VirtualBox

Ticket #16392: m310-vagrant-env_database_1484572415822_60317-2017-01-16-16-17-58.log

File m310-vagrant-env_database_1484572415822_60317-2017-01-16-16-17-58.log, 256.0 KB (added by enabokov, 8 years ago)
Line 
131d0.2dd8: Log file opened: 5.1.12r112440 g_hStartupLog=000000000000005c g_uNtVerCombined=0xa0383900
231d0.2dd8: \SystemRoot\System32\ntdll.dll:
331d0.2dd8: CreationTime: 2016-12-09T18:29:55.301212200Z
431d0.2dd8: LastWriteTime: 2016-11-11T10:13:03.409595100Z
531d0.2dd8: ChangeTime: 2017-01-14T16:41:38.723411500Z
631d0.2dd8: FileAttributes: 0x20
731d0.2dd8: Size: 0x1cc888
831d0.2dd8: NT Headers: 0xd8
931d0.2dd8: Timestamp: 0x5825887f
1031d0.2dd8: Machine: 0x8664 - amd64
1131d0.2dd8: Timestamp: 0x5825887f
1231d0.2dd8: Image Version: 10.0
1331d0.2dd8: SizeOfImage: 0x1d1000 (1904640)
1431d0.2dd8: Resource Dir: 0x168000 LB 0x67988
1531d0.2dd8: ProductName: Microsoft® Windows® Operating System
1631d0.2dd8: ProductVersion: 10.0.14393.479
1731d0.2dd8: FileVersion: 10.0.14393.479 (rs1_release.161110-2025)
1831d0.2dd8: FileDescription: NT Layer DLL
1931d0.2dd8: \SystemRoot\System32\kernel32.dll:
2031d0.2dd8: CreationTime: 2016-07-16T11:42:16.155721400Z
2131d0.2dd8: LastWriteTime: 2016-07-16T11:42:16.155721400Z
2231d0.2dd8: ChangeTime: 2016-10-15T16:42:55.899105200Z
2331d0.2dd8: FileAttributes: 0x20
2431d0.2dd8: Size: 0xaade8
2531d0.2dd8: NT Headers: 0xf0
2631d0.2dd8: Timestamp: 0x57899a29
2731d0.2dd8: Machine: 0x8664 - amd64
2831d0.2dd8: Timestamp: 0x57899a29
2931d0.2dd8: Image Version: 10.0
3031d0.2dd8: SizeOfImage: 0xab000 (700416)
3131d0.2dd8: Resource Dir: 0xa9000 LB 0x528
3231d0.2dd8: ProductName: Microsoft® Windows® Operating System
3331d0.2dd8: ProductVersion: 10.0.14393.0
3431d0.2dd8: FileVersion: 10.0.14393.0 (rs1_release.160715-1616)
3531d0.2dd8: FileDescription: Windows NT BASE API Client DLL
3631d0.2dd8: \SystemRoot\System32\KernelBase.dll:
3731d0.2dd8: CreationTime: 2016-12-09T18:29:23.770217500Z
3831d0.2dd8: LastWriteTime: 2016-11-11T10:13:54.529597600Z
3931d0.2dd8: ChangeTime: 2017-01-14T16:41:38.717410400Z
4031d0.2dd8: FileAttributes: 0x20
4131d0.2dd8: Size: 0x21c780
4231d0.2dd8: NT Headers: 0xf8
4331d0.2dd8: Timestamp: 0x582588e6
4431d0.2dd8: Machine: 0x8664 - amd64
4531d0.2dd8: Timestamp: 0x582588e6
4631d0.2dd8: Image Version: 10.0
4731d0.2dd8: SizeOfImage: 0x21d000 (2215936)
4831d0.2dd8: Resource Dir: 0x201000 LB 0x550
4931d0.2dd8: ProductName: Microsoft® Windows® Operating System
5031d0.2dd8: ProductVersion: 10.0.14393.479
5131d0.2dd8: FileVersion: 10.0.14393.479 (rs1_release.161110-2025)
5231d0.2dd8: FileDescription: Windows NT BASE API Client DLL
5331d0.2dd8: \SystemRoot\System32\apisetschema.dll:
5431d0.2dd8: CreationTime: 2016-07-16T11:42:21.577586000Z
5531d0.2dd8: LastWriteTime: 2016-07-16T11:42:21.577586000Z
5631d0.2dd8: ChangeTime: 2016-10-15T16:42:54.414731300Z
5731d0.2dd8: FileAttributes: 0x20
5831d0.2dd8: Size: 0x18960
5931d0.2dd8: NT Headers: 0xc8
6031d0.2dd8: Timestamp: 0x57899bd2
6131d0.2dd8: Machine: 0x8664 - amd64
6231d0.2dd8: Timestamp: 0x57899bd2
6331d0.2dd8: Image Version: 10.0
6431d0.2dd8: SizeOfImage: 0x19000 (102400)
6531d0.2dd8: Resource Dir: 0x18000 LB 0x400
6631d0.2dd8: ProductName: Microsoft® Windows® Operating System
6731d0.2dd8: ProductVersion: 10.0.14393.0
6831d0.2dd8: FileVersion: 10.0.14393.0 (rs1_release.160715-1616)
6931d0.2dd8: FileDescription: ApiSet Schema DLL
7031d0.2dd8: NtOpenDirectoryObject failed on \Driver: 0xc0000022
7131d0.2dd8: supR3HardenedWinFindAdversaries: 0x0
7231d0.2dd8: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox'
7331d0.2dd8: Calling main()
7431d0.2dd8: SUPR3HardenedMain: pszProgName=VirtualBox fFlags=0x2
7531d0.2dd8: supR3HardenedWinInitAppBin(0x2): '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox'
7631d0.2dd8: SUPR3HardenedMain: Respawn #1
7731d0.2dd8: System32: \Device\HarddiskVolume3\Windows\System32
7831d0.2dd8: WinSxS: \Device\HarddiskVolume3\Windows\WinSxS
7931d0.2dd8: KnownDllPath: C:\WINDOWS\System32
8031d0.2dd8: '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
8131d0.2dd8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe)
8231d0.2dd8: supR3HardNtEnableThreadCreation:
8331d0.2dd8: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007ff9e3a79fa0 pvNtTerminateThread=00007ff9e3aa6b20
8431d0.2dd8: supR3HardenedWinDoReSpawn(1): New child 3054.3148 [kernel32].
8531d0.2dd8: supR3HardNtChildGatherData: PebBaseAddress=0000000000c1f000 cbPeb=0x388
8631d0.2dd8: supR3HardNtPuChFindNtdll: uNtDllParentAddr=00007ff9e3a00000 uNtDllChildAddr=00007ff9e3a00000
8731d0.2dd8: supR3HardenedWinSetupChildInit: uLdrInitThunk=00007ff9e3a79fa0
8831d0.2dd8: supR3HardenedWinSetupChildInit: Start child.
8931d0.2dd8: supR3HardNtChildWaitFor: Found expected request 0 (PurifyChildAndCloseHandles) after 0 ms.
