 000000013f951000-000000013f99bfff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxHeadless.exe 1960.2644: 000000013f99c000-fffff8037fb27fff 0x0001/0x0000 0x0000000 1960.2644: *000007feff810000-000007feff810fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\apisetschema.dll 1960.2644: 000007feff811000-000007fdff071fff 0x0001/0x0000 0x0000000 1960.2644: *000007fffffb0000-000007fffff8cfff 0x0002/0x0002 0x0040000 1960.2644: 000007fffffd3000-000007fffffc9fff 0x0001/0x0000 0x0000000 1960.2644: *000007fffffdc000-000007fffffdafff 0x0004/0x0004 0x0020000 1960.2644: 000007fffffdd000-000007fffffdbfff 0x0001/0x0000 0x0000000 1960.2644: *000007fffffde000-000007fffffdbfff 0x0004/0x0004 0x0020000 1960.2644: *000007fffffe0000-000007fffffcffff 0x0001/0x0002 0x0020000 1960.2644: apisetschema.dll: timestamp 0x568428c9 (rc=VINF_SUCCESS) 1960.2644: VBoxHeadless.exe: timestamp 0x569e6712 (rc=VINF_SUCCESS) 1960.2644: '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxHeadless.exe' has no imports 1960.2644: '\Device\HarddiskVolume3\Windows\System32\apisetschema.dll' has no imports 1960.2644: '\Device\HarddiskVolume3\Windows\System32\ntdll.dll' has no imports 1960.2644: supR3HardNtChildPurify: Done after 528 ms and 0 fixes (loop #0). 108c.2748: Log file opened: 5.0.14r105127 g_hStartupLog=0000000000000004 g_uNtVerCombined=0x611db110 108c.2748: supR3HardenedVmProcessInit: uNtDllAddr=00000000774f0000 108c.2748: ntdll.dll: timestamp 0x568429e5 (rc=VINF_SUCCESS) 108c.2748: New simple heap: #1 0000000000320000 LB 0x400000 (for 1740800 allocation) 1960.2644: supR3HardNtEnableThreadCreation: 108c.2748: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox' 108c.2748: System32: \Device\HarddiskVolume3\Windows\System32 108c.2748: WinSxS: \Device\HarddiskVolume3\Windows\winsxs 108c.2748: KnownDllPath: C:\Windows\system32 108c.2748: supR3HardenedVmProcessInit: Opening vboxdrv stub... 108c.2748: supR3HardenedVmProcessInit: Restoring LdrInitializeThunk... 108c.2748: supR3HardenedVmProcessInit: Returning to LdrInitializeThunk... 108c.2748: Registered Dll notification callback with NTDLL. 108c.2748: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\kernel32.dll) 108c.2748: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\kernel32.dll 108c.2748: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\kernel32.dll (Input=kernel32.dll, rcNtResolve=0xc0150008) *pfFlags=0xffffffff pwszSearchPath=0000000000000000: [calling] 108c.2748: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\kernel32.dll [lacks WinVerifyTrust] 108c.2748: supR3HardenedDllNotificationCallback: load 00000000773d0000 LB 0x0011f000 C:\Windows\system32\kernel32.dll [fFlags=0x0] 108c.2748: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\kernel32.dll [lacks WinVerifyTrust] 108c.2748: supR3HardenedDllNotificationCallback: load 000007fefd2f0000 LB 0x0006c000 C:\Windows\system32\KERNELBASE.dll [fFlags=0x0] 108c.2748: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\KernelBase.dll) 108c.2748: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\KernelBase.dll 108c.2748: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00000000773d0000 'C:\Windows\system32\kernel32.dll' 108c.2748: supR3HardNtDisableThreadCreation: pvLdrInitThunk=000000007751b630 pvNtTerminateThread=000000007753dee0 1960.2644: supR3HardNtChildWaitFor: Found expected request 1 (CloseEvents) after 16 ms. 108c.2748: \SystemRoot\System32\ntdll.dll: 108c.2748: CreationTime: 2016-01-14T16:20:01.908282300Z 108c.2748: LastWriteTime: 2015-12-30T19:05:33.659216000Z 108c.2748: ChangeTime: 2016-01-14T16:39:40.974353400Z 108c.2748: FileAttributes: 0x20 108c.2748: Size: 0x1a67c0 108c.2748: NT Headers: 0xe0 108c.2748: Timestamp: 0x568429e5 108c.2748: Machine: 0x8664 - amd64 108c.2748: Timestamp: 0x568429e5 108c.2748: Image Version: 6.1 108c.2748: SizeOfImage: 0x1a9000 (1740800) 108c.2748: Resource Dir: 0x14d000 LB 0x5a028 108c.2748: ProductName: Microsoft® Windows® Operating System 108c.2748: ProductVersion: 6.1.7601.19110 108c.2748: FileVersion: 6.1.7601.19110 (win7sp1_gdr.151230-0600) 108c.2748: FileDescription: NT Layer DLL 108c.2748: \SystemRoot\System32\kernel32.dll: 108c.2748: CreationTime: 2016-01-14T16:20:02.364308400Z 108c.2748: LastWriteTime: 2015-12-30T18:57:55.730000000Z 108c.2748: ChangeTime: 2016-01-14T16:39:41.067953600Z 108c.2748: FileAttributes: 0x20 108c.2748: Size: 0x11c000 108c.2748: NT Headers: 0xe8 108c.2748: Timestamp: 0x568429dc 108c.2748: Machine: 0x8664 - amd64 108c.2748: Timestamp: 0x568429dc 108c.2748: Image Version: 6.1 108c.2748: SizeOfImage: 0x11f000 (1175552) 108c.2748: Resource Dir: 0x116000 LB 0x528 108c.2748: ProductName: Microsoft® Windows® Operating System 108c.2748: ProductVersion: 6.1.7601.19110 108c.2748: FileVersion: 6.1.7601.19110 (win7sp1_gdr.151230-0600) 108c.2748: FileDescription: Windows NT BASE API Client DLL 108c.2748: \SystemRoot\System32\KernelBase.dll: 108c.2748: CreationTime: 2016-01-14T16:20:01.135238100Z 108c.2748: LastWriteTime: 2015-12-30T18:57:55.761000000Z 108c.2748: ChangeTime: 2016-01-14T16:39:41.067953600Z 108c.2748: FileAttributes: 0x20 108c.2748: Size: 0x67a00 108c.2748: NT Headers: 0xe8 108c.2748: Timestamp: 0x568429dd 108c.2748: Machine: 0x8664 - amd64 108c.2748: Timestamp: 0x568429dd 108c.2748: Image Version: 6.1 108c.2748: SizeOfImage: 0x6c000 (442368) 108c.2748: Resource Dir: 0x6a000 LB 0x530 108c.2748: ProductName: Microsoft® Windows® Operating System 108c.2748: ProductVersion: 6.1.7601.19110 108c.2748: FileVersion: 6.1.7601.19110 (win7sp1_gdr.151230-0600) 108c.2748: FileDescription: Windows NT BASE API Client DLL 108c.2748: \SystemRoot\System32\apisetschema.dll: 108c.2748: CreationTime: 2016-01-14T16:20:00.643210000Z 108c.2748: LastWriteTime: 2015-12-30T18:54:58.839000000Z 108c.2748: ChangeTime: 2016-01-14T16:39:40.958753400Z 108c.2748: FileAttributes: 0x20 108c.2748: Size: 0x1a00 108c.2748: NT Headers: 0xc0 108c.2748: Timestamp: 0x568428c9 108c.2748: Machine: 0x8664 - amd64 108c.2748: Timestamp: 0x568428c9 108c.2748: Image Version: 6.1 108c.2748: SizeOfImage: 0x50000 (327680) 108c.2748: Resource Dir: 0x30000 LB 0x3f8 108c.2748: ProductName: Microsoft® Windows® Operating System 108c.2748: ProductVersion: 6.1.7601.19110 108c.2748: FileVersion: 6.1.7601.19110 (win7sp1_gdr.151230-0600) 108c.2748: FileDescription: ApiSet Schema DLL 108c.2748: Found driver NisDrv (0x400) 108c.2748: supR3HardenedWinFindAdversaries: 0x1400 108c.2748: \SystemRoot\System32\drivers\MpFilter.sys: 108c.2748: CreationTime: 2015-03-04T16:34:52.000000000Z 108c.2748: LastWriteTime: 2015-03-04T16:34:52.000000000Z 108c.2748: ChangeTime: 2015-08-12T16:13:16.404433700Z 108c.2748: FileAttributes: 0x20 108c.2748: Size: 0x44738 108c.2748: NT Headers: 0xf0 108c.2748: Timestamp: 0x54efb880 108c.2748: Machine: 0x8664 - amd64 108c.2748: Timestamp: 0x54efb880 108c.2748: Image Version: 6.3 108c.2748: SizeOfImage: 0x44000 (278528) 108c.2748: Resource Dir: 0x42000 LB 0xd50 108c.2748: ProductName: Microsoft Malware Protection 108c.2748: ProductVersion: 4.8.0200.0 108c.2748: FileVersion: 4.8.0200.0 108c.2748: FileDescription: Microsoft antimalware file system filter driver 108c.2748: \SystemRoot\System32\drivers\NisDrvWFP.sys: 108c.2748: CreationTime: 2013-09-27T06:53:06.000000000Z 108c.2748: LastWriteTime: 2015-03-04T16:34:52.000000000Z 108c.2748: ChangeTime: 2015-08-12T16:13:16.314428500Z 108c.2748: FileAttributes: 0x20 108c.2748: Size: 0x1e698 108c.2748: NT Headers: 0xf0 108c.2748: Timestamp: 0x54efb8af 108c.2748: Machine: 0x8664 - amd64 108c.2748: Timestamp: 0x54efb8af 108c.2748: Image Version: 6.3 108c.2748: SizeOfImage: 0x1f000 (126976) 108c.2748: Resource Dir: 0x1c000 LB 0x1b90 108c.2748: ProductName: Microsoft Malware Protection 108c.2748: ProductVersion: 4.8.0200.0 108c.2748: FileVersion: 4.8.0200.0 108c.2748: FileDescription: Microsoft Network Realtime Inspection Driver 108c.2748: \SystemRoot\System32\AntiTheftCredentialProvider.dll: 108c.2748: CreationTime: 2015-04-13T12:15:58.305930700Z 108c.2748: LastWriteTime: 2014-08-13T08:21:10.000000000Z 108c.2748: ChangeTime: 2015-04-13T12:15:23.263926400Z 108c.2748: FileAttributes: 0x20 108c.2748: Size: 0x9dc88 108c.2748: NT Headers: 0x108 108c.2748: Timestamp: 0x53eb1d24 108c.2748: Machine: 0x8664 - amd64 108c.2748: Timestamp: 0x53eb1d24 108c.2748: Image Version: 1.0 108c.2748: SizeOfImage: 0xa1000 (659456) 108c.2748: Resource Dir: 0x8d000 LB 0x11498 108c.2748: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox' 108c.2748: Calling main() 108c.2748: SUPR3HardenedMain: pszProgName=VBoxHeadless fFlags=0x0 108c.2748: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox' 108c.2748: '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxHeadless.exe' has no imports 108c.2748: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxHeadless.exe) 108c.2748: SUPR3HardenedMain: Respawn #2 108c.2748: supR3HardNtEnableThreadCreation: 108c.2748: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\apphelp.dll) 108c.2748: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\apphelp.dll 108c.2748: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\apphelp.dll (rcNtResolve=0xc0150008) *pfFlags=0xffffffff pwszSearchPath=0000000000000000: [calling] 108c.2748: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\apphelp.dll [lacks WinVerifyTrust] 108c.2748: supR3HardenedDllNotificationCallback: load 000007fefd180000 LB 0x00057000 C:\Windows\system32\apphelp.dll [fFlags=0x0] 108c.2748: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\apphelp.dll [lacks WinVerifyTrust] 108c.2748: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefd180000 'C:\Windows\system32\apphelp.dll' 108c.2748: supR3HardNtDisableThreadCreation: pvLdrInitThunk=000000007751b630 pvNtTerminateThread=000000007753dee0 108c.2748: supR3HardenedWinDoReSpawn(2): New child 26e8.17c0 [kernel32]. 108c.2748: supR3HardNtChildGatherData: PebBaseAddress=000007fffffdf000 cbPeb=0x380 108c.2748: supR3HardNtPuChFindNtdll: uNtDllParentAddr=00000000774f0000 uNtDllChildAddr=00000000774f0000 108c.2748: supR3HardenedWinSetupChildInit: uLdrInitThunk=000000007751b630 108c.2748: supR3HardenedWinSetupChildInit: Start child. 108c.2748: supR3HardNtChildWaitFor: Found expected request 0 (PurifyChildAndCloseHandles) after 0 ms. 108c.2748: supR3HardNtChildPurify: Startup delay kludge #1/0: 515 ms, 33 sleeps 108c.2748: supHardNtVpScanVirtualMemory: enmKind=CHILD_PURIFICATION 108c.2748: *0000000000000000-fffffffffffeffff 0x0001/0x0000 0x0000000 108c.2748: *0000000000010000-fffffffffffeffff 0x0004/0x0004 0x0020000 108c.2748: *0000000000030000-000000000002bfff 0x0002/0x0002 0x0040000 108c.2748: 0000000000034000-0000000000027fff 0x0001/0x0000 0x0000000 108c.2748: *0000000000040000-000000000003efff 0x0004/0x0004 0x0020000 108c.2748: 0000000000041000-0000000000031fff 0x0001/0x0000 0x0000000 108c.2748: *0000000000050000-000000000004efff 0x0004/0x0004 0x0020000 108c.2748: 0000000000051000-ffffffffffec1fff 0x0001/0x0000 0x0000000 108c.2748: *00000000001e0000-00000000000e3fff 0x0000/0x0004 0x0020000 108c.2748: 00000000002dc000-00000000002d8fff 0x0104/0x0004 0x0020000 108c.2748: 00000000002df000-00000000002ddfff 0x0004/0x0004 0x0020000 108c.2748: 00000000002e0000-ffffffff890cffff 0x0001/0x0000 0x0000000 108c.2748: *00000000774f0000-00000000774f0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll 108c.2748: 00000000774f1000-00000000775eefff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll 108c.2748: 00000000775ef000-000000007761dfff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll 108c.2748: 000000007761e000-0000000077625fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll 108c.2748: 0000000077626000-0000000077626fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll 108c.2748: 0000000077627000-0000000077629fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll 108c.2748: 000000007762a000-0000000077698fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll 108c.2748: 0000000077699000-000000006fd51fff 0x0001/0x0000 0x0000000 108c.2748: *000000007efe0000-000000007dfdffff 0x0000/0x0002 0x0020000 108c.2748: *000000007ffe0000-000000007ffdefff 0x0002/0x0002 0x0020000 108c.2748: 000000007ffe1000-000000007ffd1fff 0x0000/0x0002 0x0020000 108c.2748: 000000007fff0000-ffffffffc076ffff 0x0001/0x0000 0x0000000 108c.2748: *000000013f870000-000000013f870fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxHeadless.exe 108c.2748: 000000013f871000-000000013f8f7fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxHeadless.exe 108c.2748: 000000013f8f8000-000000013f8f8fff 0x0080/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxHeadless.exe 108c.2748: 000000013f8f9000-000000013f943fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxHeadless.exe 108c.2748: 000000013f944000-000000013f944fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxHeadless.exe 108c.2748: 000000013f945000-000000013f945fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxHeadless.exe 108c.2748: 000000013f946000-000000013f94afff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxHeadless.exe 108c.2748: 000000013f94b000-000000013f94bfff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxHeadless.exe 108c.2748: 000000013f94c000-000000013f94cfff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxHeadless.exe 108c.2748: 000000013f94d000-000000013f950fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxHeadless.exe 108c.2748: 000000013f951000-000000013f99bfff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxHeadless.exe 108c.2748: 000000013f99c000-fffff8037fb27fff 0x0001/0x0000 0x0000000 108c.2748: *000007feff810000-000007feff810fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\apisetschema.dll 108c.2748: 000007feff811000-000007fdff071fff 0x0001/0x0000 0x0000000 108c.2748: *000007fffffb0000-000007fffff8cfff 0x0002/0x0002 0x0040000 108c.2748: 000007fffffd3000-000007fffffc8fff 0x0001/0x0000 0x0000000 108c.2748: *000007fffffdd000-000007fffffdafff 0x0004/0x0004 0x0020000 108c.2748: *000007fffffdf000-000007fffffddfff 0x0004/0x0004 0x0020000 108c.2748: *000007fffffe0000-000007fffffcffff 0x0001/0x0002 0x0020000 108c.2748: apisetschema.dll: timestamp 0x568428c9 (rc=VINF_SUCCESS) 108c.2748: VBoxHeadless.exe: timestamp 0x569e6712 (rc=VINF_SUCCESS) 108c.2748: '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxHeadless.exe' has no imports 108c.2748: '\Device\HarddiskVolume3\Windows\System32\apisetschema.dll' has no imports 108c.2748: '\Device\HarddiskVolume3\Windows\System32\ntdll.dll' has no imports 108c.2748: supR3HardNtChildPurify: Done after 531 ms and 0 fixes (loop #0). 26e8.17c0: Log file opened: 5.0.14r105127 g_hStartupLog=0000000000000004 g_uNtVerCombined=0x611db110 26e8.17c0: supR3HardenedVmProcessInit: uNtDllAddr=00000000774f0000 26e8.17c0: ntdll.dll: timestamp 0x568429e5 (rc=VINF_SUCCESS) 26e8.17c0: New simple heap: #1 00000000002e0000 LB 0x400000 (for 1740800 allocation) 108c.2748: supR3HardenedEarlyCompact: Removed heap 1 (0x00000000320000 LB 0x400000) 108c.2748: supR3HardNtEnableThreadCreation: 26e8.17c0: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox' 26e8.17c0: System32: \Device\HarddiskVolume3\Windows\System32 26e8.17c0: WinSxS: \Device\HarddiskVolume3\Windows\winsxs 26e8.17c0: KnownDllPath: C:\Windows\system32 26e8.17c0: supR3HardenedVmProcessInit: Opening vboxdrv... 26e8.17c0: supR3HardenedVmProcessInit: Restoring LdrInitializeThunk... 26e8.17c0: supR3HardenedVmProcessInit: Returning to LdrInitializeThunk... 26e8.17c0: Registered Dll notification callback with NTDLL. 26e8.17c0: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\kernel32.dll) 26e8.17c0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\kernel32.dll 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\kernel32.dll (Input=kernel32.dll, rcNtResolve=0xc0150008) *pfFlags=0xffffffff pwszSearchPath=0000000000000000: [calling] 26e8.17c0: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\kernel32.dll [lacks WinVerifyTrust] 26e8.17c0: supR3HardenedDllNotificationCallback: load 00000000773d0000 LB 0x0011f000 C:\Windows\system32\kernel32.dll [fFlags=0x0] 26e8.17c0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\kernel32.dll [lacks WinVerifyTrust] 26e8.17c0: supR3HardenedDllNotificationCallback: load 000007fefd2f0000 LB 0x0006c000 C:\Windows\system32\KERNELBASE.dll [fFlags=0x0] 26e8.17c0: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\KernelBase.dll) 26e8.17c0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\KernelBase.dll 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00000000773d0000 'C:\Windows\system32\kernel32.dll' 26e8.17c0: supR3HardNtDisableThreadCreation: pvLdrInitThunk=000000007751b630 pvNtTerminateThread=000000007753dee0 108c.2748: supR3HardNtChildWaitFor: Found expected request 1 (CloseEvents) after 15 ms. 26e8.17c0: \SystemRoot\System32\ntdll.dll: 26e8.17c0: CreationTime: 2016-01-14T16:20:01.908282300Z 26e8.17c0: LastWriteTime: 2015-12-30T19:05:33.659216000Z 26e8.17c0: ChangeTime: 2016-01-14T16:39:40.974353400Z 26e8.17c0: FileAttributes: 0x20 26e8.17c0: Size: 0x1a67c0 26e8.17c0: NT Headers: 0xe0 26e8.17c0: Timestamp: 0x568429e5 26e8.17c0: Machine: 0x8664 - amd64 26e8.17c0: Timestamp: 0x568429e5 26e8.17c0: Image Version: 6.1 26e8.17c0: SizeOfImage: 0x1a9000 (1740800) 26e8.17c0: Resource Dir: 0x14d000 LB 0x5a028 26e8.17c0: ProductName: Microsoft® Windows® Operating System 26e8.17c0: ProductVersion: 6.1.7601.19110 26e8.17c0: FileVersion: 6.1.7601.19110 (win7sp1_gdr.151230-0600) 26e8.17c0: FileDescription: NT Layer DLL 26e8.17c0: \SystemRoot\System32\kernel32.dll: 26e8.17c0: CreationTime: 2016-01-14T16:20:02.364308400Z 26e8.17c0: LastWriteTime: 2015-12-30T18:57:55.730000000Z 26e8.17c0: ChangeTime: 2016-01-14T16:39:41.067953600Z 26e8.17c0: FileAttributes: 0x20 26e8.17c0: Size: 0x11c000 26e8.17c0: NT Headers: 0xe8 26e8.17c0: Timestamp: 0x568429dc 26e8.17c0: Machine: 0x8664 - amd64 26e8.17c0: Timestamp: 0x568429dc 26e8.17c0: Image Version: 6.1 26e8.17c0: SizeOfImage: 0x11f000 (1175552) 26e8.17c0: Resource Dir: 0x116000 LB 0x528 26e8.17c0: ProductName: Microsoft® Windows® Operating System 26e8.17c0: ProductVersion: 6.1.7601.19110 26e8.17c0: FileVersion: 6.1.7601.19110 (win7sp1_gdr.151230-0600) 26e8.17c0: FileDescription: Windows NT BASE API Client DLL 26e8.17c0: \SystemRoot\System32\KernelBase.dll: 26e8.17c0: CreationTime: 2016-01-14T16:20:01.135238100Z 26e8.17c0: LastWriteTime: 2015-12-30T18:57:55.761000000Z 26e8.17c0: ChangeTime: 2016-01-14T16:39:41.067953600Z 26e8.17c0: FileAttributes: 0x20 26e8.17c0: Size: 0x67a00 26e8.17c0: NT Headers: 0xe8 26e8.17c0: Timestamp: 0x568429dd 26e8.17c0: Machine: 0x8664 - amd64 26e8.17c0: Timestamp: 0x568429dd 26e8.17c0: Image Version: 6.1 26e8.17c0: SizeOfImage: 0x6c000 (442368) 26e8.17c0: Resource Dir: 0x6a000 LB 0x530 26e8.17c0: ProductName: Microsoft® Windows® Operating System 26e8.17c0: ProductVersion: 6.1.7601.19110 26e8.17c0: FileVersion: 6.1.7601.19110 (win7sp1_gdr.151230-0600) 26e8.17c0: FileDescription: Windows NT BASE API Client DLL 26e8.17c0: \SystemRoot\System32\apisetschema.dll: 26e8.17c0: CreationTime: 2016-01-14T16:20:00.643210000Z 26e8.17c0: LastWriteTime: 2015-12-30T18:54:58.839000000Z 26e8.17c0: ChangeTime: 2016-01-14T16:39:40.958753400Z 26e8.17c0: FileAttributes: 0x20 26e8.17c0: Size: 0x1a00 26e8.17c0: NT Headers: 0xc0 26e8.17c0: Timestamp: 0x568428c9 26e8.17c0: Machine: 0x8664 - amd64 26e8.17c0: Timestamp: 0x568428c9 26e8.17c0: Image Version: 6.1 26e8.17c0: SizeOfImage: 0x50000 (327680) 26e8.17c0: Resource Dir: 0x30000 LB 0x3f8 26e8.17c0: ProductName: Microsoft® Windows® Operating System 26e8.17c0: ProductVersion: 6.1.7601.19110 26e8.17c0: FileVersion: 6.1.7601.19110 (win7sp1_gdr.151230-0600) 26e8.17c0: FileDescription: ApiSet Schema DLL 26e8.17c0: Found driver NisDrv (0x400) 26e8.17c0: supR3HardenedWinFindAdversaries: 0x1400 26e8.17c0: \SystemRoot\System32\drivers\MpFilter.sys: 26e8.17c0: CreationTime: 2015-03-04T16:34:52.000000000Z 26e8.17c0: LastWriteTime: 2015-03-04T16:34:52.000000000Z 26e8.17c0: ChangeTime: 2015-08-12T16:13:16.404433700Z 26e8.17c0: FileAttributes: 0x20 26e8.17c0: Size: 0x44738 26e8.17c0: NT Headers: 0xf0 26e8.17c0: Timestamp: 0x54efb880 26e8.17c0: Machine: 0x8664 - amd64 26e8.17c0: Timestamp: 0x54efb880 26e8.17c0: Image Version: 6.3 26e8.17c0: SizeOfImage: 0x44000 (278528) 26e8.17c0: Resource Dir: 0x42000 LB 0xd50 26e8.17c0: ProductName: Microsoft Malware Protection 26e8.17c0: ProductVersion: 4.8.0200.0 26e8.17c0: FileVersion: 4.8.0200.0 26e8.17c0: FileDescription: Microsoft antimalware file system filter driver 26e8.17c0: \SystemRoot\System32\drivers\NisDrvWFP.sys: 26e8.17c0: CreationTime: 2013-09-27T06:53:06.000000000Z 26e8.17c0: LastWriteTime: 2015-03-04T16:34:52.000000000Z 26e8.17c0: ChangeTime: 2015-08-12T16:13:16.314428500Z 26e8.17c0: FileAttributes: 0x20 26e8.17c0: Size: 0x1e698 26e8.17c0: NT Headers: 0xf0 26e8.17c0: Timestamp: 0x54efb8af 26e8.17c0: Machine: 0x8664 - amd64 26e8.17c0: Timestamp: 0x54efb8af 26e8.17c0: Image Version: 6.3 26e8.17c0: SizeOfImage: 0x1f000 (126976) 26e8.17c0: Resource Dir: 0x1c000 LB 0x1b90 26e8.17c0: ProductName: Microsoft Malware Protection 26e8.17c0: ProductVersion: 4.8.0200.0 26e8.17c0: FileVersion: 4.8.0200.0 26e8.17c0: FileDescription: Microsoft Network Realtime Inspection Driver 26e8.17c0: \SystemRoot\System32\AntiTheftCredentialProvider.dll: 26e8.17c0: CreationTime: 2015-04-13T12:15:58.305930700Z 26e8.17c0: LastWriteTime: 2014-08-13T08:21:10.000000000Z 26e8.17c0: ChangeTime: 2015-04-13T12:15:23.263926400Z 26e8.17c0: FileAttributes: 0x20 26e8.17c0: Size: 0x9dc88 26e8.17c0: NT Headers: 0x108 26e8.17c0: Timestamp: 0x53eb1d24 26e8.17c0: Machine: 0x8664 - amd64 26e8.17c0: Timestamp: 0x53eb1d24 26e8.17c0: Image Version: 1.0 26e8.17c0: SizeOfImage: 0xa1000 (659456) 26e8.17c0: Resource Dir: 0x8d000 LB 0x11498 26e8.17c0: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox' 26e8.17c0: Calling main() 26e8.17c0: SUPR3HardenedMain: pszProgName=VBoxHeadless fFlags=0x0 26e8.17c0: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox' 26e8.17c0: '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxHeadless.exe' has no imports 26e8.17c0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxHeadless.exe) 26e8.17c0: SUPR3HardenedMain: Final process, opening VBoxDrv... 