9031d0.2dd8: supR3HardNtChildPurify: Startup delay kludge #1/0: 262 ms, 20 sleeps
9131d0.2dd8: supHardNtVpScanVirtualMemory: enmKind=CHILD_PURIFICATION
9231d0.2dd8: *0000000000000000-ffffffffff4dffff 0x0001/0x0000 0x0000000
9331d0.2dd8: *0000000000b20000-0000000000afffff 0x0004/0x0004 0x0020000
9431d0.2dd8: *0000000000b40000-0000000000b29fff 0x0002/0x0002 0x0040000
9531d0.2dd8: 0000000000b56000-0000000000b4bfff 0x0001/0x0000 0x0000000
9631d0.2dd8: *0000000000b60000-0000000000b5bfff 0x0002/0x0002 0x0040000
9731d0.2dd8: 0000000000b64000-0000000000b57fff 0x0001/0x0000 0x0000000
9831d0.2dd8: *0000000000b70000-0000000000b6dfff 0x0004/0x0004 0x0020000
9931d0.2dd8: 0000000000b72000-0000000000ae3fff 0x0001/0x0000 0x0000000
10031d0.2dd8: *0000000000c00000-0000000000be0fff 0x0000/0x0004 0x0020000
10131d0.2dd8: 0000000000c1f000-0000000000c1bfff 0x0004/0x0004 0x0020000
10231d0.2dd8: 0000000000c22000-0000000000a43fff 0x0000/0x0004 0x0020000
10331d0.2dd8: *0000000000e00000-0000000000d04fff 0x0000/0x0004 0x0020000
10431d0.2dd8: 0000000000efb000-0000000000ef7fff 0x0104/0x0004 0x0020000
10531d0.2dd8: 0000000000efe000-0000000000efbfff 0x0004/0x0004 0x0020000
10631d0.2dd8: 0000000000f00000-ffffffff81e1ffff 0x0001/0x0000 0x0000000
10731d0.2dd8: *000000007ffe0000-000000007ffdefff 0x0002/0x0002 0x0020000
10831d0.2dd8: 000000007ffe1000-000000007ffd1fff 0x0000/0x0002 0x0020000
10931d0.2dd8: 000000007fff0000-ffff800a8c39ffff 0x0001/0x0000 0x0000000
11031d0.2dd8: *00007ff673c40000-00007ff673c1cfff 0x0002/0x0002 0x0040000
11131d0.2dd8: 00007ff673c63000-00007ff672f05fff 0x0001/0x0000 0x0000000
11231d0.2dd8: *00007ff6749c0000-00007ff6749c0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
11331d0.2dd8: 00007ff6749c1000-00007ff674a2ffff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
11431d0.2dd8: 00007ff674a30000-00007ff674a30fff 0x0080/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
11531d0.2dd8: 00007ff674a31000-00007ff674a75fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
11631d0.2dd8: 00007ff674a76000-00007ff674a76fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
11731d0.2dd8: 00007ff674a77000-00007ff674a77fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
11831d0.2dd8: 00007ff674a78000-00007ff674a7cfff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
11931d0.2dd8: 00007ff674a7d000-00007ff674a7dfff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
12031d0.2dd8: 00007ff674a7e000-00007ff674a7efff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
12131d0.2dd8: 00007ff674a7f000-00007ff674a82fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
12231d0.2dd8: 00007ff674a83000-00007ff674acafff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
12331d0.2dd8: 00007ff674acb000-00007ff305b95fff 0x0001/0x0000 0x0000000
12431d0.2dd8: *00007ff9e3a00000-00007ff9e3a00fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
12531d0.2dd8: 00007ff9e3a01000-00007ff9e3b07fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
12631d0.2dd8: 00007ff9e3b08000-00007ff9e3b4bfff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
12731d0.2dd8: 00007ff9e3b4c000-00007ff9e3b54fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
12831d0.2dd8: 00007ff9e3b55000-00007ff9e3b62fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
12931d0.2dd8: 00007ff9e3b63000-00007ff9e3b63fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
13031d0.2dd8: 00007ff9e3b64000-00007ff9e3b66fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
13131d0.2dd8: 00007ff9e3b67000-00007ff9e3bd0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
13231d0.2dd8: 00007ff9e3bd1000-00007ff3c77c1fff 0x0001/0x0000 0x0000000
13331d0.2dd8: *00007ffffffe0000-00007ffffffcffff 0x0001/0x0002 0x0020000
13431d0.2dd8: VirtualBox.exe: timestamp 0x58594e7b (rc=VINF_SUCCESS)
13531d0.2dd8: '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
13631d0.2dd8: '\Device\HarddiskVolume3\Windows\System32\ntdll.dll' has no imports
13731d0.2dd8: supR3HardNtChildPurify: Done after 308 ms and 0 fixes (loop #0).
1383054.3148: Log file opened: 5.1.12r112440 g_hStartupLog=0000000000000004 g_uNtVerCombined=0xa0383900
1393054.3148: supR3HardenedVmProcessInit: uNtDllAddr=00007ff9e3a00000 g_uNtVerCombined=0xa0383900
14031d0.2dd8: supR3HardNtEnableThreadCreation:
1413054.3148: ntdll.dll: timestamp 0x5825887f (rc=VINF_SUCCESS)
1423054.3148: New simple heap: #1 0000000001000000 LB 0x400000 (for 1904640 allocation)
1433054.3148: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox'
1443054.3148: System32: \Device\HarddiskVolume3\Windows\System32
1453054.3148: WinSxS: \Device\HarddiskVolume3\Windows\WinSxS
1463054.3148: KnownDllPath: C:\WINDOWS\System32
1473054.3148: supR3HardenedVmProcessInit: Opening vboxdrv stub...
1483054.3148: supR3HardenedVmProcessInit: Restoring LdrInitializeThunk...
1493054.3148: supR3HardenedVmProcessInit: Returning to LdrInitializeThunk...
1503054.3148: Registered Dll notification callback with NTDLL.
1513054.3148: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\kernel32.dll)
1523054.3148: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\kernel32.dll
1533054.3148: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\KERNEL32.DLL (Input=KERNEL32.DLL, rcNtResolve=0xc0150008) *pfFlags=0xffffffff pwszSearchPath=0000000000004001:<flags> [calling]
1543054.3148: supR3HardenedDllNotificationCallback: load 00007ff9e07f0000 LB 0x0021d000 C:\WINDOWS\System32\KERNELBASE.dll [fFlags=0x0]
1553054.3148: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\KernelBase.dll)
1563054.3148: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\KernelBase.dll
1573054.3148: supR3HardenedDllNotificationCallback: load 00007ff9e19f0000 LB 0x000ab000 C:\WINDOWS\System32\KERNEL32.DLL [fFlags=0x0]
1583054.3148: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
1593054.3148: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e19f0000 'C:\WINDOWS\System32\KERNEL32.DLL'
1603054.3148: supR3HardenedDllNotificationCallback: load 00007ff6749c0000 LB 0x0010b000 C:\Program Files\Oracle\VirtualBox\VirtualBox.exe [fFlags=0x0]
1613054.3148: '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
1623054.3148: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe)
1633054.3148: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
1643054.3148: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007ff9e3a79fa0 pvNtTerminateThread=00007ff9e3aa6b20
16531d0.2dd8: supR3HardNtChildWaitFor: Found expected request 1 (CloseEvents) after 82 ms.
1663054.3148: \SystemRoot\System32\ntdll.dll:
1673054.3148: CreationTime: 2016-12-09T18:29:55.301212200Z
1683054.3148: LastWriteTime: 2016-11-11T10:13:03.409595100Z
1693054.3148: ChangeTime: 2017-01-14T16:41:38.723411500Z
1703054.3148: FileAttributes: 0x20
1713054.3148: Size: 0x1cc888
1723054.3148: NT Headers: 0xd8
1733054.3148: Timestamp: 0x5825887f
1743054.3148: Machine: 0x8664 - amd64
1753054.3148: Timestamp: 0x5825887f
1763054.3148: Image Version: 10.0
1773054.3148: SizeOfImage: 0x1d1000 (1904640)
1783054.3148: Resource Dir: 0x168000 LB 0x67988
1793054.3148: ProductName: Microsoft® Windows® Operating System
1803054.3148: ProductVersion: 10.0.14393.479
1813054.3148: FileVersion: 10.0.14393.479 (rs1_release.161110-2025)
1823054.3148: FileDescription: NT Layer DLL
1833054.3148: \SystemRoot\System32\kernel32.dll:
1843054.3148: CreationTime: 2016-07-16T11:42:16.155721400Z
1853054.3148: LastWriteTime: 2016-07-16T11:42:16.155721400Z
1863054.3148: ChangeTime: 2016-10-15T16:42:55.899105200Z
1873054.3148: FileAttributes: 0x20
1883054.3148: Size: 0xaade8
1893054.3148: NT Headers: 0xf0
1903054.3148: Timestamp: 0x57899a29
1913054.3148: Machine: 0x8664 - amd64
1923054.3148: Timestamp: 0x57899a29
1933054.3148: Image Version: 10.0
1943054.3148: SizeOfImage: 0xab000 (700416)
1953054.3148: Resource Dir: 0xa9000 LB 0x528
1963054.3148: ProductName: Microsoft® Windows® Operating System
1973054.3148: ProductVersion: 10.0.14393.0
1983054.3148: FileVersion: 10.0.14393.0 (rs1_release.160715-1616)
1993054.3148: FileDescription: Windows NT BASE API Client DLL
2003054.3148: \SystemRoot\System32\KernelBase.dll:
2013054.3148: CreationTime: 2016-12-09T18:29:23.770217500Z
2023054.3148: LastWriteTime: 2016-11-11T10:13:54.529597600Z
2033054.3148: ChangeTime: 2017-01-14T16:41:38.717410400Z
2043054.3148: FileAttributes: 0x20
2053054.3148: Size: 0x21c780
2063054.3148: NT Headers: 0xf8
2073054.3148: Timestamp: 0x582588e6
2083054.3148: Machine: 0x8664 - amd64
2093054.3148: Timestamp: 0x582588e6
2103054.3148: Image Version: 10.0
2113054.3148: SizeOfImage: 0x21d000 (2215936)
2123054.3148: Resource Dir: 0x201000 LB 0x550
2133054.3148: ProductName: Microsoft® Windows® Operating System
2143054.3148: ProductVersion: 10.0.14393.479
2153054.3148: FileVersion: 10.0.14393.479 (rs1_release.161110-2025)
2163054.3148: FileDescription: Windows NT BASE API Client DLL
2173054.3148: \SystemRoot\System32\apisetschema.dll:
2183054.3148: CreationTime: 2016-07-16T11:42:21.577586000Z
2193054.3148: LastWriteTime: 2016-07-16T11:42:21.577586000Z
2203054.3148: ChangeTime: 2016-10-15T16:42:54.414731300Z
2213054.3148: FileAttributes: 0x20
2223054.3148: Size: 0x18960
2233054.3148: NT Headers: 0xc8
2243054.3148: Timestamp: 0x57899bd2
2253054.3148: Machine: 0x8664 - amd64
2263054.3148: Timestamp: 0x57899bd2
2273054.3148: Image Version: 10.0
2283054.3148: SizeOfImage: 0x19000 (102400)
2293054.3148: Resource Dir: 0x18000 LB 0x400
2303054.3148: ProductName: Microsoft® Windows® Operating System
2313054.3148: ProductVersion: 10.0.14393.0
2323054.3148: FileVersion: 10.0.14393.0 (rs1_release.160715-1616)
2333054.3148: FileDescription: ApiSet Schema DLL
2343054.3148: NtOpenDirectoryObject failed on \Driver: 0xc0000022
2353054.3148: supR3HardenedWinFindAdversaries: 0x0
2363054.3148: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox'
2373054.3148: Calling main()
2383054.3148: SUPR3HardenedMain: pszProgName=VirtualBox fFlags=0x2
2393054.3148: supR3HardenedWinInitAppBin(0x2): '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox'
2403054.3148: '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
2413054.3148: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe)
2423054.3148: SUPR3HardenedMain: Respawn #2
2433054.3148: supR3HardNtEnableThreadCreation:
2443054.3148: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007ff9e3a79fa0 pvNtTerminateThread=00007ff9e3aa6b20
2453054.3148: supR3HardenedWinDoReSpawn(2): New child 3144.3168 [kernel32].
2463054.3148: supR3HardenedWinReSpawn: NtSetInformationThread/ThreadHideFromDebugger failed: 0xc0000022 (harmless)
2473054.3148: supR3HardNtChildGatherData: PebBaseAddress=0000000000993000 cbPeb=0x388
2483054.3148: supR3HardNtPuChFindNtdll: uNtDllParentAddr=00007ff9e3a00000 uNtDllChildAddr=00007ff9e3a00000
2493054.3148: supR3HardenedWinSetupChildInit: uLdrInitThunk=00007ff9e3a79fa0
2503054.3148: supR3HardenedWinSetupChildInit: Start child.
2513054.3148: supR3HardNtChildWaitFor: Found expected request 0 (PurifyChildAndCloseHandles) after 1 ms.
2523054.3148: supR3HardNtChildPurify: Startup delay kludge #1/0: 265 ms, 28 sleeps
2533054.3148: supHardNtVpScanVirtualMemory: enmKind=CHILD_PURIFICATION
2543054.3148: *0000000000000000-ffffffffff8dffff 0x0001/0x0000 0x0000000
2553054.3148: *0000000000720000-00000000006fffff 0x0004/0x0004 0x0020000
2563054.3148: *0000000000740000-0000000000729fff 0x0002/0x0002 0x0040000
2573054.3148: 0000000000756000-000000000074bfff 0x0001/0x0000 0x0000000
2583054.3148: *0000000000760000-000000000075bfff 0x0002/0x0002 0x0040000
2593054.3148: 0000000000764000-0000000000757fff 0x0001/0x0000 0x0000000
2603054.3148: *0000000000770000-000000000076dfff 0x0004/0x0004 0x0020000
2613054.3148: 0000000000772000-00000000006e3fff 0x0001/0x0000 0x0000000
2623054.3148: *0000000000800000-000000000066cfff 0x0000/0x0004 0x0020000
2633054.3148: 0000000000993000-000000000098ffff 0x0004/0x0004 0x0020000
2643054.3148: 0000000000996000-000000000092bfff 0x0000/0x0004 0x0020000
2653054.3148: *0000000000a00000-0000000000904fff 0x0000/0x0004 0x0020000
2663054.3148: 0000000000afb000-0000000000af7fff 0x0104/0x0004 0x0020000
2673054.3148: 0000000000afe000-0000000000afbfff 0x0004/0x0004 0x0020000
2683054.3148: 0000000000b00000-ffffffff8161ffff 0x0001/0x0000 0x0000000
2693054.3148: *000000007ffe0000-000000007ffdefff 0x0002/0x0002 0x0020000
2703054.3148: 000000007ffe1000-000000007ffd1fff 0x0000/0x0002 0x0020000
2713054.3148: 000000007fff0000-ffff800a8c10ffff 0x0001/0x0000 0x0000000
2723054.3148: *00007ff673ed0000-00007ff673eacfff 0x0002/0x0002 0x0040000
2733054.3148: 00007ff673ef3000-00007ff673425fff 0x0001/0x0000 0x0000000
2743054.3148: *00007ff6749c0000-00007ff6749c0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
2753054.3148: 00007ff6749c1000-00007ff674a2ffff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
2763054.3148: 00007ff674a30000-00007ff674a30fff 0x0080/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
2773054.3148: 00007ff674a31000-00007ff674a75fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
2783054.3148: 00007ff674a76000-00007ff674a76fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
2793054.3148: 00007ff674a77000-00007ff674a77fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
2803054.3148: 00007ff674a78000-00007ff674a7cfff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
2813054.3148: 00007ff674a7d000-00007ff674a7dfff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
2823054.3148: 00007ff674a7e000-00007ff674a7efff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
2833054.3148: 00007ff674a7f000-00007ff674a82fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
2843054.3148: 00007ff674a83000-00007ff674acafff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
2853054.3148: 00007ff674acb000-00007ff305b95fff 0x0001/0x0000 0x0000000
2863054.3148: *00007ff9e3a00000-00007ff9e3a00fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
2873054.3148: 00007ff9e3a01000-00007ff9e3b07fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
2883054.3148: 00007ff9e3b08000-00007ff9e3b4bfff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
2893054.3148: 00007ff9e3b4c000-00007ff9e3b54fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
2903054.3148: 00007ff9e3b55000-00007ff9e3b62fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
2913054.3148: 00007ff9e3b63000-00007ff9e3b63fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
2923054.3148: 00007ff9e3b64000-00007ff9e3b66fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
2933054.3148: 00007ff9e3b67000-00007ff9e3bd0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
2943054.3148: 00007ff9e3bd1000-00007ff3c77c1fff 0x0001/0x0000 0x0000000
2953054.3148: *00007ffffffe0000-00007ffffffcffff 0x0001/0x0002 0x0020000
2963054.3148: VirtualBox.exe: timestamp 0x58594e7b (rc=VINF_SUCCESS)
2973054.3148: '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
2983054.3148: '\Device\HarddiskVolume3\Windows\System32\ntdll.dll' has no imports
2993054.3148: supR3HardNtChildPurify: Done after 312 ms and 0 fixes (loop #0).
3003144.3168: Log file opened: 5.1.12r112440 g_hStartupLog=0000000000000004 g_uNtVerCombined=0xa0383900
3013144.3168: supR3HardenedVmProcessInit: uNtDllAddr=00007ff9e3a00000 g_uNtVerCombined=0xa0383900
3023144.3168: ntdll.dll: timestamp 0x5825887f (rc=VINF_SUCCESS)
3033144.3168: New simple heap: #1 0000000000c00000 LB 0x400000 (for 1904640 allocation)
3043054.3148: supR3HardenedEarlyCompact: Removed heap 1 (0x00000001000000 LB 0x400000)
3053054.3148: supR3HardNtEnableThreadCreation:
3063144.3168: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox'
3073144.3168: System32: \Device\HarddiskVolume3\Windows\System32
3083144.3168: WinSxS: \Device\HarddiskVolume3\Windows\WinSxS
3093144.3168: KnownDllPath: C:\WINDOWS\System32
3103144.3168: supR3HardenedVmProcessInit: Opening vboxdrv...
3113144.3168: supR3HardenedVmProcessInit: Restoring LdrInitializeThunk...
3123144.3168: supR3HardenedVmProcessInit: Returning to LdrInitializeThunk...
3133144.3168: Registered Dll notification callback with NTDLL.
3143144.3168: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\kernel32.dll)
3153144.3168: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\kernel32.dll
3163144.3168: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\KERNEL32.DLL (Input=KERNEL32.DLL, rcNtResolve=0xc0150008) *pfFlags=0xffffffff pwszSearchPath=0000000000004001:<flags> [calling]
3173144.3168: supR3HardenedDllNotificationCallback: load 00007ff9e07f0000 LB 0x0021d000 C:\WINDOWS\System32\KERNELBASE.dll [fFlags=0x0]
3183144.3168: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\KernelBase.dll)
3193144.3168: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\KernelBase.dll
3203144.3168: supR3HardenedDllNotificationCallback: load 00007ff9e19f0000 LB 0x000ab000 C:\WINDOWS\System32\KERNEL32.DLL [fFlags=0x0]
3213144.3168: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
3223144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e19f0000 'C:\WINDOWS\System32\KERNEL32.DLL'
3233144.3168: supR3HardenedDllNotificationCallback: load 00007ff6749c0000 LB 0x0010b000 C:\Program Files\Oracle\VirtualBox\VirtualBox.exe [fFlags=0x0]
3243144.3168: '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
3253144.3168: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe)
3263144.3168: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe
3273144.3168: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007ff9e3a79fa0 pvNtTerminateThread=00007ff9e3aa6b20
3283054.3148: supR3HardNtChildWaitFor: Found expected request 1 (CloseEvents) after 94 ms.