26e8.17c0: supR3HardenedEarlyCompact: Removed heap 1 (0x000000002e0000 LB 0x400000) 26e8.17c0: supR3HardNtEnableThreadCreation: 26e8.17c0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxSupLib.dll) 26e8.17c0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxSupLib.dll 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000008d56f0:C:\Windows\system32 [calling] 26e8.17c0: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxSupLib.dll [lacks WinVerifyTrust] 26e8.17c0: supR3HardenedDllNotificationCallback: load 000007fef8650000 LB 0x00005000 C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL [fFlags=0x0] 26e8.17c0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxSupLib.dll [lacks WinVerifyTrust] 26e8.17c0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxSupLib.dll [lacks WinVerifyTrust] 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000008d6610:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\Windows\System32;C:\Program Files (x86)\Java\jre7\bin;C:\Windows;C:\Windows\System32\wbem;C:\Windows\System32\WindowsPowerShell\v1.0;C:\Program Files (x86)\Git\cmd;C:\Program Files (x86)\CMake\bin;D:\mobileFX\Projects\Software\Coconut\Libs\node-v5.5.0\Release;e:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\nodejs\x86;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn;C:\Program Files (x86)\Microsoft SQL Server\100\DTS\Binn;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\VSShell\Common7\IDE;C:\Program Files\Microsoft SQL Server\110\Tools\Binn;C:\Program Files\Microsoft SQL Server\120\Tools\Binn;C:\Program Files (x86)\Windows Kits\8.1\Windows Performance Toolkit;C:\Program Files (x86)\Microsoft SDKs\TypeScript\1.0;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\emsdk\python\2.7.5.3_32bit;D:\mobileFX\Projects\Software\Coconut\IDE\Studio;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\Apache\bin;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\curl\bin;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\jq;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\MinGW\bin;D:\mobileFX\Projects\Software\Intralot\iRGS\3rd_party\node.js\Release\node_modules\.bin;C:\Program Files (x86)\Skype\Phone\;C:\Program Files (x86)\SSH Secure Shell;C:\Users\Administrator\AppData\Local\Pandoc\ [calling] 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef8650000 'C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL' 26e8.17c0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxSupLib.dll [lacks WinVerifyTrust] 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000008d6610:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\Windows\System32;C:\Program Files (x86)\Java\jre7\bin;C:\Windows;C:\Windows\System32\wbem;C:\Windows\System32\WindowsPowerShell\v1.0;C:\Program Files (x86)\Git\cmd;C:\Program Files (x86)\CMake\bin;D:\mobileFX\Projects\Software\Coconut\Libs\node-v5.5.0\Release;e:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\nodejs\x86;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn;C:\Program Files (x86)\Microsoft SQL Server\100\DTS\Binn;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\VSShell\Common7\IDE;C:\Program Files\Microsoft SQL Server\110\Tools\Binn;C:\Program Files\Microsoft SQL Server\120\Tools\Binn;C:\Program Files (x86)\Windows Kits\8.1\Windows Performance Toolkit;C:\Program Files (x86)\Microsoft SDKs\TypeScript\1.0;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\emsdk\python\2.7.5.3_32bit;D:\mobileFX\Projects\Software\Coconut\IDE\Studio;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\Apache\bin;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\curl\bin;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\jq;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\MinGW\bin;D:\mobileFX\Projects\Software\Intralot\iRGS\3rd_party\node.js\Release\node_modules\.bin;C:\Program Files (x86)\Skype\Phone\;C:\Program Files (x86)\SSH Secure Shell;C:\Users\Administrator\AppData\Local\Pandoc\ [calling] 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef8650000 'C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL' 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef8650000 'C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL' 26e8.17c0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. 26e8.17c0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'crypt32.dll'. 26e8.17c0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msasn1.dll'. 26e8.17c0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'rpcrt4.dll'. 26e8.17c0: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\wintrust.dll) 26e8.17c0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\wintrust.dll 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'... 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008] 26e8.17c0: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll) 26e8.17c0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msasn1.dll'... 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msasn1.dll' -> '\Device\HarddiskVolume3\Windows\System32\msasn1.dll' [rcNtRedir=0xc0150008] 26e8.17c0: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\msasn1.dll) 26e8.17c0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\msasn1.dll 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'crypt32.dll'... 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: 'crypt32.dll' -> '\Device\HarddiskVolume3\Windows\System32\crypt32.dll' [rcNtRedir=0xc0150008] 26e8.17c0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. 26e8.17c0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msasn1.dll'. 26e8.17c0: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\crypt32.dll) 26e8.17c0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\crypt32.dll 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] 26e8.17c0: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\msvcrt.dll) 26e8.17c0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\msvcrt.dll 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msasn1.dll'... 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msasn1.dll' -> '\Device\HarddiskVolume3\Windows\System32\msasn1.dll' [rcNtRedir=0xc0150008] 26e8.17c0: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\msasn1.dll [lacks WinVerifyTrust] 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] 26e8.17c0: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\Wintrust.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000008d56f0:C:\Windows\system32 [calling] 26e8.17c0: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\wintrust.dll [lacks WinVerifyTrust] 26e8.17c0: supR3HardenedDllNotificationCallback: load 000007fefd370000 LB 0x0003b000 C:\Windows\system32\Wintrust.dll [fFlags=0x0] 26e8.17c0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\wintrust.dll [lacks WinVerifyTrust] 26e8.17c0: supR3HardenedDllNotificationCallback: load 000007fefd930000 LB 0x0009f000 C:\Windows\system32\msvcrt.dll [fFlags=0x0] 26e8.17c0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] 26e8.17c0: supR3HardenedDllNotificationCallback: load 000007fefd4a0000 LB 0x0016d000 C:\Windows\system32\CRYPT32.dll [fFlags=0x0] 26e8.17c0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll [lacks WinVerifyTrust] 26e8.17c0: supR3HardenedDllNotificationCallback: load 000007fefd290000 LB 0x0000f000 C:\Windows\system32\MSASN1.dll [fFlags=0x0] 26e8.17c0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\msasn1.dll [lacks WinVerifyTrust] 26e8.17c0: supR3HardenedDllNotificationCallback: load 000007fefe110000 LB 0x0012d000 C:\Windows\system32\RPCRT4.dll [fFlags=0x0] 26e8.17c0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust] 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefd370000 'C:\Windows\system32\Wintrust.dll' 26e8.17c0: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\bcrypt.dll) 26e8.17c0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\bcrypt.dll 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\bcrypt.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=000000000094b4f0:C:\Windows\system32 [calling] 26e8.17c0: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\bcrypt.dll [lacks WinVerifyTrust] 26e8.17c0: supR3HardenedDllNotificationCallback: load 000007fefcc00000 LB 0x00022000 C:\Windows\system32\bcrypt.dll [fFlags=0x0] 26e8.17c0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\bcrypt.dll [lacks WinVerifyTrust] 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefcc00000 'C:\Windows\system32\bcrypt.dll' 26e8.17c0: bcrypt.dll loaded at 000007fefcc00000, BCryptOpenAlgorithmProvider at 000007fefcc02640, preloading providers: 26e8.17c0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'advapi32.dll'. 26e8.17c0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'bcrypt.dll'. 26e8.17c0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll) 26e8.17c0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcrypt.dll'... 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcrypt.dll' -> '\Device\HarddiskVolume3\Windows\System32\bcrypt.dll' [rcNtRedir=0xc0150008] 26e8.17c0: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\bcrypt.dll [lacks WinVerifyTrust] 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'... 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008] 26e8.17c0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. 26e8.17c0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'rpcrt4.dll'. 26e8.17c0: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\advapi32.dll) 26e8.17c0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\advapi32.dll 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'... 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008] 26e8.17c0: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust] 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] 26e8.17c0: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\bcryptprimitives.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000008d6610:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\Windows\System32;C:\Program Files (x86)\Java\jre7\bin;C:\Windows;C:\Windows\System32\wbem;C:\Windows\System32\WindowsPowerShell\v1.0;C:\Program Files (x86)\Git\cmd;C:\Program Files (x86)\CMake\bin;D:\mobileFX\Projects\Software\Coconut\Libs\node-v5.5.0\Release;e:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\nodejs\x86;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn;C:\Program Files (x86)\Microsoft SQL Server\100\DTS\Binn;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\VSShell\Common7\IDE;C:\Program Files\Microsoft SQL Server\110\Tools\Binn;C:\Program Files\Microsoft SQL Server\120\Tools\Binn;C:\Program Files (x86)\Windows Kits\8.1\Windows Performance Toolkit;C:\Program Files (x86)\Microsoft SDKs\TypeScript\1.0;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\emsdk\python\2.7.5.3_32bit;D:\mobileFX\Projects\Software\Coconut\IDE\Studio;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\Apache\bin;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\curl\bin;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\jq;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\MinGW\bin;D:\mobileFX\Projects\Software\Intralot\iRGS\3rd_party\node.js\Release\node_modules\.bin;C:\Program Files (x86)\Skype\Phone\;C:\Program Files (x86)\SSH Secure Shell;C:\Users\Administrator\AppData\Local\Pandoc\ [calling] 26e8.17c0: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll [lacks WinVerifyTrust] 26e8.17c0: supR3HardenedDllNotificationCallback: load 000007fefc700000 LB 0x0004c000 C:\Windows\system32\bcryptprimitives.dll [fFlags=0x0] 26e8.17c0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll [lacks WinVerifyTrust] 26e8.17c0: supR3HardenedDllNotificationCallback: load 000007fefdb60000 LB 0x000db000 C:\Windows\system32\ADVAPI32.dll [fFlags=0x0] 26e8.17c0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll [lacks WinVerifyTrust] 26e8.17c0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'msvcrt.dll'. 26e8.17c0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #14 'rpcrt4.dll'. 26e8.17c0: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\sechost.dll) 26e8.17c0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\sechost.dll 26e8.17c0: supR3HardenedDllNotificationCallback: load 000007fefe7f0000 LB 0x0001f000 C:\Windows\SYSTEM32\sechost.dll [fFlags=0x0] 26e8.17c0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\sechost.dll [lacks WinVerifyTrust] 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefc700000 'C:\Windows\system32\bcryptprimitives.dll' 26e8.17c0: BCryptOpenAlgorithmProvider(,'MD2',0,0) -> 0x0 (hAlgo=000000000094cb90) 26e8.17c0: BCryptOpenAlgorithmProvider(,'MD4',0,0) -> 0x0 (hAlgo=000000000094fa50) 26e8.17c0: BCryptOpenAlgorithmProvider(,'MD5',0,0) -> 0x0 (hAlgo=000000000094fb70) 26e8.17c0: BCryptOpenAlgorithmProvider(,'SHA1',0,0) -> 0x0 (hAlgo=000000000094fd80) 26e8.17c0: BCryptOpenAlgorithmProvider(,'SHA256',0,0) -> 0x0 (hAlgo=000000000094fea0) 26e8.17c0: BCryptOpenAlgorithmProvider(,'SHA512',0,0) -> 0x0 (hAlgo=000000000094ffd0) 26e8.17c0: BCryptOpenAlgorithmProvider(,'RSA',0,0) -> 0x0 (hAlgo=0000000000950210) 26e8.17c0: BCryptOpenAlgorithmProvider(,'DSA',0,0) -> 0x0 (hAlgo=0000000000950330) 26e8.17c0: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\cryptsp.dll) 26e8.17c0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\cryptsp.dll 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'... 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008] 26e8.17c0: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust] 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] 26e8.17c0: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\CRYPTSP.dll (Input=CRYPTSP.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000008d6610:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\Windows\System32;C:\Program Files (x86)\Java\jre7\bin;C:\Windows;C:\Windows\System32\wbem;C:\Windows\System32\WindowsPowerShell\v1.0;C:\Program Files (x86)\Git\cmd;C:\Program Files (x86)\CMake\bin;D:\mobileFX\Projects\Software\Coconut\Libs\node-v5.5.0\Release;e:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\nodejs\x86;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn;C:\Program Files (x86)\Microsoft SQL Server\100\DTS\Binn;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\VSShell\Common7\IDE;C:\Program Files\Microsoft SQL Server\110\Tools\Binn;C:\Program Files\Microsoft SQL Server\120\Tools\Binn;C:\Program Files (x86)\Windows Kits\8.1\Windows Performance Toolkit;C:\Program Files (x86)\Microsoft SDKs\TypeScript\1.0;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\emsdk\python\2.7.5.3_32bit;D:\mobileFX\Projects\Software\Coconut\IDE\Studio;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\Apache\bin;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\curl\bin;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\jq;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\MinGW\bin;D:\mobileFX\Projects\Software\Intralot\iRGS\3rd_party\node.js\Release\node_modules\.bin;C:\Program Files (x86)\Skype\Phone\;C:\Program Files (x86)\SSH Secure Shell;C:\Users\Administrator\AppData\Local\Pandoc\ [calling] 26e8.17c0: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\cryptsp.dll [lacks WinVerifyTrust] 26e8.17c0: supR3HardenedDllNotificationCallback: load 000007fefccc0000 LB 0x00018000 C:\Windows\system32\CRYPTSP.dll [fFlags=0x0] 26e8.17c0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\cryptsp.dll [lacks WinVerifyTrust] 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefccc0000 'C:\Windows\system32\CRYPTSP.dll' 26e8.17c0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. 26e8.17c0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\rsaenh.dll) 26e8.17c0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\rsaenh.dll 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] 26e8.17c0: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000008d6610:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\Windows\System32;C:\Program Files (x86)\Java\jre7\bin;C:\Windows;C:\Windows\System32\wbem;C:\Windows\System32\WindowsPowerShell\v1.0;C:\Program Files (x86)\Git\cmd;C:\Program Files (x86)\CMake\bin;D:\mobileFX\Projects\Software\Coconut\Libs\node-v5.5.0\Release;e:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\nodejs\x86;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn;C:\Program Files (x86)\Microsoft SQL Server\100\DTS\Binn;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\VSShell\Common7\IDE;C:\Program Files\Microsoft SQL Server\110\Tools\Binn;C:\Program Files\Microsoft SQL Server\120\Tools\Binn;C:\Program Files (x86)\Windows Kits\8.1\Windows Performance Toolkit;C:\Program Files (x86)\Microsoft SDKs\TypeScript\1.0;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\emsdk\python\2.7.5.3_32bit;D:\mobileFX\Projects\Software\Coconut\IDE\Studio;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\Apache\bin;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\curl\bin;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\jq;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\MinGW\bin;D:\mobileFX\Projects\Software\Intralot\iRGS\3rd_party\node.js\Release\node_modules\.bin;C:\Program Files (x86)\Skype\Phone\;C:\Program Files (x86)\SSH Secure Shell;C:\Users\Administrator\AppData\Local\Pandoc\ [calling] 26e8.17c0: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll [lacks WinVerifyTrust] 26e8.17c0: supR3HardenedDllNotificationCallback: load 000007fefc7a0000 LB 0x00047000 C:\Windows\system32\rsaenh.dll [fFlags=0x0] 26e8.17c0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll [lacks WinVerifyTrust] 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefc7a0000 'C:\Windows\system32\rsaenh.dll' 26e8.17c0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll [lacks WinVerifyTrust] 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\ADVAPI32.dll (Input=ADVAPI32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000008d6610:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\Windows\System32;C:\Program Files (x86)\Java\jre7\bin;C:\Windows;C:\Windows\System32\wbem;C:\Windows\System32\WindowsPowerShell\v1.0;C:\Program Files (x86)\Git\cmd;C:\Program Files (x86)\CMake\bin;D:\mobileFX\Projects\Software\Coconut\Libs\node-v5.5.0\Release;e:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\nodejs\x86;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn;C:\Program Files (x86)\Microsoft SQL Server\100\DTS\Binn;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\VSShell\Common7\IDE;C:\Program Files\Microsoft SQL Server\110\Tools\Binn;C:\Program Files\Microsoft SQL Server\120\Tools\Binn;C:\Program Files (x86)\Windows Kits\8.1\Windows Performance Toolkit;C:\Program Files (x86)\Microsoft SDKs\TypeScript\1.0;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\emsdk\python\2.7.5.3_32bit;D:\mobileFX\Projects\Software\Coconut\IDE\Studio;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\Apache\bin;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\curl\bin;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\jq;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\MinGW\bin;D:\mobileFX\Projects\Software\Intralot\iRGS\3rd_party\node.js\Release\node_modules\.bin;C:\Program Files (x86)\Skype\Phone\;C:\Program Files (x86)\SSH Secure Shell;C:\Users\Administrator\AppData\Local\Pandoc\ [calling] 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefdb60000 'C:\Windows\system32\ADVAPI32.dll' 26e8.17c0: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\cryptbase.dll) 26e8.17c0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\cryptbase.dll 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\CRYPTBASE.dll (Input=CRYPTBASE.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000008d6610:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\Windows\System32;C:\Program Files (x86)\Java\jre7\bin;C:\Windows;C:\Windows\System32\wbem;C:\Windows\System32\WindowsPowerShell\v1.0;C:\Program Files (x86)\Git\cmd;C:\Program Files (x86)\CMake\bin;D:\mobileFX\Projects\Software\Coconut\Libs\node-v5.5.0\Release;e:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\nodejs\x86;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn;C:\Program Files (x86)\Microsoft SQL Server\100\DTS\Binn;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\VSShell\Common7\IDE;C:\Program Files\Microsoft SQL Server\110\Tools\Binn;C:\Program Files\Microsoft SQL Server\120\Tools\Binn;C:\Program Files (x86)\Windows Kits\8.1\Windows Performance Toolkit;C:\Program Files (x86)\Microsoft SDKs\TypeScript\1.0;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\emsdk\python\2.7.5.3_32bit;D:\mobileFX\Projects\Software\Coconut\IDE\Studio;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\Apache\bin;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\curl\bin;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\jq;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\MinGW\bin;D:\mobileFX\Projects\Software\Intralot\iRGS\3rd_party\node.js\Release\node_modules\.bin;C:\Program Files (x86)\Skype\Phone\;C:\Program Files (x86)\SSH Secure Shell;C:\Users\Administrator\AppData\Local\Pandoc\ [calling] 26e8.17c0: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\cryptbase.dll [lacks WinVerifyTrust] 26e8.17c0: supR3HardenedDllNotificationCallback: load 000007fefd0d0000 LB 0x0000f000 C:\Windows\system32\CRYPTBASE.dll [fFlags=0x0] 26e8.17c0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\cryptbase.dll [lacks WinVerifyTrust] 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefd0d0000 'C:\Windows\system32\CRYPTBASE.dll' 26e8.17c0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\kernel32.dll [lacks WinVerifyTrust] 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\kernel32.dll (Input=kernel32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000008d6610:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\Windows\System32;C:\Program Files (x86)\Java\jre7\bin;C:\Windows;C:\Windows\System32\wbem;C:\Windows\System32\WindowsPowerShell\v1.0;C:\Program Files (x86)\Git\cmd;C:\Program Files (x86)\CMake\bin;D:\mobileFX\Projects\Software\Coconut\Libs\node-v5.5.0\Release;e:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\nodejs\x86;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn;C:\Program Files (x86)\Microsoft SQL Server\100\DTS\Binn;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\VSShell\Common7\IDE;C:\Program Files\Microsoft SQL Server\110\Tools\Binn;C:\Program Files\Microsoft SQL Server\120\Tools\Binn;C:\Program Files (x86)\Windows Kits\8.1\Windows Performance Toolkit;C:\Program Files (x86)\Microsoft SDKs\TypeScript\1.0;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\emsdk\python\2.7.5.3_32bit;D:\mobileFX\Projects\Software\Coconut\IDE\Studio;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\Apache\bin;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\curl\bin;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\jq;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\MinGW\bin;D:\mobileFX\Projects\Software\Intralot\iRGS\3rd_party\node.js\Release\node_modules\.bin;C:\Program Files (x86)\Skype\Phone\;C:\Program Files (x86)\SSH Secure Shell;C:\Users\Administrator\AppData\Local\Pandoc\ [calling] 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00000000773d0000 'C:\Windows\system32\kernel32.dll' 26e8.17c0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\wintrust.dll [lacks WinVerifyTrust] 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\WINTRUST.DLL (Input=WINTRUST.