3293144.3168: \SystemRoot\System32\ntdll.dll:
3303144.3168: CreationTime: 2016-12-09T18:29:55.301212200Z
3313144.3168: LastWriteTime: 2016-11-11T10:13:03.409595100Z
3323144.3168: ChangeTime: 2017-01-14T16:41:38.723411500Z
3333144.3168: FileAttributes: 0x20
3343144.3168: Size: 0x1cc888
3353144.3168: NT Headers: 0xd8
3363144.3168: Timestamp: 0x5825887f
3373144.3168: Machine: 0x8664 - amd64
3383144.3168: Timestamp: 0x5825887f
3393144.3168: Image Version: 10.0
3403144.3168: SizeOfImage: 0x1d1000 (1904640)
3413144.3168: Resource Dir: 0x168000 LB 0x67988
3423144.3168: ProductName: Microsoft® Windows® Operating System
3433144.3168: ProductVersion: 10.0.14393.479
3443144.3168: FileVersion: 10.0.14393.479 (rs1_release.161110-2025)
3453144.3168: FileDescription: NT Layer DLL
3463144.3168: \SystemRoot\System32\kernel32.dll:
3473144.3168: CreationTime: 2016-07-16T11:42:16.155721400Z
3483144.3168: LastWriteTime: 2016-07-16T11:42:16.155721400Z
3493144.3168: ChangeTime: 2016-10-15T16:42:55.899105200Z
3503144.3168: FileAttributes: 0x20
3513144.3168: Size: 0xaade8
3523144.3168: NT Headers: 0xf0
3533144.3168: Timestamp: 0x57899a29
3543144.3168: Machine: 0x8664 - amd64
3553144.3168: Timestamp: 0x57899a29
3563144.3168: Image Version: 10.0
3573144.3168: SizeOfImage: 0xab000 (700416)
3583144.3168: Resource Dir: 0xa9000 LB 0x528
3593144.3168: ProductName: Microsoft® Windows® Operating System
3603144.3168: ProductVersion: 10.0.14393.0
3613144.3168: FileVersion: 10.0.14393.0 (rs1_release.160715-1616)
3623144.3168: FileDescription: Windows NT BASE API Client DLL
3633144.3168: \SystemRoot\System32\KernelBase.dll:
3643144.3168: CreationTime: 2016-12-09T18:29:23.770217500Z
3653144.3168: LastWriteTime: 2016-11-11T10:13:54.529597600Z
3663144.3168: ChangeTime: 2017-01-14T16:41:38.717410400Z
3673144.3168: FileAttributes: 0x20
3683144.3168: Size: 0x21c780
3693144.3168: NT Headers: 0xf8
3703144.3168: Timestamp: 0x582588e6
3713144.3168: Machine: 0x8664 - amd64
3723144.3168: Timestamp: 0x582588e6
3733144.3168: Image Version: 10.0
3743144.3168: SizeOfImage: 0x21d000 (2215936)
3753144.3168: Resource Dir: 0x201000 LB 0x550
3763144.3168: ProductName: Microsoft® Windows® Operating System
3773144.3168: ProductVersion: 10.0.14393.479
3783144.3168: FileVersion: 10.0.14393.479 (rs1_release.161110-2025)
3793144.3168: FileDescription: Windows NT BASE API Client DLL
3803144.3168: \SystemRoot\System32\apisetschema.dll:
3813144.3168: CreationTime: 2016-07-16T11:42:21.577586000Z
3823144.3168: LastWriteTime: 2016-07-16T11:42:21.577586000Z
3833144.3168: ChangeTime: 2016-10-15T16:42:54.414731300Z
3843144.3168: FileAttributes: 0x20
3853144.3168: Size: 0x18960
3863144.3168: NT Headers: 0xc8
3873144.3168: Timestamp: 0x57899bd2
3883144.3168: Machine: 0x8664 - amd64
3893144.3168: Timestamp: 0x57899bd2
3903144.3168: Image Version: 10.0
3913144.3168: SizeOfImage: 0x19000 (102400)
3923144.3168: Resource Dir: 0x18000 LB 0x400
3933144.3168: ProductName: Microsoft® Windows® Operating System
3943144.3168: ProductVersion: 10.0.14393.0
3953144.3168: FileVersion: 10.0.14393.0 (rs1_release.160715-1616)
3963144.3168: FileDescription: ApiSet Schema DLL
3973144.3168: NtOpenDirectoryObject failed on \Driver: 0xc0000022
3983144.3168: supR3HardenedWinFindAdversaries: 0x0
3993144.3168: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox'
4003144.3168: Calling main()
4013144.3168: SUPR3HardenedMain: pszProgName=VirtualBox fFlags=0x2
4023144.3168: supR3HardenedWinInitAppBin(0x2): '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox'
4033144.3168: '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
4043144.3168: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe)
4053144.3168: SUPR3HardenedMain: Final process, opening VBoxDrv...
4063144.3168: supR3HardenedEarlyCompact: Removed heap 1 (0x00000000c00000 LB 0x400000)
4073144.3168: supR3HardNtEnableThreadCreation:
4083144.3168: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxSupLib.dll)
4093144.3168: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxSupLib.dll
4103144.3168: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
4113144.3168: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxSupLib.dll [lacks WinVerifyTrust]
4123144.3168: supR3HardenedDllNotificationCallback: load 00007ff9a68d0000 LB 0x00005000 C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL [fFlags=0x0]
4133144.3168: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxSupLib.dll [lacks WinVerifyTrust]
4143144.3168: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxSupLib.dll [lacks WinVerifyTrust]
4153144.3168: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
4163144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9a68d0000 'C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL'
4173144.3168: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxSupLib.dll [lacks WinVerifyTrust]
4183144.3168: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
4193144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9a68d0000 'C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL'
4203144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9a68d0000 'C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL'
4213144.3168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
4223144.3168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msasn1.dll'.
4233144.3168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'crypt32.dll'.
4243144.3168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #25 'rpcrt4.dll'.
4253144.3168: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\wintrust.dll)
4263144.3168: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\wintrust.dll
4273144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
4283144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
4293144.3168: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll)
4303144.3168: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll
4313144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'crypt32.dll'...
4323144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: 'crypt32.dll' -> '\Device\HarddiskVolume3\Windows\System32\crypt32.dll' [rcNtRedir=0xc0150008]
4333144.3168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #29 'msasn1.dll'.
4343144.3168: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\crypt32.dll)
4353144.3168: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\crypt32.dll
4363144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msasn1.dll'...
4373144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: 'msasn1.dll' -> '\Device\HarddiskVolume3\Windows\System32\msasn1.dll' [rcNtRedir=0xc0150008]
4383144.3168: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\msasn1.dll)
4393144.3168: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\msasn1.dll
4403144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
4413144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
4423144.3168: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\msvcrt.dll)
4433144.3168: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\msvcrt.dll
4443144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msasn1.dll'...
4453144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: 'msasn1.dll' -> '\Device\HarddiskVolume3\Windows\System32\msasn1.dll' [rcNtRedir=0xc0150008]
4463144.3168: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msasn1.dll [lacks WinVerifyTrust]
4473144.3168: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\Wintrust.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
4483144.3168: supR3HardenedDllNotificationCallback: load 00007ff9e0fb0000 LB 0x0009e000 C:\WINDOWS\System32\msvcrt.dll [fFlags=0x0]
4493144.3168: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
4503144.3168: supR3HardenedDllNotificationCallback: load 00007ff9dfe60000 LB 0x00010000 C:\WINDOWS\System32\MSASN1.dll [fFlags=0x0]
4513144.3168: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msasn1.dll [lacks WinVerifyTrust]
4523144.3168: supR3HardenedDllNotificationCallback: load 00007ff9dfef0000 LB 0x000f5000 C:\WINDOWS\System32\ucrtbase.dll [fFlags=0x0]
4533144.3168: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\ucrtbase.dll)
4543144.3168: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll
4553144.3168: supR3HardenedDllNotificationCallback: load 00007ff9e0c30000 LB 0x001c9000 C:\WINDOWS\System32\CRYPT32.dll [fFlags=0x0]
4563144.3168: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll [lacks WinVerifyTrust]
4573144.3168: supR3HardenedDllNotificationCallback: load 00007ff9e1b00000 LB 0x00121000 C:\WINDOWS\System32\RPCRT4.dll [fFlags=0x0]
4583144.3168: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
4593144.3168: supR3HardenedDllNotificationCallback: load 00007ff9e0a10000 LB 0x00055000 C:\WINDOWS\System32\Wintrust.dll [fFlags=0x0]
4603144.3168: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
4613144.3168: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-synch-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
4623144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e07f0000 'api-ms-win-core-synch-l1-2-0'
4633144.3168: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-fibers-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
4643144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e07f0000 'api-ms-win-core-fibers-l1-1-1'
4653144.3168: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-fibers-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
4663144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e07f0000 'api-ms-win-core-fibers-l1-1-1'
4673144.3168: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-synch-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
4683144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e07f0000 'api-ms-win-core-synch-l1-2-0'
4693144.3168: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-l1-2-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
4703144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e07f0000 'api-ms-win-core-localization-l1-2-1'
4713144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e0a10000 'C:\WINDOWS\system32\Wintrust.dll'
4723144.3168: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\bcrypt.dll)
4733144.3168: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\bcrypt.dll
4743144.3168: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\bcrypt.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
4753144.3168: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\bcrypt.dll [lacks WinVerifyTrust]
4763144.3168: supR3HardenedDllNotificationCallback: load 00007ff9dfda0000 LB 0x0002b000 C:\WINDOWS\system32\bcrypt.dll [fFlags=0x0]
4773144.3168: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\bcrypt.dll [lacks WinVerifyTrust]
4783144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9dfda0000 'C:\WINDOWS\system32\bcrypt.dll'
4793144.3168: bcrypt.dll loaded at 00007ff9dfda0000, BCryptOpenAlgorithmProvider at 00007ff9dfda4260, preloading providers:
4803144.3168: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll)
4813144.3168: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll
4823144.3168: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\bcryptprimitives.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
4833144.3168: supR3HardenedDllNotificationCallback: load 00007ff9e06d0000 LB 0x0006a000 C:\WINDOWS\System32\bcryptprimitives.dll [fFlags=0x0]
4843144.3168: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll [lacks WinVerifyTrust]
4853144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e06d0000 'C:\WINDOWS\system32\bcryptprimitives.dll'
4863144.3168: BCryptOpenAlgorithmProvider(,'MD2',0,0) -> 0x0 (hAlgo=00000000011ee930)
4873144.3168: BCryptOpenAlgorithmProvider(,'MD4',0,0) -> 0x0 (hAlgo=00000000011f07f0)
4883144.3168: BCryptOpenAlgorithmProvider(,'MD5',0,0) -> 0x0 (hAlgo=00000000011f0ac0)
4893144.3168: BCryptOpenAlgorithmProvider(,'SHA1',0,0) -> 0x0 (hAlgo=00000000011f0d90)
4903144.3168: BCryptOpenAlgorithmProvider(,'SHA256',0,0) -> 0x0 (hAlgo=00000000011f1060)
4913144.3168: BCryptOpenAlgorithmProvider(,'SHA512',0,0) -> 0x0 (hAlgo=00000000011f1b40)
4923144.3168: BCryptOpenAlgorithmProvider(,'RSA',0,0) -> 0x0 (hAlgo=00000000011f1e10)
4933144.3168: BCryptOpenAlgorithmProvider(,'DSA',0,0) -> 0x0 (hAlgo=00000000011f20e0)
4943144.3168: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
4953144.3168: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\WINTRUST.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
4963144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e0a10000 'C:\Windows\System32\WINTRUST.DLL'
4973144.3168: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
4983144.3168: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\WINTRUST.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
4993144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e0a10000 'C:\Windows\System32\WINTRUST.DLL'
5003144.3168: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
5013144.3168: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\WINTRUST.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
5023144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e0a10000 'C:\Windows\System32\WINTRUST.DLL'
5033144.3168: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
5043144.3168: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\WINTRUST.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
5053144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e0a10000 'C:\Windows\System32\WINTRUST.DLL'
5063144.3168: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
5073144.3168: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\WINTRUST.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
5083144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e0a10000 'C:\Windows\System32\WINTRUST.DLL'
5093144.3168: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
5103144.3168: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\WINTRUST.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
5113144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e0a10000 'C:\Windows\System32\WINTRUST.DLL'
5123144.3168: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
5133144.3168: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\WINTRUST.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
5143144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e0a10000 'C:\Windows\System32\WINTRUST.DLL'
5153144.3168: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\cryptsp.dll)
5163144.3168: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\cryptsp.dll
5173144.3168: supR3HardenedDllNotificationCallback: load 00007ff9df890000 LB 0x00017000 C:\WINDOWS\SYSTEM32\CRYPTSP.dll [fFlags=0x0]
5183144.3168: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\cryptsp.dll [lacks WinVerifyTrust]
5193144.3168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #16 'bcrypt.dll'.
5203144.3168: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\rsaenh.dll)
5213144.3168: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
5223144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcrypt.dll'...
5233144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcrypt.dll' -> '\Device\HarddiskVolume3\Windows\System32\bcrypt.dll' [rcNtRedir=0xc0150008]
5243144.3168: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\bcrypt.dll [lacks WinVerifyTrust]
5253144.3168: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
5263144.3168: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
5273144.3168: supR3HardenedDllNotificationCallback: load 00007ff9df040000 LB 0x00033000 C:\WINDOWS\system32\rsaenh.dll [fFlags=0x0]
5283144.3168: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
5293144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9df040000 'C:\WINDOWS\system32\rsaenh.dll'
5303144.3168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'bcryptprimitives.dll'.
5313144.3168: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\cryptbase.dll)
5323144.3168: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\cryptbase.dll
5333144.3168: supR3HardenedDllNotificationCallback: load 00007ff9df5d0000 LB 0x0000b000 C:\WINDOWS\SYSTEM32\CRYPTBASE.dll [fFlags=0x0]
5343144.3168: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\cryptbase.dll [lacks WinVerifyTrust]
5353144.3168: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
5363144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcryptprimitives.dll'...
5373144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcryptprimitives.dll' -> '\Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll' [rcNtRedir=0xc0150008]
5383144.3168: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll [lacks WinVerifyTrust]
5393144.3168: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\kernel32.dll (Input=kernel32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
5403144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e19f0000 'C:\WINDOWS\System32\kernel32.dll'
5413144.3168: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
5423144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e0a10000 'C:\Windows\System32\WINTRUST.DLL'
5433144.3168: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll [lacks WinVerifyTrust]
5443144.3168: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\CRYPT32.dll (rcNtResolve=0xc0150008) *pfFlags=0x2 pwszSearchPath=0000000000000001:<flags> [calling]
5453144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e0c30000 'C:\WINDOWS\System32\CRYPT32.dll'
5463144.3168: supR3HardenedDllNotificationCallback: load 00007ff9e0f90000 LB 0x0001c000 C:\WINDOWS\System32\imagehlp.dll [fFlags=0x0]
5473144.3168: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\imagehlp.dll)
5483144.3168: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\imagehlp.dll
5493144.3168: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
5503144.3168: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
5513144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9df040000 'C:\WINDOWS\system32\rsaenh.dll'
5523144.3168: supR3HardenedDllNotificationCallback: load 00007ff9e1190000 LB 0x00059000 C:\WINDOWS\System32\sechost.dll [fFlags=0x0]
5533144.3168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'rpcrt4.dll'.
5543144.3168: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\sechost.dll)
5553144.3168: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\sechost.dll
5563144.3168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
5573144.3168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'rpcrt4.dll'.
5583144.3168: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\gpapi.dll)
5593144.3168: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\gpapi.dll
5603144.3168: supR3HardenedDllNotificationCallback: load 00007ff9dea30000 LB 0x00023000 C:\WINDOWS\SYSTEM32\gpapi.dll [fFlags=0x0]
5613144.3168: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gpapi.dll [lacks WinVerifyTrust]
5623144.3168: supR3HardenedDllNotificationCallback: load 00007ff9dfe80000 LB 0x00014000 C:\WINDOWS\System32\profapi.dll [fFlags=0x0]
5633144.3168: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\profapi.dll)
5643144.3168: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\profapi.dll
5653144.3168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
5663144.3168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'crypt32.dll'.
5673144.3168: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\cryptnet.dll)
5683144.3168: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\cryptnet.dll
5693144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'crypt32.dll'...
5703144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: 'crypt32.dll' -> '\Device\HarddiskVolume3\Windows\System32\crypt32.dll' [rcNtRedir=0xc0150008]
5713144.3168: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll [lacks WinVerifyTrust]
5723144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
5733144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
5743144.3168: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
5753144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
5763144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
5773144.3168: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
5783144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
5793144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
5803144.3168: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
5813144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
5823144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
5833144.3168: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
5843144.3168: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\cryptnet.dll (Input=cryptnet.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
5853144.3168: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
5863144.3168: supR3HardenedDllNotificationCallback: load 00007ff9a6630000 LB 0x0002f000 C:\WINDOWS\System32\cryptnet.dll [fFlags=0x0]
5873144.3168: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
5883144.3168: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
5893144.3168: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x2 pwszSearchPath=0000000000000001:<flags> [calling]
5903144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9a6630000 'C:\WINDOWS\System32\cryptnet.dll'
5913144.3168: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
5923144.3168: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x2 pwszSearchPath=0000000000000001:<flags> [calling]
5933144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9a6630000 'C:\WINDOWS\System32\cryptnet.dll'
5943144.3168: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
5953144.3168: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x2 pwszSearchPath=0000000000000001:<flags> [calling]
5963144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9a6630000 'C:\WINDOWS\System32\cryptnet.dll'
5973144.3168: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
5983144.3168: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x2 pwszSearchPath=0000000000000001:<flags> [calling]
5993144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9a6630000 'C:\WINDOWS\System32\cryptnet.dll'
6003144.3168: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
6013144.3168: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x2 pwszSearchPath=0000000000000001:<flags> [calling]
6023144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9a6630000 'C:\WINDOWS\System32\cryptnet.dll'
6033144.3168: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
6043144.3168: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x2 pwszSearchPath=0000000000000001:<flags> [calling]
6053144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9a6630000 'C:\WINDOWS\System32\cryptnet.dll'
6063144.3168: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
6073144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9a6630000 'C:\WINDOWS\System32\cryptnet.dll'
6083144.3168: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
6093144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9a6630000 'C:\WINDOWS\System32\cryptnet.dll'
6103144.3168: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
6113144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9a6630000 'C:\WINDOWS\System32\cryptnet.dll'
6123144.3168: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
6133144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9a6630000 'C:\WINDOWS\System32\cryptnet.dll'
6143144.3168: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
6153144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9a6630000 'C:\WINDOWS\System32\cryptnet.dll'
6163144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9a6630000 'C:\WINDOWS\System32\cryptnet.dll'
6173144.3168: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
6183144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9a6630000 'C:\Windows\System32\cryptnet.dll'
6193144.3168: supR3HardenedDllNotificationCallback: load 00007ff9e1500000 LB 0x000a2000 C:\WINDOWS\System32\advapi32.dll [fFlags=0x0]
6203144.3168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
6213144.3168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'sechost.dll'.
6223144.3168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #21 'rpcrt4.dll'.