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000008d6610:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\Windows\System32;C:\Program Files (x86)\Java\jre7\bin;C:\Windows;C:\Windows\System32\wbem;C:\Windows\System32\WindowsPowerShell\v1.0;C:\Program Files (x86)\Git\cmd;C:\Program Files (x86)\CMake\bin;D:\mobileFX\Projects\Software\Coconut\Libs\node-v5.5.0\Release;e:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\nodejs\x86;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn;C:\Program Files (x86)\Microsoft SQL Server\100\DTS\Binn;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\VSShell\Common7\IDE;C:\Program Files\Microsoft SQL Server\110\Tools\Binn;C:\Program Files\Microsoft SQL Server\120\Tools\Binn;C:\Program Files (x86)\Windows Kits\8.1\Windows Performance Toolkit;C:\Program Files (x86)\Microsoft SDKs\TypeScript\1.0;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\emsdk\python\2.7.5.3_32bit;D:\mobileFX\Projects\Software\Coconut\IDE\Studio;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\Apache\bin;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\curl\bin;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\jq;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\MinGW\bin;D:\mobileFX\Projects\Software\Intralot\iRGS\3rd_party\node.js\Release\node_modules\.bin;C:\Program Files (x86)\Skype\Phone\;C:\Program Files (x86)\SSH Secure Shell;C:\Users\Administrator\AppData\Local\Pandoc\ [calling] 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefd370000 'C:\Windows\system32\WINTRUST.DLL' 26e8.17c0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll [lacks WinVerifyTrust] 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\CRYPT32.dll (rcNtResolve=0xc0150008) *pfFlags=0x1002 pwszSearchPath=00000000008d6610:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\Windows\System32;C:\Program Files (x86)\Java\jre7\bin;C:\Windows;C:\Windows\System32\wbem;C:\Windows\System32\WindowsPowerShell\v1.0;C:\Program Files (x86)\Git\cmd;C:\Program Files (x86)\CMake\bin;D:\mobileFX\Projects\Software\Coconut\Libs\node-v5.5.0\Release;e:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\nodejs\x86;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn;C:\Program Files (x86)\Microsoft SQL Server\100\DTS\Binn;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\VSShell\Common7\IDE;C:\Program Files\Microsoft SQL Server\110\Tools\Binn;C:\Program Files\Microsoft SQL Server\120\Tools\Binn;C:\Program Files (x86)\Windows Kits\8.1\Windows Performance Toolkit;C:\Program Files (x86)\Microsoft SDKs\TypeScript\1.0;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\emsdk\python\2.7.5.3_32bit;D:\mobileFX\Projects\Software\Coconut\IDE\Studio;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\Apache\bin;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\curl\bin;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\jq;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\MinGW\bin;D:\mobileFX\Projects\Software\Intralot\iRGS\3rd_party\node.js\Release\node_modules\.bin;C:\Program Files (x86)\Skype\Phone\;C:\Program Files (x86)\SSH Secure Shell;C:\Users\Administrator\AppData\Local\Pandoc\ [calling] 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefd4a0000 'C:\Windows\system32\CRYPT32.dll' 26e8.17c0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. 26e8.17c0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #16 'advapi32.dll'. 26e8.17c0: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\imagehlp.dll) 26e8.17c0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\imagehlp.dll 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'... 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008] 26e8.17c0: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll [lacks WinVerifyTrust] 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] 26e8.17c0: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\imagehlp.dll (Input=imagehlp.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000008d6610:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\Windows\System32;C:\Program Files (x86)\Java\jre7\bin;C:\Windows;C:\Windows\System32\wbem;C:\Windows\System32\WindowsPowerShell\v1.0;C:\Program Files (x86)\Git\cmd;C:\Program Files (x86)\CMake\bin;D:\mobileFX\Projects\Software\Coconut\Libs\node-v5.5.0\Release;e:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\nodejs\x86;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn;C:\Program Files (x86)\Microsoft SQL Server\100\DTS\Binn;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\VSShell\Common7\IDE;C:\Program Files\Microsoft SQL Server\110\Tools\Binn;C:\Program Files\Microsoft SQL Server\120\Tools\Binn;C:\Program Files (x86)\Windows Kits\8.1\Windows Performance Toolkit;C:\Program Files (x86)\Microsoft SDKs\TypeScript\1.0;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\emsdk\python\2.7.5.3_32bit;D:\mobileFX\Projects\Software\Coconut\IDE\Studio;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\Apache\bin;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\curl\bin;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\jq;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\MinGW\bin;D:\mobileFX\Projects\Software\Intralot\iRGS\3rd_party\node.js\Release\node_modules\.bin;C:\Program Files (x86)\Skype\Phone\;C:\Program Files (x86)\SSH Secure Shell;C:\Users\Administrator\AppData\Local\Pandoc\ [calling] 26e8.17c0: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\imagehlp.dll [lacks WinVerifyTrust] 26e8.17c0: supR3HardenedDllNotificationCallback: load 000007feff700000 LB 0x00019000 C:\Windows\system32\imagehlp.dll [fFlags=0x0] 26e8.17c0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\imagehlp.dll [lacks WinVerifyTrust] 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feff700000 'C:\Windows\system32\imagehlp.dll' 26e8.17c0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\cryptsp.dll [lacks WinVerifyTrust] 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\CRYPTSP.dll (Input=CRYPTSP.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000008d6610:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\Windows\System32;C:\Program Files (x86)\Java\jre7\bin;C:\Windows;C:\Windows\System32\wbem;C:\Windows\System32\WindowsPowerShell\v1.0;C:\Program Files (x86)\Git\cmd;C:\Program Files (x86)\CMake\bin;D:\mobileFX\Projects\Software\Coconut\Libs\node-v5.5.0\Release;e:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\nodejs\x86;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn;C:\Program Files (x86)\Microsoft SQL Server\100\DTS\Binn;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\VSShell\Common7\IDE;C:\Program Files\Microsoft SQL Server\110\Tools\Binn;C:\Program Files\Microsoft SQL Server\120\Tools\Binn;C:\Program Files (x86)\Windows Kits\8.1\Windows Performance Toolkit;C:\Program Files (x86)\Microsoft SDKs\TypeScript\1.0;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\emsdk\python\2.7.5.3_32bit;D:\mobileFX\Projects\Software\Coconut\IDE\Studio;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\Apache\bin;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\curl\bin;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\jq;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\MinGW\bin;D:\mobileFX\Projects\Software\Intralot\iRGS\3rd_party\node.js\Release\node_modules\.bin;C:\Program Files (x86)\Skype\Phone\;C:\Program Files (x86)\SSH Secure Shell;C:\Users\Administrator\AppData\Local\Pandoc\ [calling] 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefccc0000 'C:\Windows\system32\CRYPTSP.dll' 26e8.17c0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'gdi32.dll'. 26e8.17c0: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\user32.dll) 26e8.17c0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\user32.dll 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'... 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008] 26e8.17c0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'user32.dll'. 26e8.17c0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'lpk.dll'. 26e8.17c0: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\gdi32.dll) 26e8.17c0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\gdi32.dll 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'lpk.dll'... 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: 'lpk.dll' -> '\Device\HarddiskVolume3\Windows\System32\lpk.dll' [rcNtRedir=0xc0150008] 26e8.17c0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'gdi32.dll'. 26e8.17c0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'user32.dll'. 26e8.17c0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'usp10.dll'. 26e8.17c0: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\lpk.dll) 26e8.17c0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\lpk.dll 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008] 26e8.17c0: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust] 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'usp10.dll'... 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: 'usp10.dll' -> '\Device\HarddiskVolume3\Windows\System32\usp10.dll' [rcNtRedir=0xc0150008] 26e8.17c0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. 26e8.17c0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'user32.dll'. 26e8.17c0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'gdi32.dll'. 26e8.17c0: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\usp10.dll) 26e8.17c0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\usp10.dll 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008] 26e8.17c0: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust] 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'... 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008] 26e8.17c0: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust] 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'... 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008] 26e8.17c0: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust] 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008] 26e8.17c0: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust] 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] 26e8.17c0: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\USER32.dll (Input=USER32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000008d6610:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\Windows\System32;C:\Program Files (x86)\Java\jre7\bin;C:\Windows;C:\Windows\System32\wbem;C:\Windows\System32\WindowsPowerShell\v1.0;C:\Program Files (x86)\Git\cmd;C:\Program Files (x86)\CMake\bin;D:\mobileFX\Projects\Software\Coconut\Libs\node-v5.5.0\Release;e:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\nodejs\x86;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn;C:\Program Files (x86)\Microsoft SQL Server\100\DTS\Binn;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\VSShell\Common7\IDE;C:\Program Files\Microsoft SQL Server\110\Tools\Binn;C:\Program Files\Microsoft SQL Server\120\Tools\Binn;C:\Program Files (x86)\Windows Kits\8.1\Windows Performance Toolkit;C:\Program Files (x86)\Microsoft SDKs\TypeScript\1.0;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\emsdk\python\2.7.5.3_32bit;D:\mobileFX\Projects\Software\Coconut\IDE\Studio;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\Apache\bin;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\curl\bin;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\jq;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\MinGW\bin;D:\mobileFX\Projects\Software\Intralot\iRGS\3rd_party\node.js\Release\node_modules\.bin;C:\Program Files (x86)\Skype\Phone\;C:\Program Files (x86)\SSH Secure Shell;C:\Users\Administrator\AppData\Local\Pandoc\ [calling] 26e8.17c0: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust] 26e8.17c0: supR3HardenedDllNotificationCallback: load 00000000772d0000 LB 0x000fa000 C:\Windows\system32\USER32.dll [fFlags=0x0] 26e8.17c0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust] 26e8.17c0: supR3HardenedDllNotificationCallback: load 000007fefd8c0000 LB 0x00067000 C:\Windows\system32\GDI32.dll [fFlags=0x0] 26e8.17c0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust] 26e8.17c0: supR3HardenedDllNotificationCallback: load 000007fefd8b0000 LB 0x0000e000 C:\Windows\system32\LPK.dll [fFlags=0x0] 26e8.17c0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\lpk.dll [lacks WinVerifyTrust] 26e8.17c0: supR3HardenedDllNotificationCallback: load 000007feff720000 LB 0x000ca000 C:\Windows\system32\USP10.dll [fFlags=0x0] 26e8.17c0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\usp10.dll [lacks WinVerifyTrust] 26e8.17c0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust] 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\gdi32.dll (Input=gdi32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000008d6610:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\Windows\System32;C:\Program Files (x86)\Java\jre7\bin;C:\Windows;C:\Windows\System32\wbem;C:\Windows\System32\WindowsPowerShell\v1.0;C:\Program Files (x86)\Git\cmd;C:\Program Files (x86)\CMake\bin;D:\mobileFX\Projects\Software\Coconut\Libs\node-v5.5.0\Release;e:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\nodejs\x86;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn;C:\Program Files (x86)\Microsoft SQL Server\100\DTS\Binn;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\VSShell\Common7\IDE;C:\Program Files\Microsoft SQL Server\110\Tools\Binn;C:\Program Files\Microsoft SQL Server\120\Tools\Binn;C:\Program Files (x86)\Windows Kits\8.1\Windows Performance Toolkit;C:\Program Files (x86)\Microsoft SDKs\TypeScript\1.0;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\emsdk\python\2.7.5.3_32bit;D:\mobileFX\Projects\Software\Coconut\IDE\Studio;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\Apache\bin;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\curl\bin;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\jq;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\MinGW\bin;D:\mobileFX\Projects\Software\Intralot\iRGS\3rd_party\node.js\Release\node_modules\.bin;C:\Program Files (x86)\Skype\Phone\;C:\Program Files (x86)\SSH Secure Shell;C:\Users\Administrator\AppData\Local\Pandoc\ [calling] 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefd8c0000 'C:\Windows\system32\gdi32.dll' 26e8.17c0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'user32.dll'. 26e8.17c0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'gdi32.dll'. 26e8.17c0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msctf.dll'. 26e8.17c0: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\imm32.dll) 26e8.17c0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\imm32.dll 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msctf.dll'... 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msctf.dll' -> '\Device\HarddiskVolume3\Windows\System32\msctf.dll' [rcNtRedir=0xc0150008] 26e8.17c0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. 26e8.17c0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'user32.dll'. 26e8.17c0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'gdi32.dll'. 26e8.17c0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'imm32.dll'. 26e8.17c0: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\msctf.dll) 26e8.17c0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\msctf.dll 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'... 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008] 26e8.17c0: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust] 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008] 26e8.17c0: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust] 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'imm32.dll'... 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: 'imm32.dll' -> '\Device\HarddiskVolume3\Windows\System32\imm32.dll' [rcNtRedir=0xc0150008] 26e8.17c0: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\imm32.dll [lacks WinVerifyTrust] 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'... 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008] 26e8.17c0: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust] 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008] 26e8.17c0: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust] 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] 26e8.17c0: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\IMM32.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000008d6610:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\Windows\System32;C:\Program Files (x86)\Java\jre7\bin;C:\Windows;C:\Windows\System32\wbem;C:\Windows\System32\WindowsPowerShell\v1.0;C:\Program Files (x86)\Git\cmd;C:\Program Files (x86)\CMake\bin;D:\mobileFX\Projects\Software\Coconut\Libs\node-v5.5.0\Release;e:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\nodejs\x86;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn;C:\Program Files (x86)\Microsoft SQL Server\100\DTS\Binn;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\VSShell\Common7\IDE;C:\Program Files\Microsoft SQL Server\110\Tools\Binn;C:\Program Files\Microsoft SQL Server\120\Tools\Binn;C:\Program Files (x86)\Windows Kits\8.1\Windows Performance Toolkit;C:\Program Files (x86)\Microsoft SDKs\TypeScript\1.0;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\emsdk\python\2.7.5.3_32bit;D:\mobileFX\Projects\Software\Coconut\IDE\Studio;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\Apache\bin;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\curl\bin;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\jq;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\MinGW\bin;D:\mobileFX\Projects\Software\Intralot\iRGS\3rd_party\node.js\Release\node_modules\.bin;C:\Program Files (x86)\Skype\Phone\;C:\Program Files (x86)\SSH Secure Shell;C:\Users\Administrator\AppData\Local\Pandoc\ [calling] 26e8.17c0: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\imm32.dll [lacks WinVerifyTrust] 26e8.17c0: supR3HardenedDllNotificationCallback: load 000007fefe760000 LB 0x0002e000 C:\Windows\system32\IMM32.DLL [fFlags=0x0] 26e8.17c0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\imm32.dll [lacks WinVerifyTrust] 26e8.17c0: supR3HardenedDllNotificationCallback: load 000007fefe000000 LB 0x00109000 C:\Windows\system32\MSCTF.dll [fFlags=0x0] 26e8.17c0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\msctf.dll [lacks WinVerifyTrust] 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefe760000 'C:\Windows\system32\IMM32.DLL' 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00000000772d0000 'C:\Windows\system32\USER32.dll' 26e8.17c0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'bcrypt.dll'. 26e8.17c0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcrt.dll'. 26e8.17c0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'msasn1.dll'. 26e8.17c0: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\ncrypt.dll) 26e8.17c0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\ncrypt.dll 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msasn1.dll'... 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msasn1.dll' -> '\Device\HarddiskVolume3\Windows\System32\msasn1.dll' [rcNtRedir=0xc0150008] 26e8.17c0: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\msasn1.dll [lacks WinVerifyTrust] 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] 26e8.17c0: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcrypt.dll'... 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcrypt.dll' -> '\Device\HarddiskVolume3\Windows\System32\bcrypt.dll' [rcNtRedir=0xc0150008] 26e8.17c0: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\bcrypt.dll [lacks WinVerifyTrust] 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\ncrypt.dll (Input=ncrypt.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000008d6610:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\Windows\System32;C:\Program Files (x86)\Java\jre7\bin;C:\Windows;C:\Windows\System32\wbem;C:\Windows\System32\WindowsPowerShell\v1.0;C:\Program Files (x86)\Git\cmd;C:\Program Files (x86)\CMake\bin;D:\mobileFX\Projects\Software\Coconut\Libs\node-v5.5.0\Release;e:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\nodejs\x86;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn;C:\Program Files (x86)\Microsoft SQL Server\100\DTS\Binn;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\VSShell\Common7\IDE;C:\Program Files\Microsoft SQL Server\110\Tools\Binn;C:\Program Files\Microsoft SQL Server\120\Tools\Binn;C:\Program Files (x86)\Windows Kits\8.1\Windows Performance Toolkit;C:\Program Files (x86)\Microsoft SDKs\TypeScript\1.0;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\emsdk\python\2.7.5.3_32bit;D:\mobileFX\Projects\Software\Coconut\IDE\Studio;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\Apache\bin;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\curl\bin;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\jq;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\MinGW\bin;D:\mobileFX\Projects\Software\Intralot\iRGS\3rd_party\node.js\Release\node_modules\.bin;C:\Program Files (x86)\Skype\Phone\;C:\Program Files (x86)\SSH Secure Shell;C:\Users\Administrator\AppData\Local\Pandoc\ [calling] 26e8.17c0: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\ncrypt.dll [lacks WinVerifyTrust] 26e8.17c0: supR3HardenedDllNotificationCallback: load 000007fefcc30000 LB 0x00050000 C:\Windows\system32\ncrypt.dll [fFlags=0x0] 26e8.17c0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\ncrypt.dll [lacks WinVerifyTrust] 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefcc30000 'C:\Windows\system32\ncrypt.dll' 26e8.17c0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\bcrypt.dll [lacks WinVerifyTrust] 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\bcrypt.dll (Input=bcrypt.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000008d6610:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\Windows\System32;C:\Program Files (x86)\Java\jre7\bin;C:\Windows;C:\Windows\System32\wbem;C:\Windows\System32\WindowsPowerShell\v1.0;C:\Program Files (x86)\Git\cmd;C:\Program Files (x86)\CMake\bin;D:\mobileFX\Projects\Software\Coconut\Libs\node-v5.5.0\Release;e:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\nodejs\x86;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn;C:\Program Files (x86)\Microsoft SQL Server\100\DTS\Binn;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\VSShell\Common7\IDE;C:\Program Files\Microsoft SQL Server\110\Tools\Binn;C:\Program Files\Microsoft SQL Server\120\Tools\Binn;C:\Program Files (x86)\Windows Kits\8.1\Windows Performance Toolkit;C:\Program Files (x86)\Microsoft SDKs\TypeScript\1.0;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\emsdk\python\2.7.5.3_32bit;D:\mobileFX\Projects\Software\Coconut\IDE\Studio;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\Apache\bin;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\curl\bin;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\jq;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\MinGW\bin;D:\mobileFX\Projects\Software\Intralot\iRGS\3rd_party\node.js\Release\node_modules\.bin;C:\Program Files (x86)\Skype\Phone\;C:\Program Files (x86)\SSH Secure Shell;C:\Users\Administrator\AppData\Local\Pandoc\ [calling] 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefcc00000 'C:\Windows\system32\bcrypt.dll' 26e8.17c0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. 26e8.17c0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #17 'rpcrt4.dll'. 26e8.17c0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #18 'profapi.dll'. 26e8.17c0: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\userenv.dll) 26e8.17c0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\userenv.dll 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'profapi.dll'... 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: 'profapi.dll' -> '\Device\HarddiskVolume3\Windows\System32\profapi.dll' [rcNtRedir=0xc0150008] 26e8.17c0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. 26e8.17c0: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\profapi.dll) 26e8.17c0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\profapi.dll 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'... 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008] 26e8.17c0: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust] 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] 26e8.17c0: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] 26e8.17c0: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\USERENV.dll (Input=USERENV.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000008d6610:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\Windows\System32;C:\Program Files (x86)\Java\jre7\bin;C:\Windows;C:\Windows\System32\wbem;C:\Windows\System32\WindowsPowerShell\v1.0;C:\Program Files (x86)\Git\cmd;C:\Program Files (x86)\CMake\bin;D:\mobileFX\Projects\Software\Coconut\Libs\node-v5.5.0\Release;e:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\nodejs\x86;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn;C:\Program Files (x86)\Microsoft SQL Server\100\DTS\Binn;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\VSShell\Common7\IDE;C:\Program Files\Microsoft SQL Server\110\Tools\Binn;C:\Program Files\Microsoft SQL Server\120\Tools\Binn;C:\Program Files (x86)\Windows Kits\8.1\Windows Performance Toolkit;C:\Program Files (x86)\Microsoft SDKs\TypeScript\1.0;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\emsdk\python\2.7.5.3_32bit;D:\mobileFX\Projects\Software\Coconut\IDE\Studio;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\Apache\bin;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\curl\bin;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\jq;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\MinGW\bin;D:\mobileFX\Projects\Software\Intralot\iRGS\3rd_party\node.js\Release\node_modules\.bin;C:\Program Files (x86)\Skype\Phone\;C:\Program Files (x86)\SSH Secure Shell;C:\Users\Administrator\AppData\Local\Pandoc\ [calling] 26e8.17c0: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\userenv.dll [lacks WinVerifyTrust] 26e8.17c0: supR3HardenedDllNotificationCallback: load 000007fefd3c0000 LB 0x0001e000 C:\Windows\system32\USERENV.dll [fFlags=0x0] 26e8.17c0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\userenv.dll [lacks WinVerifyTrust] 26e8.17c0: supR3HardenedDllNotificationCallback: load 000007fefd2a0000 LB 0x0000f000 C:\Windows\system32\profapi.dll [fFlags=0x0] 26e8.17c0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\profapi.dll [lacks WinVerifyTrust] 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefd3c0000 'C:\Windows\system32\USERENV.dll' 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: pName=API-MS-Win-Security-SDDL-L1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=00000000008d6610:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\Windows\System32;C:\Program Files (x86)\Java\jre7\bin;C:\Windows;C:\Windows\System32\wbem;C:\Windows\System32\WindowsPowerShell\v1.0;C:\Program Files (x86)\Git\cmd;C:\Program Files (x86)\CMake\bin;D:\mobileFX\Projects\Software\Coconut\Libs\node-v5.5.0\Release;e:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\nodejs\x86;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn;C:\Program Files (x86)\Microsoft SQL Server\100\DTS\Binn;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\VSShell\Common7\IDE;C:\Program Files\Microsoft SQL Server\110\Tools\Binn;C:\Program Files\Microsoft SQL Server\120\Tools\Binn;C:\Program Files (x86)\Windows Kits\8.1\Windows Performance Toolkit;C:\Program Files (x86)\Microsoft SDKs\TypeScript\1.0;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\emsdk\python\2.7.5.3_32bit;D:\mobileFX\Projects\Software\Coconut\IDE\Studio;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\Apache\bin;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\curl\bin;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\jq;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\MinGW\bin;D:\mobileFX\Projects\Software\Intralot\iRGS\3rd_party\node.js\Release\node_modules\.bin;C:\Program Files (x86)\Skype\Phone\;C:\Program Files (x86)\SSH Secure Shell;C:\Users\Administrator\AppData\Local\Pandoc\ [calling] 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefe7f0000 'API-MS-Win-Security-SDDL-L1-1-0.dll' 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: pName=API-MS-Win-Security-SDDL-L1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=00000000008d6610:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\Windows\System32;C:\Program Files (x86)\Java\jre7\bin;C:\Windows;C:\Windows\System32\wbem;C:\Windows\System32\WindowsPowerShell\v1.0;C:\Program Files (x86)\Git\cmd;C:\Program Files (x86)\CMake\bin;D:\mobileFX\Projects\Software\Coconut\Libs\node-v5.5.0\Release;e:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\nodejs\x86;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn;C:\Program Files (x86)\Microsoft SQL Server\100\DTS\Binn;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\VSShell\Common7\IDE;C:\Program Files\Microsoft SQL Server\110\Tools\Binn;C:\Program Files\Microsoft SQL Server\120\Tools\Binn;C:\Program Files (x86)\Windows Kits\8.1\Windows Performance Toolkit;C:\Program Files (x86)\Microsoft SDKs\TypeScript\1.0;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\emsdk\python\2.7.5.3_32bit;D:\mobileFX\Projects\Software\Coconut\IDE\Studio;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\Apache\bin;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\curl\bin;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\jq;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\MinGW\bin;D:\mobileFX\Projects\Software\Intralot\iRGS\3rd_party\node.js\Release\node_modules\.bin;C:\Program Files (x86)\Skype\Phone\;C:\Program Files (x86)\SSH Secure Shell;C:\Users\Administrator\AppData\Local\Pandoc\ [calling] 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefe7f0000 'API-MS-Win-Security-SDDL-L1-1-0.dll' 26e8.17c0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. 26e8.17c0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #16 'rpcrt4.dll'. 26e8.17c0: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\gpapi.dll) 26e8.17c0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\gpapi.dll 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'... 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008] 26e8.17c0: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust] 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] 26e8.17c0: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\GPAPI.dll (Input=GPAPI.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000008d6610:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\Windows\System32;C:\Program Files (x86)\Java\jre7\bin;C:\Windows;C:\Windows\System32\wbem;C:\Windows\System32\WindowsPowerShell\v1.0;C:\Program Files (x86)\Git\cmd;C:\Program Files (x86)\CMake\bin;D:\mobileFX\Projects\Software\Coconut\Libs\node-v5.5.0\Release;e:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\nodejs\x86;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn;C:\Program Files (x86)\Microsoft SQL Server\100\DTS\Binn;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\VSShell\Common7\IDE;C:\Program Files\Microsoft SQL Server\110\Tools\Binn;C:\Program Files\Microsoft SQL Server\120\Tools\Binn;C:\Program Files (x86)\Windows Kits\8.1\Windows Performance Toolkit;C:\Program Files (x86)\Microsoft SDKs\TypeScript\1.0;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\emsdk\python\2.7.5.3_32bit;D:\mobileFX\Projects\Software\Coconut\IDE\Studio;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\Apache\bin;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\curl\bin;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\jq;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\MinGW\bin;D:\mobileFX\Projects\Software\Intralot\iRGS\3rd_party\node.js\Release\node_modules\.bin;C:\Program Files (x86)\Skype\Phone\;C:\Program Files (x86)\SSH Secure Shell;C:\Users\Administrator\AppData\Local\Pandoc\ [calling] 26e8.17c0: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\gpapi.dll [lacks WinVerifyTrust] 26e8.17c0: supR3HardenedDllNotificationCallback: load 000007fefc600000 LB 0x0001b000 C:\Windows\system32\GPAPI.dll [fFlags=0x0] 26e8.17c0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\gpapi.dll [lacks WinVerifyTrust] 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefc600000 'C:\Windows\system32\GPAPI.dll' 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: pName=API-MS-WIN-Service-Management-L1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=00000000008d6610:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\Windows\System32;C:\Program Files (x86)\Java\jre7\bin;C:\Windows;C:\Windows\System32\wbem;C:\Windows\System32\WindowsPowerShell\v1.0;C:\Program Files (x86)\Git\cmd;C:\Program Files (x86)\CMake\bin;D:\mobileFX\Projects\Software\Coconut\Libs\node-v5.5.0\Release;e:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\nodejs\x86;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn;C:\Program Files (x86)\Microsoft SQL Server\100\DTS\Binn;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\VSShell\Common7\IDE;C:\Program Files\Microsoft SQL Server\110\Tools\Binn;C:\Program Files\Microsoft SQL Server\120\Tools\Binn;C:\Program Files (x86)\Windows Kits\8.1\Windows Performance Toolkit;C:\Program Files (x86)\Microsoft SDKs\TypeScript\1.0;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\emsdk\python\2.7.5.3_32bit;D:\mobileFX\Projects\Software\Coconut\IDE\Studio;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\Apache\bin;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\curl\bin;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\jq;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\MinGW\bin;D:\mobileFX\Projects\Software\Intralot\iRGS\3rd_party\node.js\Release\node_modules\.bin;C:\Program Files (x86)\Skype\Phone\;C:\Program Files (x86)\SSH Secure Shell;C:\Users\Administrator\AppData\Local\Pandoc\ [calling] 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefe7f0000 'API-MS-WIN-Service-Management-L1-1-0.dll' 26e8.17c0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust] 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rpcrt4.dll (Input=rpcrt4.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000008d6610:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\Windows\System32;C:\Program Files (x86)\Java\jre7\bin;C:\Windows;C:\Windows\System32\wbem;C:\Windows\System32\WindowsPowerShell\v1.0;C:\Program Files (x86)\Git\cmd;C:\Program Files (x86)\CMake\bin;D:\mobileFX\Projects\Software\Coconut\Libs\node-v5.5.0\Release;e:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\nodejs\x86;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn;C:\Program Files (x86)\Microsoft SQL Server\100\DTS\Binn;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\VSShell\Common7\IDE;C:\Program Files\Microsoft SQL Server\110\Tools\Binn;C:\Program Files\Microsoft SQL Server\120\Tools\Binn;C:\Program Files (x86)\Windows Kits\8.1\Windows Performance Toolkit;C:\Program Files (x86)\Microsoft SDKs\TypeScript\1.0;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\emsdk\python\2.7.5.3_32bit;D:\mobileFX\Projects\Software\Coconut\IDE\Studio;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\Apache\bin;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\curl\bin;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\jq;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\MinGW\bin;D:\mobileFX\Projects\Software\Intralot\iRGS\3rd_party\node.js\Release\node_modules\.bin;C:\Program Files (x86)\Skype\Phone\;C:\Program Files (x86)\SSH Secure Shell;C:\Users\Administrator\AppData\Local\Pandoc\ [calling] 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefe110000 'C:\Windows\system32\rpcrt4.dll' 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: pName=API-MS-WIN-Service-Management-L2-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=00000000008d6610:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\Windows\System32;C:\Program Files (x86)\Java\jre7\bin;C:\Windows;C:\Windows\System32\wbem;C:\Windows\System32\WindowsPowerShell\v1.0;C:\Program Files (x86)\Git\cmd;C:\Program Files (x86)\CMake\bin;D:\mobileFX\Projects\Software\Coconut\Libs\node-v5.5.0\Release;e:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\nodejs\x86;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn;C:\Program Files (x86)\Microsoft SQL Server\100\DTS\Binn;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\VSShell\Common7\IDE;C:\Program Files\Microsoft SQL Server\110\Tools\Binn;C:\Program Files\Microsoft SQL Server\120\Tools\Binn;C:\Program Files (x86)\Windows Kits\8.1\Windows Performance Toolkit;C:\Program Files (x86)\Microsoft SDKs\TypeScript\1.0;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\emsdk\python\2.7.5.3_32bit;D:\mobileFX\Projects\Software\Coconut\IDE\Studio;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\Apache\bin;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\curl\bin;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\jq;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\MinGW\bin;D:\mobileFX\Projects\Software\Intralot\iRGS\3rd_party\node.js\Release\node_modules\.bin;C:\Program Files (x86)\Skype\Phone\;C:\Program Files (x86)\SSH Secure Shell;C:\Users\Administrator\AppData\Local\Pandoc\ [calling] 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefe7f0000 'API-MS-WIN-Service-Management-L2-1-0.dll' 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: pName=API-MS-Win-Security-SDDL-L1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=00000000008d6610:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\Windows\System32;C:\Program Files (x86)\Java\jre7\bin;C:\Windows;C:\Windows\System32\wbem;C:\Windows\System32\WindowsPowerShell\v1.0;C:\Program Files (x86)\Git\cmd;C:\Program Files (x86)\CMake\bin;D:\mobileFX\Projects\Software\Coconut\Libs\node-v5.5.0\Release;e:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\nodejs\x86;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn;C:\Program Files (x86)\Microsoft SQL Server\100\DTS\Binn;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\VSShell\Common7\IDE;C:\Program Files\Microsoft SQL Server\110\Tools\Binn;C:\Program Files\Microsoft SQL Server\120\Tools\Binn;C:\Program Files (x86)\Windows Kits\8.1\Windows Performance Toolkit;C:\Program Files (x86)\Microsoft SDKs\TypeScript\1.0;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\emsdk\python\2.7.5.3_32bit;D:\mobileFX\Projects\Software\Coconut\IDE\Studio;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\Apache\bin;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\curl\bin;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\jq;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\MinGW\bin;D:\mobileFX\Projects\Software\Intralot\iRGS\3rd_party\node.js\Release\node_modules\.bin;C:\Program Files (x86)\Skype\Phone\;C:\Program Files (x86)\SSH Secure Shell;C:\Users\Administrator\AppData\Local\Pandoc\ [calling] 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefe7f0000 'API-MS-Win-Security-SDDL-L1-1-0.dll' 26e8.17c0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. 26e8.17c0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'advapi32.dll'. 26e8.17c0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'crypt32.dll'. 26e8.17c0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'wldap32.dll'. 26e8.17c0: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\cryptnet.dll) 26e8.17c0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\cryptnet.dll 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'wldap32.dll'... 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: 'wldap32.dll' -> '\Device\HarddiskVolume3\Windows\System32\wldap32.dll' [rcNtRedir=0xc0150008] 26e8.17c0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. 26e8.17c0: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\Wldap32.dll) 26e8.17c0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\Wldap32.dll 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'crypt32.dll'... 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: 'crypt32.dll' -> '\Device\HarddiskVolume3\Windows\System32\crypt32.dll' [rcNtRedir=0xc0150008] 26e8.17c0: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll [lacks WinVerifyTrust] 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'... 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008] 26e8.17c0: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll [lacks WinVerifyTrust] 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] 26e8.17c0: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] 26e8.17c0: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\cryptnet.dll (Input=cryptnet.