6233144.3168: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\advapi32.dll)
6243144.3168: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\advapi32.dll
6253144.3168: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
6263144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
6273144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
6283144.3168: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
6293144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'sechost.dll'...
6303144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: 'sechost.dll' -> '\Device\HarddiskVolume3\Windows\System32\sechost.dll' [rcNtRedir=0xc0150008]
6313144.3168: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\sechost.dll [lacks WinVerifyTrust]
6323144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
6333144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
6343144.3168: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
6353144.3168: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
6363144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9df040000 'C:\WINDOWS\system32\rsaenh.dll'
6373144.3168: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll [lacks WinVerifyTrust]
6383144.3168: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\crypt32.dll (Input=crypt32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
6393144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e0c30000 'C:\WINDOWS\System32\crypt32.dll'
6403144.3168: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000000 pwszName=\SystemRoot\System32\ntdll.dll
6413144.3168: supR3HardNtViCallWinVerifyTrustCatFile: New context 00000000012540f0
6423144.3168: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000012540f0
6433144.3168: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=2F0CC1880DEF521CFB586B70171713A785823BD2
6443144.3168: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
6453144.3168: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\rpcrt4.dll (Input=rpcrt4.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
6463144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e1b00000 'C:\WINDOWS\System32\rpcrt4.dll'
6473144.3168: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
6483144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e0a10000 'C:\Windows\System32\WINTRUST.DLL'
6493144.3168: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
6503144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e0a10000 'C:\Windows\System32\WINTRUST.DLL'
6513144.3168: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
6523144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e0a10000 'C:\Windows\System32\WINTRUST.DLL'
6533144.3168: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
6543144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e0a10000 'C:\Windows\System32\WINTRUST.DLL'
6553144.3168: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
6563144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e0a10000 'C:\Windows\System32\WINTRUST.DLL'
6573144.3168: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
6583144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e0a10000 'C:\Windows\System32\WINTRUST.DLL'
6593144.3168: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
6603144.3168: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\WINTRUST.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
6613144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e0a10000 'C:\Windows\System32\WINTRUST.DLL'
6623144.3168: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
6633144.3168: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
6643144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9df040000 'C:\WINDOWS\system32\rsaenh.dll'
6653144.3168: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll [lacks WinVerifyTrust]
6663144.3168: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\crypt32.dll (Input=crypt32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
6673144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e0c30000 'C:\WINDOWS\System32\crypt32.dll'
6683144.3168: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_4450_for_KB3213986~31bf3856ad364e35~amd64~~10.0.1.1.cat'; file='\SystemRoot\System32\ntdll.dll'
6693144.3168: g_pfnWinVerifyTrust=00007ff9e0a17ff0
6703144.3168: supR3HardenedScreenImage/preload: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll [redoing WinVerifyTrust]
6713144.3168: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
6723144.3168: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
6733144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9df040000 'C:\WINDOWS\system32\rsaenh.dll'
6743144.3168: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll [lacks WinVerifyTrust]
6753144.3168: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\crypt32.dll (Input=crypt32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
6763144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e0c30000 'C:\WINDOWS\System32\crypt32.dll'
6773144.3168: supR3HardenedScreenImage/preload: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\crypt32.dll'
6783144.3168: supR3HardenedScreenImage/preload: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wintrust.dll [redoing WinVerifyTrust]
6793144.3168: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
6803144.3168: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
6813144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9df040000 'C:\WINDOWS\system32\rsaenh.dll'
6823144.3168: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll
6833144.3168: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\crypt32.dll (Input=crypt32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
6843144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e0c30000 'C:\WINDOWS\System32\crypt32.dll'
6853144.3168: supR3HardenedScreenImage/preload: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\wintrust.dll'
6863144.3168: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
6873144.3168: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
6883144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9df040000 'C:\WINDOWS\system32\rsaenh.dll'
6893144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e0c30000 'C:\WINDOWS\System32\crypt32.dll'
6903144.3168: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\advapi32.dll'
6913144.3168: supR3HardNtViCallWinVerifyTrustCatFile: hFile=000000000000037c pwszName=\Device\HarddiskVolume3\Windows\System32\cryptnet.dll
6923144.3168: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000012540f0
6933144.3168: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000012540f0
6943144.3168: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=2887B283709E29E7E5AD7830D0E43D33DF9C9C9B
6953144.3168: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
6963144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9df040000 'C:\WINDOWS\system32\rsaenh.dll'
6973144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e0c30000 'C:\WINDOWS\System32\crypt32.dll'
6983144.3168: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-OneCore-CoreSystem-onecore-Package~31bf3856ad364e35~amd64~~10.0.14393.0.cat'; file='\Device\HarddiskVolume3\Windows\System32\cryptnet.dll'
6993144.3168: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
7003144.3168: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\cryptnet.dll'
7013144.3168: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
7023144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9df040000 'C:\WINDOWS\system32\rsaenh.dll'
7033144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e0c30000 'C:\WINDOWS\System32\crypt32.dll'
7043144.3168: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\profapi.dll'
7053144.3168: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
7063144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9df040000 'C:\WINDOWS\system32\rsaenh.dll'
7073144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e0c30000 'C:\WINDOWS\System32\crypt32.dll'
7083144.3168: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\gpapi.dll'
7093144.3168: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
7103144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9df040000 'C:\WINDOWS\system32\rsaenh.dll'
7113144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e0c30000 'C:\WINDOWS\System32\crypt32.dll'
7123144.3168: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\sechost.dll'
7133144.3168: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
7143144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9df040000 'C:\WINDOWS\system32\rsaenh.dll'
7153144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e0c30000 'C:\WINDOWS\System32\crypt32.dll'
7163144.3168: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\imagehlp.dll'
7173144.3168: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
7183144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9df040000 'C:\WINDOWS\system32\rsaenh.dll'
7193144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e0c30000 'C:\WINDOWS\System32\crypt32.dll'
7203144.3168: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\cryptbase.dll'
7213144.3168: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
7223144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9df040000 'C:\WINDOWS\system32\rsaenh.dll'
7233144.3168: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll
7243144.3168: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\crypt32.dll (Input=crypt32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
7253144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e0c30000 'C:\WINDOWS\System32\crypt32.dll'
7263144.3168: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\rsaenh.dll'
7273144.3168: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
7283144.3168: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
7293144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9df040000 'C:\WINDOWS\system32\rsaenh.dll'
7303144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e0c30000 'C:\WINDOWS\System32\crypt32.dll'
7313144.3168: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\cryptsp.dll'
7323144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9df040000 'C:\WINDOWS\system32\rsaenh.dll'
7333144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e0c30000 'C:\WINDOWS\System32\crypt32.dll'
7343144.3168: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll'
7353144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9df040000 'C:\WINDOWS\system32\rsaenh.dll'
7363144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e0c30000 'C:\WINDOWS\System32\crypt32.dll'
7373144.3168: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\bcrypt.dll'
7383144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9df040000 'C:\WINDOWS\system32\rsaenh.dll'
7393144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e0c30000 'C:\WINDOWS\System32\crypt32.dll'
7403144.3168: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\ucrtbase.dll'
7413144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9df040000 'C:\WINDOWS\system32\rsaenh.dll'
7423144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e0c30000 'C:\WINDOWS\System32\crypt32.dll'
7433144.3168: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll'
7443144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9df040000 'C:\WINDOWS\system32\rsaenh.dll'
7453144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e0c30000 'C:\WINDOWS\System32\crypt32.dll'
7463144.3168: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\msasn1.dll'
7473144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9df040000 'C:\WINDOWS\system32\rsaenh.dll'
7483144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e0c30000 'C:\WINDOWS\System32\crypt32.dll'
7493144.3168: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll'
7503144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9df040000 'C:\WINDOWS\system32\rsaenh.dll'
7513144.3168: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxSupLib.dll'
7523144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9df040000 'C:\WINDOWS\system32\rsaenh.dll'
7533144.3168: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.exe'
7543144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9df040000 'C:\WINDOWS\system32\rsaenh.dll'
7553144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e0c30000 'C:\WINDOWS\System32\crypt32.dll'
7563144.3168: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\KernelBase.dll'
7573144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9df040000 'C:\WINDOWS\system32\rsaenh.dll'
7583144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e0c30000 'C:\WINDOWS\System32\crypt32.dll'
7593144.3168: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\kernel32.dll'
7603144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e0c30000 'C:\WINDOWS\system32\crypt32.dll'
7613144.3168: supR3HardenedWinIsDesiredRootCA: Adding 0xfba8bad2f5cab000 CN=WIN-9K4D4MFT71I
7623144.3168: supR3HardenedWinIsDesiredRootCA: Adding 0x5ad46780fa5df300 DC=com, DC=microsoft, CN=Microsoft Root Certificate Authority
7633144.3168: supR3HardenedWinIsDesiredRootCA: Adding 0xea5386456178582b C=ZA, ST=Western Cape, L=Durbanville, O=Thawte, OU=Thawte Certification, CN=Thawte Timestamping CA
7643144.3168: supR3HardenedWinIsDesiredRootCA: Adding 0x3be670c1bd02a900 OU=Copyright (c) 1997 Microsoft Corp., OU=Microsoft Corporation, CN=Microsoft Root Authority
7653144.3168: supR3HardenedWinIsDesiredRootCA: Adding 0xe991ee72b03db500 C=US, O=Symantec Corporation, CN=Symantec Enterprise Mobile Root for Microsoft
7663144.3168: supR3HardenedWinIsDesiredRootCA: Adding 0x4d3835aa4180b200 C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Root Certificate Authority 2011
7673144.3168: supR3HardenedWinIsDesiredRootCA: Adding 0x6c61069cd294ef00 CN=PlayStation
7683144.3168: supR3HardenedWinIsDesiredRootCA: Adding 0x987869d3679da00 CN=ClockworkMod
7693144.3168: supR3HardenedWinIsDesiredRootCA: Adding 0x646e3fe3ba08df00 C=US, O=MSFT, CN=Microsoft Authenticode(tm) Root Authority
7703144.3168: supR3HardenedWinIsDesiredRootCA: Adding 0xdf9c3d370520cf00 CN=PlayStation
7713144.3168: supR3HardenedWinIsDesiredRootCA: Adding 0xece4e4289e08b900 C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Root Certificate Authority 2010
7723144.3168: supR3HardenedWinIsDesiredRootCA: Adding 0x3dce28a29d75a600 CN=PlayStation
7733144.3168: supR3HardenedWinIsDesiredRootCA: Adding 0x2c4df0325b85d800 CN=PlayStation
7743144.3168: supR3HardenedWinIsDesiredRootCA: Adding 0x43a9cc371ff5385a O=Microsoft Trust Network, OU=Microsoft Corporation, OU=Microsoft Time Stamping Service Root, OU=Copyright (c) 1997 Microsoft Corp.