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000008d6610:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\Windows\System32;C:\Program Files (x86)\Java\jre7\bin;C:\Windows;C:\Windows\System32\wbem;C:\Windows\System32\WindowsPowerShell\v1.0;C:\Program Files (x86)\Git\cmd;C:\Program Files (x86)\CMake\bin;D:\mobileFX\Projects\Software\Coconut\Libs\node-v5.5.0\Release;e:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\nodejs\x86;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn;C:\Program Files (x86)\Microsoft SQL Server\100\DTS\Binn;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\VSShell\Common7\IDE;C:\Program Files\Microsoft SQL Server\110\Tools\Binn;C:\Program Files\Microsoft SQL Server\120\Tools\Binn;C:\Program Files (x86)\Windows Kits\8.1\Windows Performance Toolkit;C:\Program Files (x86)\Microsoft SDKs\TypeScript\1.0;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\emsdk\python\2.7.5.3_32bit;D:\mobileFX\Projects\Software\Coconut\IDE\Studio;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\Apache\bin;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\curl\bin;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\jq;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\MinGW\bin;D:\mobileFX\Projects\Software\Intralot\iRGS\3rd_party\node.js\Release\node_modules\.bin;C:\Program Files (x86)\Skype\Phone\;C:\Program Files (x86)\SSH Secure Shell;C:\Users\Administrator\AppData\Local\Pandoc\ [calling] 26e8.17c0: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\cryptnet.dll [lacks WinVerifyTrust] 26e8.17c0: supR3HardenedDllNotificationCallback: load 000007fef7c50000 LB 0x00027000 C:\Windows\system32\cryptnet.dll [fFlags=0x0] 26e8.17c0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\cryptnet.dll [lacks WinVerifyTrust] 26e8.17c0: supR3HardenedDllNotificationCallback: load 000007fefe790000 LB 0x00052000 C:\Windows\system32\WLDAP32.dll [fFlags=0x0] 26e8.17c0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\Wldap32.dll [lacks WinVerifyTrust] 26e8.17c0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\cryptnet.dll [lacks WinVerifyTrust] 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x1002 pwszSearchPath=00000000008d6610:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\Windows\System32;C:\Program Files (x86)\Java\jre7\bin;C:\Windows;C:\Windows\System32\wbem;C:\Windows\System32\WindowsPowerShell\v1.0;C:\Program Files (x86)\Git\cmd;C:\Program Files (x86)\CMake\bin;D:\mobileFX\Projects\Software\Coconut\Libs\node-v5.5.0\Release;e:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\nodejs\x86;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn;C:\Program Files (x86)\Microsoft SQL Server\100\DTS\Binn;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\VSShell\Common7\IDE;C:\Program Files\Microsoft SQL Server\110\Tools\Binn;C:\Program Files\Microsoft SQL Server\120\Tools\Binn;C:\Program Files (x86)\Windows Kits\8.1\Windows Performance Toolkit;C:\Program Files (x86)\Microsoft SDKs\TypeScript\1.0;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\emsdk\python\2.7.5.3_32bit;D:\mobileFX\Projects\Software\Coconut\IDE\Studio;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\Apache\bin;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\curl\bin;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\jq;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\MinGW\bin;D:\mobileFX\Projects\Software\Intralot\iRGS\3rd_party\node.js\Release\node_modules\.bin;C:\Program Files (x86)\Skype\Phone\;C:\Program Files (x86)\SSH Secure Shell;C:\Users\Administrator\AppData\Local\Pandoc\ [calling] 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef7c50000 'C:\Windows\system32\cryptnet.dll' 26e8.17c0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\cryptnet.dll [lacks WinVerifyTrust] 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x1002 pwszSearchPath=00000000008d6610:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\Windows\System32;C:\Program Files (x86)\Java\jre7\bin;C:\Windows;C:\Windows\System32\wbem;C:\Windows\System32\WindowsPowerShell\v1.0;C:\Program Files (x86)\Git\cmd;C:\Program Files (x86)\CMake\bin;D:\mobileFX\Projects\Software\Coconut\Libs\node-v5.5.0\Release;e:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\nodejs\x86;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn;C:\Program Files (x86)\Microsoft SQL Server\100\DTS\Binn;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\VSShell\Common7\IDE;C:\Program Files\Microsoft SQL Server\110\Tools\Binn;C:\Program Files\Microsoft SQL Server\120\Tools\Binn;C:\Program Files (x86)\Windows Kits\8.1\Windows Performance Toolkit;C:\Program Files (x86)\Microsoft SDKs\TypeScript\1.0;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\emsdk\python\2.7.5.3_32bit;D:\mobileFX\Projects\Software\Coconut\IDE\Studio;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\Apache\bin;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\curl\bin;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\jq;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\MinGW\bin;D:\mobileFX\Projects\Software\Intralot\iRGS\3rd_party\node.js\Release\node_modules\.bin;C:\Program Files (x86)\Skype\Phone\;C:\Program Files (x86)\SSH Secure Shell;C:\Users\Administrator\AppData\Local\Pandoc\ [calling] 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef7c50000 'C:\Windows\system32\cryptnet.dll' 26e8.17c0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\cryptnet.dll [lacks WinVerifyTrust] 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x1002 pwszSearchPath=00000000008d6610:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\Windows\System32;C:\Program Files (x86)\Java\jre7\bin;C:\Windows;C:\Windows\System32\wbem;C:\Windows\System32\WindowsPowerShell\v1.0;C:\Program Files (x86)\Git\cmd;C:\Program Files (x86)\CMake\bin;D:\mobileFX\Projects\Software\Coconut\Libs\node-v5.5.0\Release;e:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\nodejs\x86;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn;C:\Program Files (x86)\Microsoft SQL Server\100\DTS\Binn;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\VSShell\Common7\IDE;C:\Program Files\Microsoft SQL Server\110\Tools\Binn;C:\Program Files\Microsoft SQL Server\120\Tools\Binn;C:\Program Files (x86)\Windows Kits\8.1\Windows Performance Toolkit;C:\Program Files (x86)\Microsoft SDKs\TypeScript\1.0;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\emsdk\python\2.7.5.3_32bit;D:\mobileFX\Projects\Software\Coconut\IDE\Studio;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\Apache\bin;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\curl\bin;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\jq;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\MinGW\bin;D:\mobileFX\Projects\Software\Intralot\iRGS\3rd_party\node.js\Release\node_modules\.bin;C:\Program Files (x86)\Skype\Phone\;C:\Program Files (x86)\SSH Secure Shell;C:\Users\Administrator\AppData\Local\Pandoc\ [calling] 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef7c50000 'C:\Windows\system32\cryptnet.dll' 26e8.17c0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\cryptnet.dll [lacks WinVerifyTrust] 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x1002 pwszSearchPath=00000000008d6610:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\Windows\System32;C:\Program Files (x86)\Java\jre7\bin;C:\Windows;C:\Windows\System32\wbem;C:\Windows\System32\WindowsPowerShell\v1.0;C:\Program Files (x86)\Git\cmd;C:\Program Files (x86)\CMake\bin;D:\mobileFX\Projects\Software\Coconut\Libs\node-v5.5.0\Release;e:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\nodejs\x86;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn;C:\Program Files (x86)\Microsoft SQL Server\100\DTS\Binn;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\VSShell\Common7\IDE;C:\Program Files\Microsoft SQL Server\110\Tools\Binn;C:\Program Files\Microsoft SQL Server\120\Tools\Binn;C:\Program Files (x86)\Windows Kits\8.1\Windows Performance Toolkit;C:\Program Files (x86)\Microsoft SDKs\TypeScript\1.0;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\emsdk\python\2.7.5.3_32bit;D:\mobileFX\Projects\Software\Coconut\IDE\Studio;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\Apache\bin;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\curl\bin;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\jq;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\MinGW\bin;D:\mobileFX\Projects\Software\Intralot\iRGS\3rd_party\node.js\Release\node_modules\.bin;C:\Program Files (x86)\Skype\Phone\;C:\Program Files (x86)\SSH Secure Shell;C:\Users\Administrator\AppData\Local\Pandoc\ [calling] 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef7c50000 'C:\Windows\system32\cryptnet.dll' 26e8.17c0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\cryptnet.dll [lacks WinVerifyTrust] 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x1002 pwszSearchPath=00000000008d6610:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\Windows\System32;C:\Program Files (x86)\Java\jre7\bin;C:\Windows;C:\Windows\System32\wbem;C:\Windows\System32\WindowsPowerShell\v1.0;C:\Program Files (x86)\Git\cmd;C:\Program Files (x86)\CMake\bin;D:\mobileFX\Projects\Software\Coconut\Libs\node-v5.5.0\Release;e:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\nodejs\x86;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn;C:\Program Files (x86)\Microsoft SQL Server\100\DTS\Binn;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\VSShell\Common7\IDE;C:\Program Files\Microsoft SQL Server\110\Tools\Binn;C:\Program Files\Microsoft SQL Server\120\Tools\Binn;C:\Program Files (x86)\Windows Kits\8.1\Windows Performance Toolkit;C:\Program Files (x86)\Microsoft SDKs\TypeScript\1.0;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\emsdk\python\2.7.5.3_32bit;D:\mobileFX\Projects\Software\Coconut\IDE\Studio;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\Apache\bin;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\curl\bin;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\jq;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\MinGW\bin;D:\mobileFX\Projects\Software\Intralot\iRGS\3rd_party\node.js\Release\node_modules\.bin;C:\Program Files (x86)\Skype\Phone\;C:\Program Files (x86)\SSH Secure Shell;C:\Users\Administrator\AppData\Local\Pandoc\ [calling] 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef7c50000 'C:\Windows\system32\cryptnet.dll' 26e8.17c0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\cryptnet.dll [lacks WinVerifyTrust] 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x1002 pwszSearchPath=00000000008d6610:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\Windows\System32;C:\Program Files (x86)\Java\jre7\bin;C:\Windows;C:\Windows\System32\wbem;C:\Windows\System32\WindowsPowerShell\v1.0;C:\Program Files (x86)\Git\cmd;C:\Program Files (x86)\CMake\bin;D:\mobileFX\Projects\Software\Coconut\Libs\node-v5.5.0\Release;e:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\nodejs\x86;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn;C:\Program Files (x86)\Microsoft SQL Server\100\DTS\Binn;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\VSShell\Common7\IDE;C:\Program Files\Microsoft SQL Server\110\Tools\Binn;C:\Program Files\Microsoft SQL Server\120\Tools\Binn;C:\Program Files (x86)\Windows Kits\8.1\Windows Performance Toolkit;C:\Program Files (x86)\Microsoft SDKs\TypeScript\1.0;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\emsdk\python\2.7.5.3_32bit;D:\mobileFX\Projects\Software\Coconut\IDE\Studio;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\Apache\bin;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\curl\bin;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\jq;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\MinGW\bin;D:\mobileFX\Projects\Software\Intralot\iRGS\3rd_party\node.js\Release\node_modules\.bin;C:\Program Files (x86)\Skype\Phone\;C:\Program Files (x86)\SSH Secure Shell;C:\Users\Administrator\AppData\Local\Pandoc\ [calling] 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef7c50000 'C:\Windows\system32\cryptnet.dll' 26e8.17c0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\cryptnet.dll [lacks WinVerifyTrust] 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef7c50000 'C:\Windows\system32\cryptnet.dll' 26e8.17c0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\cryptnet.dll [lacks WinVerifyTrust] 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef7c50000 'C:\Windows\system32\cryptnet.dll' 26e8.17c0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\cryptnet.dll [lacks WinVerifyTrust] 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef7c50000 'C:\Windows\system32\cryptnet.dll' 26e8.17c0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\cryptnet.dll [lacks WinVerifyTrust] 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef7c50000 'C:\Windows\system32\cryptnet.dll' 26e8.17c0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\cryptnet.dll [lacks WinVerifyTrust] 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef7c50000 'C:\Windows\system32\cryptnet.dll' 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef7c50000 'C:\Windows\system32\cryptnet.dll' 26e8.17c0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\cryptnet.dll [lacks WinVerifyTrust] 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fef7c50000 'C:\Windows\system32\cryptnet.dll' 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: pName=API-MS-Win-Security-SDDL-L1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=00000000008d6610:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\Windows\System32;C:\Program Files (x86)\Java\jre7\bin;C:\Windows;C:\Windows\System32\wbem;C:\Windows\System32\WindowsPowerShell\v1.0;C:\Program Files (x86)\Git\cmd;C:\Program Files (x86)\CMake\bin;D:\mobileFX\Projects\Software\Coconut\Libs\node-v5.5.0\Release;e:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\nodejs\x86;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn;C:\Program Files (x86)\Microsoft SQL Server\100\DTS\Binn;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\VSShell\Common7\IDE;C:\Program Files\Microsoft SQL Server\110\Tools\Binn;C:\Program Files\Microsoft SQL Server\120\Tools\Binn;C:\Program Files (x86)\Windows Kits\8.1\Windows Performance Toolkit;C:\Program Files (x86)\Microsoft SDKs\TypeScript\1.0;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\emsdk\python\2.7.5.3_32bit;D:\mobileFX\Projects\Software\Coconut\IDE\Studio;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\Apache\bin;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\curl\bin;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\jq;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\MinGW\bin;D:\mobileFX\Projects\Software\Intralot\iRGS\3rd_party\node.js\Release\node_modules\.bin;C:\Program Files (x86)\Skype\Phone\;C:\Program Files (x86)\SSH Secure Shell;C:\Users\Administrator\AppData\Local\Pandoc\ [calling] 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefe7f0000 'API-MS-Win-Security-SDDL-L1-1-0.dll' 26e8.17c0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\profapi.dll [lacks WinVerifyTrust] 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\profapi.dll (Input=profapi.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000008d6610:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\Windows\System32;C:\Program Files (x86)\Java\jre7\bin;C:\Windows;C:\Windows\System32\wbem;C:\Windows\System32\WindowsPowerShell\v1.0;C:\Program Files (x86)\Git\cmd;C:\Program Files (x86)\CMake\bin;D:\mobileFX\Projects\Software\Coconut\Libs\node-v5.5.0\Release;e:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\nodejs\x86;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn;C:\Program Files (x86)\Microsoft SQL Server\100\DTS\Binn;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\VSShell\Common7\IDE;C:\Program Files\Microsoft SQL Server\110\Tools\Binn;C:\Program Files\Microsoft SQL Server\120\Tools\Binn;C:\Program Files (x86)\Windows Kits\8.1\Windows Performance Toolkit;C:\Program Files (x86)\Microsoft SDKs\TypeScript\1.0;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\emsdk\python\2.7.5.3_32bit;D:\mobileFX\Projects\Software\Coconut\IDE\Studio;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\Apache\bin;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\curl\bin;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\jq;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\MinGW\bin;D:\mobileFX\Projects\Software\Intralot\iRGS\3rd_party\node.js\Release\node_modules\.bin;C:\Program Files (x86)\Skype\Phone\;C:\Program Files (x86)\SSH Secure Shell;C:\Users\Administrator\AppData\Local\Pandoc\ [calling] 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefd2a0000 'C:\Windows\system32\profapi.dll' 26e8.17c0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'gdi32.dll'. 26e8.17c0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'user32.dll'. 26e8.17c0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'msvcrt.dll'. 26e8.17c0: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\shlwapi.dll) 26e8.17c0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\shlwapi.dll 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] 26e8.17c0: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust] 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008] 26e8.17c0: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust] 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'... 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008] 26e8.17c0: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust] 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\SHLWAPI.dll (Input=SHLWAPI.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000008d6610:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\Windows\System32;C:\Program Files (x86)\Java\jre7\bin;C:\Windows;C:\Windows\System32\wbem;C:\Windows\System32\WindowsPowerShell\v1.0;C:\Program Files (x86)\Git\cmd;C:\Program Files (x86)\CMake\bin;D:\mobileFX\Projects\Software\Coconut\Libs\node-v5.5.0\Release;e:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\nodejs\x86;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn;C:\Program Files (x86)\Microsoft SQL Server\100\DTS\Binn;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\VSShell\Common7\IDE;C:\Program Files\Microsoft SQL Server\110\Tools\Binn;C:\Program Files\Microsoft SQL Server\120\Tools\Binn;C:\Program Files (x86)\Windows Kits\8.1\Windows Performance Toolkit;C:\Program Files (x86)\Microsoft SDKs\TypeScript\1.0;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\emsdk\python\2.7.5.3_32bit;D:\mobileFX\Projects\Software\Coconut\IDE\Studio;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\Apache\bin;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\curl\bin;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\jq;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\MinGW\bin;D:\mobileFX\Projects\Software\Intralot\iRGS\3rd_party\node.js\Release\node_modules\.bin;C:\Program Files (x86)\Skype\Phone\;C:\Program Files (x86)\SSH Secure Shell;C:\Users\Administrator\AppData\Local\Pandoc\ [calling] 26e8.17c0: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\shlwapi.dll [lacks WinVerifyTrust] 26e8.17c0: supR3HardenedDllNotificationCallback: load 000007fefe8f0000 LB 0x00071000 C:\Windows\system32\SHLWAPI.dll [fFlags=0x0] 26e8.17c0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\shlwapi.dll [lacks WinVerifyTrust] 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefe8f0000 'C:\Windows\system32\SHLWAPI.dll' 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000000 pwszName=\SystemRoot\System32\ntdll.dll 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: New context 0000000002693db0 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000002693db0 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=99113493CCEA6CE03AD58304FCE46D35B665BC85 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: pName=API-MS-Win-Security-SDDL-L1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=00000000008d6610:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\Windows\System32;C:\Program Files (x86)\Java\jre7\bin;C:\Windows;C:\Windows\System32\wbem;C:\Windows\System32\WindowsPowerShell\v1.0;C:\Program Files (x86)\Git\cmd;C:\Program Files (x86)\CMake\bin;D:\mobileFX\Projects\Software\Coconut\Libs\node-v5.5.0\Release;e:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\nodejs\x86;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn;C:\Program Files (x86)\Microsoft SQL Server\100\DTS\Binn;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\VSShell\Common7\IDE;C:\Program Files\Microsoft SQL Server\110\Tools\Binn;C:\Program Files\Microsoft SQL Server\120\Tools\Binn;C:\Program Files (x86)\Windows Kits\8.1\Windows Performance Toolkit;C:\Program Files (x86)\Microsoft SDKs\TypeScript\1.0;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\emsdk\python\2.7.5.3_32bit;D:\mobileFX\Projects\Software\Coconut\IDE\Studio;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\Apache\bin;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\curl\bin;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\jq;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\MinGW\bin;D:\mobileFX\Projects\Software\Intralot\iRGS\3rd_party\node.js\Release\node_modules\.bin;C:\Program Files (x86)\Skype\Phone\;C:\Program Files (x86)\SSH Secure Shell;C:\Users\Administrator\AppData\Local\Pandoc\ [calling] 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefe7f0000 'API-MS-Win-Security-SDDL-L1-1-0.dll' 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: pName=API-MS-WIN-Service-Management-L1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=00000000008d6610:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\Windows\System32;C:\Program Files (x86)\Java\jre7\bin;C:\Windows;C:\Windows\System32\wbem;C:\Windows\System32\WindowsPowerShell\v1.0;C:\Program Files (x86)\Git\cmd;C:\Program Files (x86)\CMake\bin;D:\mobileFX\Projects\Software\Coconut\Libs\node-v5.5.0\Release;e:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\nodejs\x86;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn;C:\Program Files (x86)\Microsoft SQL Server\100\DTS\Binn;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\VSShell\Common7\IDE;C:\Program Files\Microsoft SQL Server\110\Tools\Binn;C:\Program Files\Microsoft SQL Server\120\Tools\Binn;C:\Program Files (x86)\Windows Kits\8.1\Windows Performance Toolkit;C:\Program Files (x86)\Microsoft SDKs\TypeScript\1.0;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\emsdk\python\2.7.5.3_32bit;D:\mobileFX\Projects\Software\Coconut\IDE\Studio;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\Apache\bin;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\curl\bin;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\jq;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\MinGW\bin;D:\mobileFX\Projects\Software\Intralot\iRGS\3rd_party\node.js\Release\node_modules\.bin;C:\Program Files (x86)\Skype\Phone\;C:\Program Files (x86)\SSH Secure Shell;C:\Users\Administrator\AppData\Local\Pandoc\ [calling] 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefe7f0000 'API-MS-WIN-Service-Management-L1-1-0.dll' 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: pName=API-MS-WIN-Service-winsvc-L1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=00000000008d6610:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\Windows\System32;C:\Program Files (x86)\Java\jre7\bin;C:\Windows;C:\Windows\System32\wbem;C:\Windows\System32\WindowsPowerShell\v1.0;C:\Program Files (x86)\Git\cmd;C:\Program Files (x86)\CMake\bin;D:\mobileFX\Projects\Software\Coconut\Libs\node-v5.5.0\Release;e:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\nodejs\x86;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn;C:\Program Files (x86)\Microsoft SQL Server\100\DTS\Binn;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\VSShell\Common7\IDE;C:\Program Files\Microsoft SQL Server\110\Tools\Binn;C:\Program Files\Microsoft SQL Server\120\Tools\Binn;C:\Program Files (x86)\Windows Kits\8.1\Windows Performance Toolkit;C:\Program Files (x86)\Microsoft SDKs\TypeScript\1.0;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\emsdk\python\2.7.5.3_32bit;D:\mobileFX\Projects\Software\Coconut\IDE\Studio;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\Apache\bin;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\curl\bin;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\jq;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\MinGW\bin;D:\mobileFX\Projects\Software\Intralot\iRGS\3rd_party\node.js\Release\node_modules\.bin;C:\Program Files (x86)\Skype\Phone\;C:\Program Files (x86)\SSH Secure Shell;C:\Users\Administrator\AppData\Local\Pandoc\ [calling] 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefe7f0000 'API-MS-WIN-Service-winsvc-L1-1-0.dll' 26e8.17c0: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll [lacks WinVerifyTrust] 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\ADVAPI32.dll (Input=ADVAPI32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000008d6610:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\Windows\System32;C:\Program Files (x86)\Java\jre7\bin;C:\Windows;C:\Windows\System32\wbem;C:\Windows\System32\WindowsPowerShell\v1.0;C:\Program Files (x86)\Git\cmd;C:\Program Files (x86)\CMake\bin;D:\mobileFX\Projects\Software\Coconut\Libs\node-v5.5.0\Release;e:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\nodejs\x86;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn;C:\Program Files (x86)\Microsoft SQL Server\100\DTS\Binn;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\VSShell\Common7\IDE;C:\Program Files\Microsoft SQL Server\110\Tools\Binn;C:\Program Files\Microsoft SQL Server\120\Tools\Binn;C:\Program Files (x86)\Windows Kits\8.1\Windows Performance Toolkit;C:\Program Files (x86)\Microsoft SDKs\TypeScript\1.0;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\emsdk\python\2.7.5.3_32bit;D:\mobileFX\Projects\Software\Coconut\IDE\Studio;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\Apache\bin;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\curl\bin;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\jq;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\MinGW\bin;D:\mobileFX\Projects\Software\Intralot\iRGS\3rd_party\node.js\Release\node_modules\.bin;C:\Program Files (x86)\Skype\Phone\;C:\Program Files (x86)\SSH Secure Shell;C:\Users\Administrator\AppData\Local\Pandoc\ [calling] 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefdb60000 'C:\Windows\system32\ADVAPI32.dll' 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: pName=API-MS-Win-Security-LSALookup-L1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=00000000008d6610:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\Windows\System32;C:\Program Files (x86)\Java\jre7\bin;C:\Windows;C:\Windows\System32\wbem;C:\Windows\System32\WindowsPowerShell\v1.0;C:\Program Files (x86)\Git\cmd;C:\Program Files (x86)\CMake\bin;D:\mobileFX\Projects\Software\Coconut\Libs\node-v5.5.0\Release;e:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\nodejs\x86;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn;C:\Program Files (x86)\Microsoft SQL Server\100\DTS\Binn;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\VSShell\Common7\IDE;C:\Program Files\Microsoft SQL Server\110\Tools\Binn;C:\Program Files\Microsoft SQL Server\120\Tools\Binn;C:\Program Files (x86)\Windows Kits\8.1\Windows Performance Toolkit;C:\Program Files (x86)\Microsoft SDKs\TypeScript\1.0;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\emsdk\python\2.7.5.3_32bit;D:\mobileFX\Projects\Software\Coconut\IDE\Studio;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\Apache\bin;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\curl\bin;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\jq;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\MinGW\bin;D:\mobileFX\Projects\Software\Intralot\iRGS\3rd_party\node.js\Release\node_modules\.bin;C:\Program Files (x86)\Skype\Phone\;C:\Program Files (x86)\SSH Secure Shell;C:\Users\Administrator\AppData\Local\Pandoc\ [calling] 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefe7f0000 'API-MS-Win-Security-LSALookup-L1-1-0.dll' 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: pName=API-MS-Win-Security-LSALookup-L1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=00000000008d6610:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\Windows\System32;C:\Program Files (x86)\Java\jre7\bin;C:\Windows;C:\Windows\System32\wbem;C:\Windows\System32\WindowsPowerShell\v1.0;C:\Program Files (x86)\Git\cmd;C:\Program Files (x86)\CMake\bin;D:\mobileFX\Projects\Software\Coconut\Libs\node-v5.5.0\Release;e:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\nodejs\x86;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn;C:\Program Files (x86)\Microsoft SQL Server\100\DTS\Binn;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\VSShell\Common7\IDE;C:\Program Files\Microsoft SQL Server\110\Tools\Binn;C:\Program Files\Microsoft SQL Server\120\Tools\Binn;C:\Program Files (x86)\Windows Kits\8.1\Windows Performance Toolkit;C:\Program Files (x86)\Microsoft SDKs\TypeScript\1.0;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\emsdk\python\2.7.5.3_32bit;D:\mobileFX\Projects\Software\Coconut\IDE\Studio;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\Apache\bin;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\curl\bin;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\jq;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\MinGW\bin;D:\mobileFX\Projects\Software\Intralot\iRGS\3rd_party\node.js\Release\node_modules\.bin;C:\Program Files (x86)\Skype\Phone\;C:\Program Files (x86)\SSH Secure Shell;C:\Users\Administrator\AppData\Local\Pandoc\ [calling] 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefe7f0000 'API-MS-Win-Security-LSALookup-L1-1-0.dll' 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_60_for_KB3121212~31bf3856ad364e35~amd64~~6.1.1.2.cat'; file='\SystemRoot\System32\ntdll.dll' 26e8.17c0: g_pfnWinVerifyTrust=000007fefd371010 26e8.17c0: supR3HardenedScreenImage/preload: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll [redoing WinVerifyTrust] 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000000000000e4 pwszName=\Device\HarddiskVolume3\Windows\System32\crypt32.dll 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000002693db0 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000002693db0 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=BFD41401EDEBD4D914977D62B588ECABEE60CFD3 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_112_for_KB3040272~31bf3856ad364e35~amd64~~6.1.1.1.cat'; file='\Device\HarddiskVolume3\Windows\System32\crypt32.dll' 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900) 26e8.17c0: supR3HardenedScreenImage/preload: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\crypt32.dll' 26e8.17c0: supR3HardenedScreenImage/preload: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\wintrust.dll [redoing WinVerifyTrust] 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000000000000d8 pwszName=\Device\HarddiskVolume3\Windows\System32\wintrust.dll 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000002693db0 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000002693db0 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=E1BBE4EB6D114F50142F24E2E2749EFD81021486 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_75_for_KB3040272~31bf3856ad364e35~amd64~~6.1.1.1.cat'; file='\Device\HarddiskVolume3\Windows\System32\wintrust.dll' 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900) 26e8.17c0: supR3HardenedScreenImage/preload: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\wintrust.dll' 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000000000003c4 pwszName=\Device\HarddiskVolume3\Windows\System32\shlwapi.dll 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000002693db0 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000002693db0 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=0AB8D9C9D3E1FC95D01F9A984B16ED031BB40CD8 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat'; file='\Device\HarddiskVolume3\Windows\System32\shlwapi.dll' 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900) 26e8.17c0: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\shlwapi.dll' 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000000000003b8 pwszName=\Device\HarddiskVolume3\Windows\System32\Wldap32.dll 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000002693db0 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000002693db0 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=87E73086F2528CF31D3AD5F0D71E04F8B942D5D8 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat'; file='\Device\HarddiskVolume3\Windows\System32\Wldap32.dll' 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900) 26e8.17c0: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\Wldap32.dll' 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000000000003b4 pwszName=\Device\HarddiskVolume3\Windows\System32\cryptnet.dll 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000002693db0 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000002693db0 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=756DC088EE40CF9369C990D71B200F3CB59FC35D 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_75_for_KB3040272~31bf3856ad364e35~amd64~~6.1.1.1.cat'; file='\Device\HarddiskVolume3\Windows\System32\cryptnet.dll' 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900) 26e8.17c0: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\cryptnet.dll' 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000270 pwszName=\Device\HarddiskVolume3\Windows\System32\gpapi.dll 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000002693db0 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000002693db0 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=470795C189226F7BDB8E50F42104CC34488B9340 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat'; file='\Device\HarddiskVolume3\Windows\System32\gpapi.dll' 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900) 26e8.17c0: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\gpapi.dll' 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000000000001dc pwszName=\Device\HarddiskVolume3\Windows\System32\profapi.dll 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000002693db0 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000002693db0 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=2449672745D9BA339420451D13FA0380AA768231 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\ntpe.cat'; file='\Device\HarddiskVolume3\Windows\System32\profapi.dll' 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900) 26e8.17c0: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\profapi.dll' 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000000000001d8 pwszName=\Device\HarddiskVolume3\Windows\System32\userenv.dll 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000002693db0 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000002693db0 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=D3E1A2CC7367F751C19EBF4E6EDF5E9A10E47313 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat'; file='\Device\HarddiskVolume3\Windows\System32\userenv.dll' 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900) 26e8.17c0: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\userenv.dll' 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000000000001c4 pwszName=\Device\HarddiskVolume3\Windows\System32\ncrypt.dll 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000002693db0 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000002693db0 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=AF6214D5B4EE4D004FA11B4426B0E781D4E918A9 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_60_for_KB3121212~31bf3856ad364e35~amd64~~6.1.1.2.cat'; file='\Device\HarddiskVolume3\Windows\System32\ncrypt.dll' 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900) 26e8.17c0: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\ncrypt.dll' 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000000000001a8 pwszName=\Device\HarddiskVolume3\Windows\System32\msctf.dll 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000002693db0 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000002693db0 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=03916BC73EE5A0E312E3D3100D0ACE1B78E93BB1 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB3033889~31bf3856ad364e35~amd64~~6.1.1.0.cat'; file='\Device\HarddiskVolume3\Windows\System32\msctf.dll' 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900) 26e8.17c0: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\msctf.dll' 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000000000001a4 pwszName=\Device\HarddiskVolume3\Windows\System32\imm32.dll 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000002693db0 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000002693db0 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=6EEE1AB3B6D79AFF857940FF5F51ED27698153EC 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\ntpe.cat'; file='\Device\HarddiskVolume3\Windows\System32\imm32.dll' 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900) 26e8.17c0: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\imm32.dll' 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000000000001a0 pwszName=\Device\HarddiskVolume3\Windows\System32\usp10.dll 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000002693db0 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000002693db0 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=31498ABFB06219E83141E0AA8B2A55C4CECFD033 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB3108670~31bf3856ad364e35~amd64~~6.1.1.0.cat'; file='\Device\HarddiskVolume3\Windows\System32\usp10.dll' 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900) 26e8.17c0: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\usp10.dll' 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: hFile=000000000000019c pwszName=\Device\HarddiskVolume3\Windows\System32\lpk.dll 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000002693db0 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000002693db0 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=FDBA63132AE4F561C5CFC5478222E40A2DAA2ACC 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB3087039~31bf3856ad364e35~amd64~~6.1.1.4.cat'; file='\Device\HarddiskVolume3\Windows\System32\lpk.dll' 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900) 26e8.17c0: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\lpk.dll' 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000198 pwszName=\Device\HarddiskVolume3\Windows\System32\gdi32.dll 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000002693db0 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000002693db0 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=E200CE23C0ADD95195EBA5616D50363CEA00DB25 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB3124001~31bf3856ad364e35~amd64~~6.1.1.0.cat'; file='\Device\HarddiskVolume3\Windows\System32\gdi32.dll' 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900) 26e8.17c0: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000194 pwszName=\Device\HarddiskVolume3\Windows\System32\user32.dll 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000002693db0 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000002693db0 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=94AFB7B548C6C2376C6AEE4ECE2FA09C90F5FD4B 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_4_for_KB3109094~31bf3856ad364e35~amd64~~6.1.1.1.cat'; file='\Device\HarddiskVolume3\Windows\System32\user32.dll' 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900) 26e8.17c0: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\user32.dll' 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000190 pwszName=\Device\HarddiskVolume3\Windows\System32\imagehlp.dll 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000002693db0 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000002693db0 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=2702EE05F1B717B0F2CE0FBE32784A47B8419DCA 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB2893294~31bf3856ad364e35~amd64~~6.1.1.1.cat'; file='\Device\HarddiskVolume3\Windows\System32\imagehlp.dll' 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900) 26e8.17c0: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\imagehlp.dll' 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000134 pwszName=\Device\HarddiskVolume3\Windows\System32\cryptbase.dll 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000002693db0 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000002693db0 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=C369CA0A282E9201E8C3399DEF1010F6DC0676FA 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_60_for_KB3121212~31bf3856ad364e35~amd64~~6.1.1.2.cat'; file='\Device\HarddiskVolume3\Windows\System32\cryptbase.dll' 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900) 26e8.17c0: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\cryptbase.dll' 26e8.17c0: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\rsaenh.dll' 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000130 pwszName=\Device\HarddiskVolume3\Windows\System32\cryptsp.dll 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000002693db0 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000002693db0 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=BA7AC4A7E8ADDFEA90AC951ECB6D6546E4873613 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_115_for_KB3033929~31bf3856ad364e35~amd64~~6.1.1.1.cat'; file='\Device\HarddiskVolume3\Windows\System32\cryptsp.dll' 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900) 26e8.17c0: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\cryptsp.dll' 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000124 pwszName=\Device\HarddiskVolume3\Windows\System32\sechost.dll 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000002693db0 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000002693db0 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=CB669FA8DB80F8E50A29D055BB8D558E10E5E6B4 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_85_for_KB3068708~31bf3856ad364e35~amd64~~6.1.1.0.cat'; file='\Device\HarddiskVolume3\Windows\System32\sechost.dll' 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900) 26e8.17c0: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\sechost.dll' 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000120 pwszName=\Device\HarddiskVolume3\Windows\System32\advapi32.dll 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000002693db0 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000002693db0 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=6964F437558F504725B2BE66A35240231044644F 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB3121918~31bf3856ad364e35~amd64~~6.1.1.0.cat'; file='\Device\HarddiskVolume3\Windows\System32\advapi32.dll' 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900) 26e8.17c0: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' 26e8.17c0: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll' 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000108 pwszName=\Device\HarddiskVolume3\Windows\System32\bcrypt.dll 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000002693db0 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000002693db0 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=62E377A1F0AD0C2EDC0A73CB3EFF841FF18D00D2 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\ntpe.cat'; file='\Device\HarddiskVolume3\Windows\System32\bcrypt.dll' 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900) 26e8.17c0: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\bcrypt.dll' 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000000000000e8 pwszName=\Device\HarddiskVolume3\Windows\System32\msvcrt.dll 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000002693db0 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000002693db0 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=2CA2FD632B264C063162F71474266E3615B6420C 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB2654428~31bf3856ad364e35~amd64~~6.1.1.0.cat'; file='\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900) 26e8.17c0: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000000000000e0 pwszName=\Device\HarddiskVolume3\Windows\System32\msasn1.dll 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000002693db0 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000002693db0 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=F2FF57DC30D774F93061607060DAA0DD15E39CCE 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat'; file='\Device\HarddiskVolume3\Windows\System32\msasn1.dll' 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900) 26e8.17c0: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\msasn1.dll' 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000000000000dc pwszName=\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000002693db0 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000002693db0 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=DA2C80E31A4EEBFA49ACC284D4C1B701145978CB 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_60_for_KB3121212~31bf3856ad364e35~amd64~~6.1.1.2.cat'; file='\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900) 26e8.17c0: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' 26e8.17c0: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxSupLib.dll' 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000028 pwszName=\Device\HarddiskVolume3\Windows\System32\KernelBase.dll 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000002693db0 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000002693db0 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=345936918DE59E26BE1BF613500ED5E48C26873F 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_60_for_KB3121212~31bf3856ad364e35~amd64~~6.1.1.2.cat'; file='\Device\HarddiskVolume3\Windows\System32\KernelBase.dll' 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900) 26e8.17c0: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\KernelBase.dll' 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000020 pwszName=\Device\HarddiskVolume3\Windows\System32\kernel32.dll 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000002693db0 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000002693db0 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=C5B3709F99BA1F5F78D42BD62B72E557388B5AE0 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_60_for_KB3121212~31bf3856ad364e35~amd64~~6.1.1.2.cat'; file='\Device\HarddiskVolume3\Windows\System32\kernel32.dll' 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900) 26e8.17c0: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\kernel32.dll' 26e8.17c0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\crypt32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=000000000268ecc0:C:\Windows\system32 [calling] 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefd4a0000 'C:\Windows\system32\crypt32.dll' 26e8.17c0: supR3HardenedWinIsDesiredRootCA: Adding 0xfeb04c7efedfb800 O=Kaspersky Lab ZAO, CN=%PersonalRootCertificateName% 26e8.17c0: supR3HardenedWinIsDesiredRootCA: Adding 0x5ad46780fa5df300 DC=com, DC=microsoft, CN=Microsoft Root Certificate Authority 26e8.17c0: supR3HardenedWinIsDesiredRootCA: Adding 0xea5386456178582b C=ZA, ST=Western Cape, L=Durbanville, O=Thawte, OU=Thawte Certification, CN=Thawte Timestamping CA 26e8.17c0: supR3HardenedWinIsDesiredRootCA: Adding 0x3be670c1bd02a900 OU=Copyright (c) 1997 