7753144.3168: supR3HardenedWinIsDesiredRootCA: Adding 0x2e2d2c7c68f0202e O=VeriSign Trust Network, OU=VeriSign, Inc., OU=VeriSign Time Stamping Service Root, OU=NO LIABILITY ACCEPTED, (c)97 VeriSign, Inc.
7763144.3168: supR3HardenedWinIsDesiredRootCA: Adding 0xd8dbfb2c27bfb200 C=US, O=thawte, Inc., OU=Certification Services Division, OU=(c) 2008 thawte, Inc. - For authorized use only, CN=thawte Primary Root CA - G3
7773144.3168: supR3HardenedWinIsDesiredRootCA: Adding 0x61a3a33f81aace00 C=US, ST=UT, L=Salt Lake City, O=The USERTRUST Network, OU=http://www.usertrust.com, CN=UTN-USERFirst-Object
7783144.3168: supR3HardenedWinIsDesiredRootCA: Adding 0x57ba5395b561bf00 C=BM, O=QuoVadis Limited, OU=Root Certification Authority, CN=QuoVadis Root Certification Authority
7793144.3168: supR3HardenedWinIsDesiredRootCA: Adding 0xf4fd306318ccda00 C=US, O=GeoTrust Inc., CN=GeoTrust Global CA
7803144.3168: supR3HardenedWinIsDesiredRootCA: Adding 0x83085097e9afdf00 O=Digital Signature Trust Co., CN=DST Root CA X3
7813144.3168: supR3HardenedWinIsDesiredRootCA: Adding 0x780679907625cc00 OU=GlobalSign Root CA - R3, O=GlobalSign, CN=GlobalSign
7823144.3168: supR3HardenedWinIsDesiredRootCA: Adding 0x3d98ab22bb04a300 C=IE, O=Baltimore, OU=CyberTrust, CN=Baltimore CyberTrust Root
7833144.3168: supR3HardenedWinIsDesiredRootCA: Adding 0xa0ee62086758b15d C=US, O=Equifax, OU=Equifax Secure Certificate Authority
7843144.3168: supR3HardenedWinIsDesiredRootCA: Adding 0xd944bca189a00 C=BM, O=QuoVadis Limited, CN=QuoVadis Root CA 2
7853144.3168: supR3HardenedWinIsDesiredRootCA: Adding 0x1591b8ac8dcabd00 C=CN, O=WoSign CA Limited, CN=Certification Authority of WoSign
7863144.3168: supR3HardenedWinIsDesiredRootCA: Adding 0x8ff6fc03c1edbd00 C=US, ST=Arizona, L=Scottsdale, O=Starfield Technologies, Inc., CN=Starfield Root Certificate Authority - G2
7873144.3168: supR3HardenedWinIsDesiredRootCA: Adding 0xc6fa4243b695b600 C=US, O=Entrust, Inc., OU=www.entrust.net/CPS is incorporated by reference, OU=(c) 2006 Entrust, Inc., CN=Entrust Root Certification Authority
7883144.3168: supR3HardenedWinIsDesiredRootCA: Adding 0xa3ce8d99e60eda00 C=BE, O=GlobalSign nv-sa, OU=Root CA, CN=GlobalSign Root CA
7893144.3168: supR3HardenedWinIsDesiredRootCA: Adding 0x560ad29254e89100 C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO RSA Certification Authority
7903144.3168: supR3HardenedWinIsDesiredRootCA: Adding 0xa671e9fec832b700 C=US, O=Starfield Technologies, Inc., OU=Starfield Class 2 Certification Authority
7913144.3168: supR3HardenedWinIsDesiredRootCA: Adding 0xa8de7211e13be200 C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root CA
7923144.3168: supR3HardenedWinIsDesiredRootCA: Adding 0x3178d37f87f1c400 C=CH, O=SwissSign AG, CN=SwissSign Silver CA - G2
7933144.3168: supR3HardenedWinIsDesiredRootCA: Adding 0x7ae89c50f0b6a00f C=US, O=GTE Corporation, OU=GTE CyberTrust Solutions, Inc., CN=GTE CyberTrust Global Root
7943144.3168: supR3HardenedWinIsDesiredRootCA: Adding 0xd45980fbf0a0ac00 C=US, O=thawte, Inc., OU=Certification Services Division, OU=(c) 2006 thawte, Inc. - For authorized use only, CN=thawte Primary Root CA
7953144.3168: supR3HardenedWinIsDesiredRootCA: Adding 0xc9edb72b684ba00 C=US, O=Entrust, Inc., OU=See www.entrust.net/legal-terms, OU=(c) 2009 Entrust, Inc. - for authorized use only, CN=Entrust Root Certification Authority - G2
7963144.3168: supR3HardenedWinIsDesiredRootCA: Adding 0xf5cd95e581a4ab00 C=US, O=SecureTrust Corporation, CN=SecureTrust CA
7973144.3168: supR3HardenedWinIsDesiredRootCA: Adding 0xabd0695c5d11d15e C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification Authority - G2, OU=(c) 1998 VeriSign, Inc. - For authorized use only, OU=VeriSign Trust Network
7983144.3168: supR3HardenedWinIsDesiredRootCA: Adding 0x6f2ebe0e24cfa600 OU=GlobalSign Root CA - R2, O=GlobalSign, CN=GlobalSign
7993144.3168: supR3HardenedWinIsDesiredRootCA: Adding 0x14018a1bf29e595c C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification Authority
8003144.3168: supR3HardenedWinIsDesiredRootCA: Adding 0x35f812d09650dc00 C=FR, O=Certplus, CN=Class 2 Primary CA
8013144.3168: supR3HardenedWinIsDesiredRootCA: Adding 0x9e5bc2d78b6a3636 C=ZA, ST=Western Cape, L=Cape Town, O=Thawte Consulting cc, OU=Certification Services Division, CN=Thawte Premium Server CA, Email=premium-server@thawte.com
8023144.3168: supR3HardenedWinIsDesiredRootCA: Adding 0x7c4fd32ec1b1ce00 C=PL, O=Unizeto Sp. z o.o., CN=Certum CA
8033144.3168: supR3HardenedWinIsDesiredRootCA: Adding 0xd4fbe673e5ccc600 C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert High Assurance EV Root CA
8043144.3168: supR3HardenedWinIsDesiredRootCA: Adding 0x16e64d2a56ccf200 C=US, ST=Arizona, L=Scottsdale, O=Starfield Technologies, Inc., OU=http://certificates.starfieldtech.com/repository/, CN=Starfield Services Root Certificate Authority
8053144.3168: supR3HardenedWinIsDesiredRootCA: Adding 0x1b8578514b74ac00 C=US, O=WFA Hotspot 2.0, CN=Hotspot 2.0 Trust Root CA - 03
8063144.3168: supR3HardenedWinIsDesiredRootCA: Adding 0xb28612a94b4dad00 O=Entrust.net, OU=www.entrust.net/CPS_2048 incorp. by ref. (limits liab.), OU=(c) 1999 Entrust.net Limited, CN=Entrust.net Certification Authority (2048)
8073144.3168: supR3HardenedWinIsDesiredRootCA: Adding 0x357a29080824af00 C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. - For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority - G5
8083144.3168: supR3HardenedWinIsDesiredRootCA: Adding 0x59faf1086271bf00 C=US, ST=Arizona, L=Scottsdale, O=GoDaddy.com, Inc., CN=Go Daddy Root Certificate Authority - G2
8093144.3168: supR3HardenedWinIsDesiredRootCA: Adding 0x466cbc09db88c100 C=IL, O=StartCom Ltd., OU=Secure Digital Certificate Signing, CN=StartCom Certification Authority
8103144.3168: supR3HardenedWinIsDesiredRootCA: Adding 0x3401b15e3761c700 C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2008 VeriSign, Inc. - For authorized use only, CN=VeriSign Universal Root Certification Authority
8113144.3168: supR3HardenedWinIsDesiredRootCA: Adding 0x7cd4ff7b15b8be00 C=US, O=GeoTrust Inc., CN=GeoTrust Primary Certification Authority
8123144.3168: supR3HardenedWinIsDesiredRootCA: Adding 0x20b7075b3689b600 C=IL, O=StartCom Ltd., CN=StartCom Certification Authority G2
8133144.3168: supR3HardenedWinIsDesiredRootCA: Adding 0xc30e361765128000 C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority
8143144.3168: supR3HardenedWinIsDesiredRootCA: Adding 0x491857ead79dde00 C=US, O=The Go Daddy Group, Inc., OU=Go Daddy Class 2 Certification Authority
8153144.3168: supR3HardenedWinIsDesiredRootCA: Adding 0x92ac5ed85c2d0e9b C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2007 VeriSign, Inc. - For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority - G4
8163144.3168: supR3HardenedWinIsDesiredRootCA: Adding 0xc2ba72a37dfbe300 C=PL, O=Unizeto Technologies S.A., OU=Certum Certification Authority, CN=Certum Trusted Network CA
8173144.3168: supR3HardenedWinIsDesiredRootCA: Adding 0x8043e4ce150ead00 C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Assured ID Root CA
8183144.3168: supR3HardenedWinIsDesiredRootCA: Adding 0xa8b43f38c3f7b100 C=US, ST=UT, L=Salt Lake City, O=The USERTRUST Network, OU=http://www.usertrust.com, CN=UTN-USERFirst-Hardware
8193144.3168: supR3HardenedWinIsDesiredRootCA: Adding 0x331d58625ee2dc00 C=US, O=GeoTrust Inc., OU=(c) 2008 GeoTrust Inc. - For authorized use only, CN=GeoTrust Primary Certification Authority - G3
8203144.3168: supR3HardenedWinIsDesiredRootCA: Adding 0xf2e6331af7b700 C=SE, O=AddTrust AB, OU=AddTrust External TTP Network, CN=AddTrust External CA Root
8213144.3168: supR3HardenedWinRetrieveTrustedRootCAs: cAdded=60
8223144.3168: SUPR3HardenedMain: Load Runtime...