Microsoft Corp., OU=Microsoft Corporation, CN=Microsoft Root Authority 26e8.17c0: supR3HardenedWinIsDesiredRootCA: Adding 0x4d3835aa4180b200 C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Root Certificate Authority 2011 26e8.17c0: supR3HardenedWinIsDesiredRootCA: Adding 0x646e3fe3ba08df00 C=US, O=MSFT, CN=Microsoft Authenticode(tm) Root Authority 26e8.17c0: supR3HardenedWinIsDesiredRootCA: skipping - not-self-signed: C=BZ, ST=Belize, L=Belize City, O=DT Soft Ltd, OU=Digital ID Class 3 - Microsoft Software Validation v2, CN=DT Soft Ltd 26e8.17c0: supR3HardenedWinIsDesiredRootCA: Adding 0xece4e4289e08b900 C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Root Certificate Authority 2010 26e8.17c0: supR3HardenedWinIsDesiredRootCA: skipping - not-self-signed: C=BZ, ST=Belize, L=Belize city, O=Disc Soft Ltd, CN=Disc Soft Ltd, Email=finpr@disc-soft.com 26e8.17c0: supR3HardenedWinIsDesiredRootCA: Adding 0xe840e6dbe281be00 C=IL, ST=Gush Dan, L=Hertzilia, O=GreenTeam Internet, Ltd., OU=Web, CN=cloudguard.me 26e8.17c0: supR3HardenedWinIsDesiredRootCA: Adding 0x43a9cc371ff5385a O=Microsoft Trust Network, OU=Microsoft Corporation, OU=Microsoft Time Stamping Service Root, OU=Copyright (c) 1997 Microsoft Corp. 26e8.17c0: supR3HardenedWinIsDesiredRootCA: Adding 0x2e2d2c7c68f0202e O=VeriSign Trust Network, OU=VeriSign, Inc., OU=VeriSign Time Stamping Service Root, OU=NO LIABILITY ACCEPTED, (c)97 VeriSign, Inc. 26e8.17c0: supR3HardenedWinIsDesiredRootCA: Adding 0xced08517f4c2a400 CN=localhost, O=Skype Click to Call, OU=Skype Click to Call 26e8.17c0: supR3HardenedWinIsDesiredRootCA: Adding 0xd8dbfb2c27bfb200 C=US, O=thawte, Inc., OU=Certification Services Division, OU=(c) 2008 thawte, Inc. - For authorized use only, CN=thawte Primary Root CA - G3 26e8.17c0: supR3HardenedWinIsDesiredRootCA: Adding 0x61a3a33f81aace00 C=US, ST=UT, L=Salt Lake City, O=The USERTRUST Network, OU=http://www.usertrust.com, CN=UTN-USERFirst-Object 26e8.17c0: supR3HardenedWinIsDesiredRootCA: Adding 0xf4fd306318ccda00 C=US, O=GeoTrust Inc., CN=GeoTrust Global CA 26e8.17c0: supR3HardenedWinIsDesiredRootCA: Adding 0x83085097e9afdf00 O=Digital Signature Trust Co., CN=DST Root CA X3 26e8.17c0: supR3HardenedWinIsDesiredRootCA: Adding 0x780679907625cc00 OU=GlobalSign Root CA - R3, O=GlobalSign, CN=GlobalSign 26e8.17c0: supR3HardenedWinIsDesiredRootCA: Adding 0x3d98ab22bb04a300 C=IE, O=Baltimore, OU=CyberTrust, CN=Baltimore CyberTrust Root 26e8.17c0: supR3HardenedWinIsDesiredRootCA: Adding 0xa0ee62086758b15d C=US, O=Equifax, OU=Equifax Secure Certificate Authority 26e8.17c0: supR3HardenedWinIsDesiredRootCA: Adding 0x9403a4b8727eb000 C=TW, O=TAIWAN-CA, OU=Root CA, CN=TWCA Root Certification Authority 26e8.17c0: supR3HardenedWinIsDesiredRootCA: Adding 0xd944bca189a00 C=BM, O=QuoVadis Limited, CN=QuoVadis Root CA 2 26e8.17c0: supR3HardenedWinIsDesiredRootCA: Adding 0x8ff6fc03c1edbd00 C=US, ST=Arizona, L=Scottsdale, O=Starfield Technologies, Inc., CN=Starfield Root Certificate Authority - G2 26e8.17c0: supR3HardenedWinIsDesiredRootCA: Adding 0xc6fa4243b695b600 C=US, O=Entrust, Inc., OU=www.entrust.net/CPS is incorporated by reference, OU=(c) 2006 Entrust, Inc., CN=Entrust Root Certification Authority 26e8.17c0: supR3HardenedWinIsDesiredRootCA: Adding 0xa3ce8d99e60eda00 C=BE, O=GlobalSign nv-sa, OU=Root CA, CN=GlobalSign Root CA 26e8.17c0: supR3HardenedWinIsDesiredRootCA: Adding 0xa671e9fec832b700 C=US, O=Starfield Technologies, Inc., OU=Starfield Class 2 Certification Authority 26e8.17c0: supR3HardenedWinIsDesiredRootCA: Adding 0xa8de7211e13be200 C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root CA 26e8.17c0: supR3HardenedWinIsDesiredRootCA: Adding 0x7ae89c50f0b6a00f C=US, O=GTE Corporation, OU=GTE CyberTrust Solutions, Inc., CN=GTE CyberTrust Global Root 26e8.17c0: supR3HardenedWinIsDesiredRootCA: Adding 0xd45980fbf0a0ac00 C=US, O=thawte, Inc., OU=Certification Services Division, OU=(c) 2006 thawte, Inc. - For authorized use only, CN=thawte Primary Root CA 26e8.17c0: supR3HardenedWinIsDesiredRootCA: Adding 0x4d3835aa4180b200 C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Root Certificate Authority 2011 26e8.17c0: supR3HardenedWinIsDesiredRootCA: Adding 0xc9edb72b684ba00 C=US, O=Entrust, Inc., OU=See www.entrust.net/legal-terms, OU=(c) 2009 Entrust, Inc. - for authorized use only, CN=Entrust Root Certification Authority - G2 26e8.17c0: supR3HardenedWinIsDesiredRootCA: Adding 0xf5cd95e581a4ab00 C=US, O=SecureTrust Corporation, CN=SecureTrust CA 26e8.17c0: supR3HardenedWinIsDesiredRootCA: Adding 0x298be035a30bab00 C=DE, O=Deutsche Telekom AG, OU=T-TeleSec Trust Center, CN=Deutsche Telekom Root CA 2 26e8.17c0: supR3HardenedWinIsDesiredRootCA: Adding 0xabd0695c5d11d15e C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification Authority - G2, OU=(c) 1998 VeriSign, Inc. - For authorized use only, OU=VeriSign Trust Network 26e8.17c0: supR3HardenedWinIsDesiredRootCA: Adding 0x6f2ebe0e24cfa600 OU=GlobalSign Root CA - R2, O=GlobalSign, CN=GlobalSign 26e8.17c0: supR3HardenedWinIsDesiredRootCA: Adding 0x14018a1bf29e595c C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification Authority 26e8.17c0: supR3HardenedWinIsDesiredRootCA: Adding 0x35f812d09650dc00 C=FR, O=Certplus, CN=Class 2 Primary CA 26e8.17c0: supR3HardenedWinIsDesiredRootCA: Adding 0xc66d30927ebce400 C=US, O=Network Solutions L.L.C., CN=Network Solutions Certificate Authority 26e8.17c0: supR3HardenedWinIsDesiredRootCA: Adding 0x9e5bc2d78b6a3636 C=ZA, ST=Western Cape, L=Cape Town, O=Thawte Consulting cc, OU=Certification Services Division, CN=Thawte Premium Server CA, Email=premium-server@thawte.com 26e8.17c0: supR3HardenedWinIsDesiredRootCA: Adding 0x7c4fd32ec1b1ce00 C=PL, O=Unizeto Sp. z o.o., CN=Certum CA 26e8.17c0: supR3HardenedWinIsDesiredRootCA: Adding 0xd4fbe673e5ccc600 C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert High Assurance EV Root CA 26e8.17c0: supR3HardenedWinIsDesiredRootCA: Adding 0x16e64d2a56ccf200 C=US, ST=Arizona, L=Scottsdale, O=Starfield Technologies, Inc., OU=http://certificates.starfieldtech.com/repository/, CN=Starfield Services Root Certificate Authority 26e8.17c0: supR3HardenedWinIsDesiredRootCA: Adding 0xb28612a94b4dad00 O=Entrust.net, OU=www.entrust.net/CPS_2048 incorp. by ref. (limits liab.), OU=(c) 1999 Entrust.net Limited, CN=Entrust.net Certification Authority (2048) 26e8.17c0: supR3HardenedWinIsDesiredRootCA: Adding 0x357a29080824af00 C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. - For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority - G5 26e8.17c0: supR3HardenedWinIsDesiredRootCA: Adding 0x59faf1086271bf00 C=US, ST=Arizona, L=Scottsdale, O=GoDaddy.com, Inc., CN=Go Daddy Root Certificate Authority - G2 26e8.17c0: supR3HardenedWinIsDesiredRootCA: Adding 0x466cbc09db88c100 C=IL, O=StartCom Ltd., OU=Secure Digital Certificate Signing, CN=StartCom Certification Authority 26e8.17c0: supR3HardenedWinIsDesiredRootCA: Adding 0x30669a4e82fa800 C=US, O=America Online Inc., CN=America Online Root Certification Authority 1 26e8.17c0: supR3HardenedWinIsDesiredRootCA: Adding 0xb16dd37ffeb3b300 C=JP, O=SECOM Trust.net, OU=Security Communication RootCA1 26e8.17c0: supR3HardenedWinIsDesiredRootCA: Adding 0x3401b15e3761c700 C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2008 VeriSign, Inc. - For authorized use only, CN=VeriSign Universal Root Certification Authority 26e8.17c0: supR3HardenedWinIsDesiredRootCA: Adding 0x7cd4ff7b15b8be00 C=US, O=GeoTrust Inc., CN=GeoTrust Primary Certification Authority 26e8.17c0: supR3HardenedWinIsDesiredRootCA: Adding 0x20b7075b3689b600 C=IL, O=StartCom Ltd., CN=StartCom Certification Authority G2 26e8.17c0: supR3HardenedWinIsDesiredRootCA: Adding 0x491857ead79dde00 C=US, O=The Go Daddy Group, Inc., OU=Go Daddy Class 2 Certification Authority 26e8.17c0: supR3HardenedWinIsDesiredRootCA: Adding 0xab549401526569d3 L=Internet, O=VeriSign, Inc., OU=VeriSign Commercial Software Publishers CA 26e8.17c0: supR3HardenedWinIsDesiredRootCA: Adding 0x92ac5ed85c2d0e9b C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2007 VeriSign, Inc. - For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority - G4 26e8.17c0: supR3HardenedWinIsDesiredRootCA: Adding 0x1f78fc529cbacb00 C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 1999 VeriSign, Inc. - For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority - G3 26e8.17c0: supR3HardenedWinIsDesiredRootCA: Adding 0x8043e4ce150ead00 C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Assured ID Root CA 26e8.17c0: supR3HardenedWinIsDesiredRootCA: Adding 0xa8b43f38c3f7b100 C=US, ST=UT, L=Salt Lake City, O=The USERTRUST Network, OU=http://www.usertrust.com, CN=UTN-USERFirst-Hardware 26e8.17c0: supR3HardenedWinIsDesiredRootCA: Adding 0x331d58625ee2dc00 C=US, O=GeoTrust Inc., OU=(c) 2008 GeoTrust Inc. - For authorized use only, CN=GeoTrust Primary Certification Authority - G3 26e8.17c0: supR3HardenedWinIsDesiredRootCA: Adding 0xf2e6331af7b700 C=SE, O=AddTrust AB, OU=AddTrust External TTP Network, CN=AddTrust External CA Root 26e8.17c0: supR3HardenedWinRetrieveTrustedRootCAs: cAdded=57 26e8.17c0: SUPR3HardenedMain: Load Runtime... 26e8.17c0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'. 26e8.17c0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp100.dll'. 26e8.17c0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'ws2_32.dll'. 26e8.17c0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'rpcrt4.dll'. 26e8.17c0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll) WinVerifyTrust 26e8.17c0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'... 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008] 26e8.17c0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'... 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008] 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000474 pwszName=\Device\HarddiskVolume3\Windows\System32\ws2_32.dll 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000002693db0 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000002693db0 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=3EF3BDC1E84DFA17EA056313214EE88EC3E66F79 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat'; file='\Device\HarddiskVolume3\Windows\System32\ws2_32.dll' 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900) 26e8.17c0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. 26e8.17c0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #16 'rpcrt4.dll'. 26e8.17c0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #17 'nsi.dll'. 26e8.17c0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\ws2_32.dll) WinVerifyTrust 26e8.17c0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\ws2_32.dll 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'... 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008] 26e8.17c0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'. 26e8.17c0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll) WinVerifyTrust 26e8.17c0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'... 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008] 26e8.17c0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll) WinVerifyTrust 26e8.17c0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'... 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008] 26e8.17c0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'nsi.dll'... 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: 'nsi.dll' -> '\Device\HarddiskVolume3\Windows\System32\nsi.dll' [rcNtRedir=0xc0150008] 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000458 pwszName=\Device\HarddiskVolume3\Windows\System32\nsi.dll 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000002693db0 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000002693db0 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=7AFD8538945F2D05BC1AF949B9B19B7D2D9FBBF8 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\ntpe.cat'; file='\Device\HarddiskVolume3\Windows\System32\nsi.dll' 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900) 26e8.17c0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\nsi.dll) WinVerifyTrust 26e8.17c0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\nsi.dll 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'... 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008] 26e8.17c0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] 26e8.17c0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000982de0:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling] 26e8.17c0: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll 26e8.17c0: supR3HardenedDllNotificationCallback: load 000007fee2270000 LB 0x00562000 C:\Program Files\Oracle\VirtualBox\VBoxRT.dll [fFlags=0x0] 26e8.17c0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll 26e8.17c0: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll 26e8.17c0: supR3HardenedDllNotificationCallback: load 0000000050190000 LB 0x000d2000 C:\Program Files\Oracle\VirtualBox\MSVCR100.dll [fFlags=0x0] 26e8.17c0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll 26e8.17c0: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll 26e8.17c0: supR3HardenedDllNotificationCallback: load 00000000502b0000 LB 0x00098000 C:\Program Files\Oracle\VirtualBox\MSVCP100.dll [fFlags=0x0] 26e8.17c0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll 26e8.17c0: supR3HardenedDllNotificationCallback: load 000007fefdf10000 LB 0x0004d000 C:\Windows\system32\WS2_32.dll [fFlags=0x0] 26e8.17c0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ws2_32.dll 26e8.17c0: supR3HardenedDllNotificationCallback: load 000007feff7f0000 LB 0x00008000 C:\Windows\system32\NSI.dll [fFlags=0x0] 26e8.17c0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\nsi.dll 26e8.17c0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000008d6610:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\Windows\System32;C:\Program Files (x86)\Java\jre7\bin;C:\Windows;C:\Windows\System32\wbem;C:\Windows\System32\WindowsPowerShell\v1.0;C:\Program Files (x86)\Git\cmd;C:\Program Files (x86)\CMake\bin;D:\mobileFX\Projects\Software\Coconut\Libs\node-v5.5.0\Release;e:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\nodejs\x86;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn;C:\Program Files (x86)\Microsoft SQL Server\100\DTS\Binn;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\VSShell\Common7\IDE;C:\Program Files\Microsoft SQL Server\110\Tools\Binn;C:\Program Files\Microsoft SQL Server\120\Tools\Binn;C:\Program Files (x86)\Windows Kits\8.1\Windows Performance Toolkit;C:\Program Files (x86)\Microsoft SDKs\TypeScript\1.0;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\emsdk\python\2.7.5.3_32bit;D:\mobileFX\Projects\Software\Coconut\IDE\Studio;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\Apache\bin;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\curl\bin;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\jq;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\MinGW\bin;D:\mobileFX\Projects\Software\Intralot\iRGS\3rd_party\node.js\Release\node_modules\.bin;C:\Program Files (x86)\Skype\Phone\;C:\Program Files (x86)\SSH Secure Shell;C:\Users\Administrator\AppData\Local\Pandoc\ [calling] 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee2270000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 26e8.17c0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000008d6610:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\Windows\System32;C:\Program Files (x86)\Java\jre7\bin;C:\Windows;C:\Windows\System32\wbem;C:\Windows\System32\WindowsPowerShell\v1.0;C:\Program Files (x86)\Git\cmd;C:\Program Files (x86)\CMake\bin;D:\mobileFX\Projects\Software\Coconut\Libs\node-v5.5.0\Release;e:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\nodejs\x86;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn;C:\Program Files (x86)\Microsoft SQL Server\100\DTS\Binn;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\VSShell\Common7\IDE;C:\Program Files\Microsoft SQL Server\110\Tools\Binn;C:\Program Files\Microsoft SQL Server\120\Tools\Binn;C:\Program Files (x86)\Windows Kits\8.1\Windows Performance Toolkit;C:\Program Files (x86)\Microsoft SDKs\TypeScript\1.0;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\emsdk\python\2.7.5.3_32bit;D:\mobileFX\Projects\Software\Coconut\IDE\Studio;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\Apache\bin;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\curl\bin;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\jq;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\MinGW\bin;D:\mobileFX\Projects\Software\Intralot\iRGS\3rd_party\node.js\Release\node_modules\.bin;C:\Program Files (x86)\Skype\Phone\;C:\Program Files (x86)\SSH Secure Shell;C:\Users\Administrator\AppData\Local\Pandoc\ [calling] 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee2270000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 26e8.17c0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000008d6610:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\Windows\System32;C:\Program Files (x86)\Java\jre7\bin;C:\Windows;C:\Windows\System32\wbem;C:\Windows\System32\WindowsPowerShell\v1.0;C:\Program Files (x86)\Git\cmd;C:\Program Files (x86)\CMake\bin;D:\mobileFX\Projects\Software\Coconut\Libs\node-v5.5.0\Release;e:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\nodejs\x86;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn;C:\Program Files (x86)\Microsoft SQL Server\100\DTS\Binn;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\VSShell\Common7\IDE;C:\Program Files\Microsoft SQL Server\110\Tools\Binn;C:\Program Files\Microsoft SQL Server\120\Tools\Binn;C:\Program Files (x86)\Windows Kits\8.1\Windows Performance Toolkit;C:\Program Files (x86)\Microsoft SDKs\TypeScript\1.0;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\emsdk\python\2.7.5.3_32bit;D:\mobileFX\Projects\Software\Coconut\IDE\Studio;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\Apache\bin;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\curl\bin;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\jq;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\MinGW\bin;D:\mobileFX\Projects\Software\Intralot\iRGS\3rd_party\node.js\Release\node_modules\.bin;C:\Program Files (x86)\Skype\Phone\;C:\Program Files (x86)\SSH Secure Shell;C:\Users\Administrator\AppData\Local\Pandoc\ [calling] 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee2270000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 26e8.17c0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000008d6610:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\Windows\System32;C:\Program Files (x86)\Java\jre7\bin;C:\Windows;C:\Windows\System32\wbem;C:\Windows\System32\WindowsPowerShell\v1.0;C:\Program Files (x86)\Git\cmd;C:\Program Files (x86)\CMake\bin;D:\mobileFX\Projects\Software\Coconut\Libs\node-v5.5.0\Release;e:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\nodejs\x86;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn;C:\Program Files (x86)\Microsoft SQL Server\100\DTS\Binn;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\VSShell\Common7\IDE;C:\Program Files\Microsoft SQL Server\110\Tools\Binn;C:\Program Files\Microsoft SQL Server\120\Tools\Binn;C:\Program Files (x86)\Windows Kits\8.1\Windows Performance Toolkit;C:\Program Files (x86)\Microsoft SDKs\TypeScript\1.0;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\emsdk\python\2.7.5.3_32bit;D:\mobileFX\Projects\Software\Coconut\IDE\Studio;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\Apache\bin;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\curl\bin;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\jq;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\MinGW\bin;D:\mobileFX\Projects\Software\Intralot\iRGS\3rd_party\node.js\Release\node_modules\.bin;C:\Program Files (x86)\Skype\Phone\;C:\Program Files (x86)\SSH Secure Shell;C:\Users\Administrator\AppData\Local\Pandoc\ [calling] 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee2270000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 26e8.17c0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000008d6610:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\Windows\System32;C:\Program Files (x86)\Java\jre7\bin;C:\Windows;C:\Windows\System32\wbem;C:\Windows\System32\WindowsPowerShell\v1.0;C:\Program Files (x86)\Git\cmd;C:\Program Files (x86)\CMake\bin;D:\mobileFX\Projects\Software\Coconut\Libs\node-v5.5.0\Release;e:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\nodejs\x86;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn;C:\Program Files (x86)\Microsoft SQL Server\100\DTS\Binn;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\VSShell\Common7\IDE;C:\Program Files\Microsoft SQL Server\110\Tools\Binn;C:\Program Files\Microsoft SQL Server\120\Tools\Binn;C:\Program Files (x86)\Windows Kits\8.1\Windows Performance Toolkit;C:\Program Files (x86)\Microsoft SDKs\TypeScript\1.0;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\emsdk\python\2.7.5.3_32bit;D:\mobileFX\Projects\Software\Coconut\IDE\Studio;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\Apache\bin;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\curl\bin;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\jq;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\MinGW\bin;D:\mobileFX\Projects\Software\Intralot\iRGS\3rd_party\node.js\Release\node_modules\.bin;C:\Program Files (x86)\Skype\Phone\;C:\Program Files (x86)\SSH Secure Shell;C:\Users\Administrator\AppData\Local\Pandoc\ [calling] 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee2270000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 26e8.17c0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000008d6610:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\Windows\System32;C:\Program Files (x86)\Java\jre7\bin;C:\Windows;C:\Windows\System32\wbem;C:\Windows\System32\WindowsPowerShell\v1.0;C:\Program Files (x86)\Git\cmd;C:\Program Files (x86)\CMake\bin;D:\mobileFX\Projects\Software\Coconut\Libs\node-v5.5.0\Release;e:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\nodejs\x86;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn;C:\Program Files (x86)\Microsoft SQL Server\100\DTS\Binn;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\VSShell\Common7\IDE;C:\Program Files\Microsoft SQL Server\110\Tools\Binn;C:\Program Files\Microsoft SQL Server\120\Tools\Binn;C:\Program Files (x86)\Windows Kits\8.1\Windows Performance Toolkit;C:\Program Files (x86)\Microsoft SDKs\TypeScript\1.0;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\emsdk\python\2.7.5.3_32bit;D:\mobileFX\Projects\Software\Coconut\IDE\Studio;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\Apache\bin;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\curl\bin;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\jq;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\MinGW\bin;D:\mobileFX\Projects\Software\Intralot\iRGS\3rd_party\node.js\Release\node_modules\.bin;C:\Program Files (x86)\Skype\Phone\;C:\Program Files (x86)\SSH Secure Shell;C:\Users\Administrator\AppData\Local\Pandoc\ [calling] 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee2270000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee2270000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee2270000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee2270000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee2270000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee2270000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee2270000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee2270000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 26e8.17c0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000008d6610:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\Windows\System32;C:\Program Files (x86)\Java\jre7\bin;C:\Windows;C:\Windows\System32\wbem;C:\Windows\System32\WindowsPowerShell\v1.0;C:\Program Files (x86)\Git\cmd;C:\Program Files (x86)\CMake\bin;D:\mobileFX\Projects\Software\Coconut\Libs\node-v5.5.0\Release;e:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\nodejs\x86;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn;C:\Program Files (x86)\Microsoft SQL Server\100\DTS\Binn;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\VSShell\Common7\IDE;C:\Program Files\Microsoft SQL Server\110\Tools\Binn;C:\Program Files\Microsoft SQL Server\120\Tools\Binn;C:\Program Files (x86)\Windows Kits\8.1\Windows Performance Toolkit;C:\Program Files (x86)\Microsoft SDKs\TypeScript\1.0;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\emsdk\python\2.7.5.3_32bit;D:\mobileFX\Projects\Software\Coconut\IDE\Studio;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\Apache\bin;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\curl\bin;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\jq;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\MinGW\bin;D:\mobileFX\Projects\Software\Intralot\iRGS\3rd_party\node.js\Release\node_modules\.bin;C:\Program Files (x86)\Skype\Phone\;C:\Program Files (x86)\SSH Secure Shell;C:\Users\Administrator\AppData\Local\Pandoc\ [calling] 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee2270000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee2270000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee2270000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee2270000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee2270000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee2270000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee2270000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee2270000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee2270000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee2270000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee2270000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee2270000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee2270000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee2270000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee2270000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee2270000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 26e8.17c0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000008d6610:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\Windows\System32;C:\Program Files (x86)\Java\jre7\bin;C:\Windows;C:\Windows\System32\wbem;C:\Windows\System32\WindowsPowerShell\v1.0;C:\Program Files (x86)\Git\cmd;C:\Program Files (x86)\CMake\bin;D:\mobileFX\Projects\Software\Coconut\Libs\node-v5.5.0\Release;e:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\nodejs\x86;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn;C:\Program Files (x86)\Microsoft SQL Server\100\DTS\Binn;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\VSShell\Common7\IDE;C:\Program Files\Microsoft SQL Server\110\Tools\Binn;C:\Program Files\Microsoft SQL Server\120\Tools\Binn;C:\Program Files (x86)\Windows Kits\8.1\Windows Performance Toolkit;C:\Program Files (x86)\Microsoft SDKs\TypeScript\1.0;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\emsdk\python\2.7.5.3_32bit;D:\mobileFX\Projects\Software\Coconut\IDE\Studio;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\Apache\bin;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\curl\bin;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\jq;D:\mobileFX\Projects\Software\Coconut\IDE\Studio\etc\3rd_party\MinGW\bin;D:\mobileFX\Projects\Software\Intralot\iRGS\3rd_party\node.js\Release\node_modules\.bin;C:\Program Files (x86)\Skype\Phone\;C:\Program Files (x86)\SSH Secure Shell;C:\Users\Administrator\AppData\Local\Pandoc\ [calling] 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee2270000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee2270000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee2270000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee2270000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll' 26e8.17c0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wintrust.dll 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\Wintrust.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000002717f70:C:\Windows\system32 [calling] 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefd370000 'C:\Windows\system32\Wintrust.dll' 26e8.17c0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\crypt32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000002717f70:C:\Windows\system32 [calling] 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefd4a0000 'C:\Windows\system32\crypt32.dll' 26e8.17c0: SUPR3HardenedMain: Load TrustedMain... 26e8.17c0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'. 26e8.17c0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'. 26e8.17c0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'ole32.dll'. 26e8.17c0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'oleaut32.dll'. 26e8.17c0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'vboxrt.dll'. 26e8.17c0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'advapi32.dll'. 26e8.17c0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'msvcp100.dll'. 26e8.17c0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxHeadless.dll) WinVerifyTrust 26e8.17c0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxHeadless.dll 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'... 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008] 26e8.17c0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'... 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008] 26e8.17c0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'... 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008] 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'... 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008] 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000000000004c8 pwszName=\Device\HarddiskVolume3\Windows\System32\oleaut32.dll 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000002693db0 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000002693db0 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=8A837B0D823EB506C6A4C447C1962174D27ED954 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB3020338~31bf3856ad364e35~amd64~~6.1.1.1.cat'; file='\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900) 26e8.17c0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'ole32.dll'. 26e8.17c0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcrt.dll'. 26e8.17c0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'rpcrt4.dll'. 26e8.17c0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'user32.dll'. 26e8.17c0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'gdi32.dll'. 26e8.17c0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\oleaut32.dll) WinVerifyTrust 26e8.17c0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\oleaut32.dll 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'... 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008] 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000000000004d4 pwszName=\Device\HarddiskVolume3\Windows\System32\ole32.dll 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000002693db0 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000002693db0 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=2E93C1851E5754D607F55581B4DE2A30B711C830 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_2_for_KB3072633~31bf3856ad364e35~amd64~~6.1.1.1.cat'; file='\Device\HarddiskVolume3\Windows\System32\ole32.dll' 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900) 26e8.17c0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. 26e8.17c0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'gdi32.dll'. 26e8.17c0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #25 'user32.dll'. 26e8.17c0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #26 'rpcrt4.dll'. 26e8.17c0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\ole32.dll) WinVerifyTrust 26e8.17c0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\ole32.dll 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008] 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'... 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008] 26e8.17c0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'... 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008] 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008] 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'... 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008] 26e8.17c0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'... 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008] 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008] 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'... 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008] 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'... 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008] 26e8.17c0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ole32.dll 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxHeadless.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000982de0:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling] 26e8.17c0: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxHeadless.dll 26e8.17c0: supR3HardenedDllNotificationCallback: load 000007fee62e0000 LB 0x00066000 C:\Program Files\Oracle\VirtualBox\VBoxHeadless.dll [fFlags=0x0] 26e8.17c0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxHeadless.dll 26e8.17c0: supR3HardenedDllNotificationCallback: load 000007fefe2e0000 LB 0x00203000 C:\Windows\system32\ole32.dll [fFlags=0x0] 26e8.17c0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ole32.dll 26e8.17c0: supR3HardenedDllNotificationCallback: load 000007fefe810000 LB 0x000d7000 C:\Windows\system32\OLEAUT32.dll [fFlags=0x0] 26e8.17c0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee62e0000 'C:\Program Files\Oracle\VirtualBox\VBoxHeadless.dll' 26e8.17c0: SUPR3HardenedMain: Calling TrustedMain (000007fee62ea000)... 26e8.17c0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\cryptbase.dll 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\CRYPTBASE.dll (Input=CRYPTBASE.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000982de0:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling] 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefd0d0000 'C:\Windows\system32\CRYPTBASE.dll' 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000508 pwszName=\Device\HarddiskVolume3\Windows\System32\clbcatq.dll 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000002693db0 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000002693db0 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=B01469787CE9D8C6FEE98FB207652B88B8494526 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\ntpe.cat'; file='\Device\HarddiskVolume3\Windows\System32\clbcatq.dll' 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900) 26e8.17c0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'. 26e8.17c0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'ole32.dll'. 26e8.17c0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'. 26e8.17c0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'advapi32.dll'. 26e8.17c0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'oleaut32.dll'. 26e8.17c0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'rpcrt4.dll'. 26e8.17c0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\clbcatq.dll) WinVerifyTrust 26e8.17c0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\clbcatq.dll 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'... 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008] 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'... 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008] 26e8.17c0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'... 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008] 26e8.17c0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'... 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008] 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'... 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008] 26e8.17c0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ole32.dll 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\CLBCatQ.DLL (Input=CLBCatQ.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000982de0:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling] 26e8.17c0: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\clbcatq.dll 26e8.17c0: supR3HardenedDllNotificationCallback: load 000007fefe240000 LB 0x00099000 C:\Windows\system32\CLBCatQ.DLL [fFlags=0x0] 26e8.17c0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\clbcatq.dll 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefe240000 'C:\Windows\system32\CLBCatQ.DLL' 26e8.17c0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'. 26e8.17c0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp100.dll'. 26e8.17c0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'psapi.dll'. 26e8.17c0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'vboxrt.dll'. 26e8.17c0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'advapi32.dll'. 26e8.17c0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'version.dll'. 26e8.17c0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'ws2_32.dll'. 26e8.17c0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'ole32.dll'. 26e8.17c0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'oleaut32.dll'. 26e8.17c0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxC.dll) WinVerifyTrust 26e8.17c0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxC.dll 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'... 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008] 26e8.17c0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'... 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008] 26e8.17c0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ole32.dll 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'... 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008] 26e8.17c0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ws2_32.dll 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'version.dll'... 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: 'version.dll' -> '\Device\HarddiskVolume3\Windows\System32\version.dll' [rcNtRedir=0xc0150008] 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000518 pwszName=\Device\HarddiskVolume3\Windows\System32\version.dll 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000002693db0 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000002693db0 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=A3AB94A028D0330A3DBCAE54C04C648532198DB9 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\ntpe.cat'; file='\Device\HarddiskVolume3\Windows\System32\version.dll' 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900) 26e8.17c0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcrt.dll'. 26e8.17c0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\version.dll) WinVerifyTrust 26e8.17c0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\version.dll 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'... 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008] 26e8.17c0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'... 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008] 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'psapi.dll'... 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: 'psapi.dll' -> '\Device\HarddiskVolume3\Windows\System32\psapi.dll' [rcNtRedir=0xc0150008] 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: hFile=000000000000053c pwszName=\Device\HarddiskVolume3\Windows\System32\psapi.dll 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000002693db0 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000002693db0 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=561BAAB249C395B66D294444DF251EDB701DB607 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\ntpe.cat'; file='\Device\HarddiskVolume3\Windows\System32\psapi.dll' 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900) 26e8.17c0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\psapi.dll) WinVerifyTrust 26e8.17c0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\psapi.dll 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'... 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008] 26e8.17c0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'... 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008] 26e8.17c0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'... 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008] 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxC.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000009be890:C:\Program Files\Oracle\VirtualBox;C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling] 26e8.17c0: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxC.dll 26e8.17c0: supR3HardenedDllNotificationCallback: load 000007fee1c90000 LB 0x005d8000 C:\Program Files\Oracle\VirtualBox\VBoxC.dll [fFlags=0x0] 26e8.17c0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxC.dll 26e8.17c0: supR3HardenedDllNotificationCallback: load 00000000776c0000 LB 0x00007000 C:\Windows\system32\PSAPI.DLL [fFlags=0x0] 26e8.17c0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\psapi.dll 26e8.17c0: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\version.dll 26e8.17c0: supR3HardenedDllNotificationCallback: load 000007fefc3f0000 LB 0x0000c000 C:\Windows\system32\VERSION.dll [fFlags=0x0] 26e8.17c0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\version.dll 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee1c90000 'C:\Program Files\Oracle\VirtualBox\VBoxC.dll' 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefdb60000 'C:\Windows\system32\ADVAPI32.dll' 26e8.17c0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\cryptsp.dll 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\CRYPTSP.dll (Input=CRYPTSP.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000983410:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling] 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefccc0000 'C:\Windows\system32\CRYPTSP.dll' 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000538 pwszName=\Device\HarddiskVolume3\Windows\System32\RpcRtRemote.dll 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000002693db0 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000002693db0 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=DFC4A7C7E103D324218E6EF5D219B953746D6EC1 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat'; file='\Device\HarddiskVolume3\Windows\System32\RpcRtRemote.dll' 26e8.17c0: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900) 26e8.17c0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #13 'rpcrt4.dll'. 26e8.17c0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\RpcRtRemote.dll) WinVerifyTrust 26e8.17c0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\RpcRtRemote.dll 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'... 26e8.17c0: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008] 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\RpcRtRemote.dll (Input=RpcRtRemote.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000983410:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling] 26e8.17c0: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\RpcRtRemote.dll 26e8.17c0: supR3HardenedDllNotificationCallback: load 000007fefd1e0000 LB 0x00014000 C:\Windows\system32\RpcRtRemote.dll [fFlags=0x0] 26e8.17c0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\RpcRtRemote.dll 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefd1e0000 'C:\Windows\system32\RpcRtRemote.dll' 26e8.17c0: supR3HardenedDllNotificationCallback: Unload 000007fee1c90000 LB 0x005d8000 C:\Program Files\Oracle\VirtualBox\VBoxC.dll [flags=0x0] 26e8.17c0: supR3HardenedDllNotificationCallback: Unload 000007fefc3f0000 LB 0x0000c000 C:\Windows\system32\VERSION.dll [flags=0x0] 26e8.17c0: supR3HardenedDllNotificationCallback: Unload 00000000776c0000 LB 0x00007000 C:\Windows\system32\PSAPI.DLL [flags=0x0] 26e8.17c0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\OLEAUT32.dll (Input=OLEAUT32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000982de0:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling] 26e8.17c0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefe810000 'C:\Windows\system32\OLEAUT32.dll' 26e8.17c0: Terminating the normal way: rcExit=1 108c.2748: supR3HardNtChildWaitFor[2]: Quitting: ExitCode=0x1 (rcNtWait=0x0, rcNt1=0x0, rcNt2=0x103, rcNt3=0x103, 421 ms, the end); 1960.2644: supR3HardNtChildWaitFor[1]: Quitting: ExitCode=0x1 (rcNtWait=0x0, rcNt1=0x0, rcNt2=0x103, rcNt3=0x103, 982 ms, the end);