8233144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9df040000 'C:\WINDOWS\system32\rsaenh.dll'
8243144.3168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
8253144.3168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp100.dll'.
8263144.3168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'ws2_32.dll'.
8273144.3168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'rpcrt4.dll'.
8283144.3168: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll) WinVerifyTrust
8293144.3168: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll
8303144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
8313144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
8323144.3168: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll
8333144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
8343144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
8353144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9df040000 'C:\WINDOWS\system32\rsaenh.dll'
8363144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e0c30000 'C:\WINDOWS\System32\crypt32.dll'
8373144.3168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #26 'rpcrt4.dll'.
8383144.3168: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\ws2_32.dll) WinVerifyTrust
8393144.3168: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\ws2_32.dll
8403144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
8413144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
8423144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
8433144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
8443144.3168: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll
8453144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9df040000 'C:\WINDOWS\system32\rsaenh.dll'
8463144.3168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
8473144.3168: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll) WinVerifyTrust
8483144.3168: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll
8493144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
8503144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
8513144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
8523144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
8533144.3168: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
8543144.3168: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll)
8553144.3168: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll
8563144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9df040000 'C:\WINDOWS\system32\rsaenh.dll'
8573144.3168: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll) WinVerifyTrust
8583144.3168: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000a01:<flags> [calling]
8593144.3168: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll
8603144.3168: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [avoiding WinVerifyTrust]
8613144.3168: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll
8623144.3168: supR3HardenedDllNotificationCallback: load 000000006ecd0000 LB 0x000d2000 C:\Program Files\Oracle\VirtualBox\MSVCR100.dll [fFlags=0x0]
8633144.3168: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [avoiding WinVerifyTrust]
8643144.3168: supR3HardenedDllNotificationCallback: load 000000006edb0000 LB 0x00098000 C:\Program Files\Oracle\VirtualBox\MSVCP100.dll [fFlags=0x0]
8653144.3168: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll
8663144.3168: supR3HardenedDllNotificationCallback: load 00007ff9e1430000 LB 0x0006a000 C:\WINDOWS\System32\WS2_32.dll [fFlags=0x0]
8673144.3168: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ws2_32.dll
8683144.3168: supR3HardenedDllNotificationCallback: load 00007ff9a6100000 LB 0x0052e000 C:\Program Files\Oracle\VirtualBox\VBoxRT.dll [fFlags=0x0]
8693144.3168: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll
8703144.3168: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
8713144.3168: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
8723144.3168: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll
8733144.3168: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
8743144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9a6100000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
8753144.3168: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll
8763144.3168: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
8773144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9a6100000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
8783144.3168: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll
8793144.3168: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
8803144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9a6100000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
8813144.3168: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll
8823144.3168: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
8833144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9a6100000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
8843144.3168: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll
8853144.3168: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
8863144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9a6100000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
8873144.3168: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll
8883144.3168: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
8893144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9a6100000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
8903144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9a6100000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
8913144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9a6100000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
8923144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9a6100000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
8933144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9a6100000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
8943144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9a6100000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
8953144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9a6100000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
8963144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9a6100000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
8973144.3168: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll
8983144.3168: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
8993144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9a6100000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9003144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9a6100000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9013144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9a6100000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9023144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9a6100000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9033144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9a6100000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9043144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9a6100000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9053144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9a6100000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9063144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9a6100000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9073144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9a6100000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9083144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9a6100000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9093144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9a6100000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9103144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9a6100000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9113144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9a6100000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9123144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9a6100000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9133144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9a6100000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9143144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9a6100000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9153144.3168: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll
9163144.3168: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
9173144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9a6100000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9183144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9a6100000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9193144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9a6100000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9203144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9a6100000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9213144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e0a10000 'C:\WINDOWS\system32\Wintrust.dll'
9223144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9df040000 'C:\WINDOWS\system32\rsaenh.dll'
9233144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e0c30000 'C:\WINDOWS\System32\crypt32.dll'
9243144.3168: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
9253144.3168: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
9263144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9df040000 'C:\WINDOWS\system32\rsaenh.dll'
9273144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e0c30000 'C:\WINDOWS\System32\crypt32.dll'
9283144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e0c30000 'C:\WINDOWS\system32\crypt32.dll'
9293144.3168: SUPR3HardenedMain: Load TrustedMain...
9303144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9df040000 'C:\WINDOWS\system32\rsaenh.dll'
9313144.3168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'opengl32.dll'.
9323144.3168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
9333144.3168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'msvcp100.dll'.
9343144.3168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'msvcr100.dll'.
9353144.3168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'qt5corevbox.dll'.
9363144.3168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'qt5guivbox.dll'.
9373144.3168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'qt5widgetsvbox.dll'.
9383144.3168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'qt5printsupportvbox.dll'.
9393144.3168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'qt5openglvbox.dll'.
9403144.3168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'user32.dll'.
9413144.3168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'advapi32.dll'.
9423144.3168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'shell32.dll'.
9433144.3168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #13 'ole32.dll'.
9443144.3168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #14 'oleaut32.dll'.
9453144.3168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #15 'winmm.dll'.
9463144.3168: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.dll) WinVerifyTrust
9473144.3168: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.dll
9483144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
9493144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume3\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008]
9503144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9df040000 'C:\WINDOWS\system32\rsaenh.dll'
9513144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e0c30000 'C:\WINDOWS\System32\crypt32.dll'
9523144.3168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'winmmbase.dll'.
9533144.3168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'msvcrt.dll'.
9543144.3168: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\winmm.dll) WinVerifyTrust
9553144.3168: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\winmm.dll
9563144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
9573144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
9583144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
9593144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
9603144.3168: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll
9613144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmmbase.dll'...
9623144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmmbase.dll' -> '\Device\HarddiskVolume3\Windows\System32\winmmbase.dll' [rcNtRedir=0xc0150008]
9633144.3168: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\winmmbase.dll'.
9643144.3168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
9653144.3168: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\winmmbase.dll)
9663144.3168: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\winmmbase.dll
9673144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
9683144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
9693144.3168: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll
9703144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9df040000 'C:\WINDOWS\system32\rsaenh.dll'
9713144.3168: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll
9723144.3168: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\crypt32.dll (Input=crypt32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
9733144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e0c30000 'C:\WINDOWS\System32\crypt32.dll'
9743144.3168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcp_win.dll'.
9753144.3168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'combase.dll'.
9763144.3168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #20 'rpcrt4.dll'.
9773144.3168: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\oleaut32.dll) WinVerifyTrust
9783144.3168: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\oleaut32.dll
9793144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
9803144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
9813144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
9823144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
9833144.3168: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll
9843144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
9853144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
9863144.3168: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\combase.dll'.
9873144.3168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'rpcrt4.dll'.
9883144.3168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #35 'bcryptprimitives.dll'.
9893144.3168: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\combase.dll)
9903144.3168: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\combase.dll
9913144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
9923144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
9933144.3168: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll'.
9943144.3168: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll)
9953144.3168: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll
9963144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcryptprimitives.dll'...
9973144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcryptprimitives.dll' -> '\Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll' [rcNtRedir=0xc0150008]
9983144.3168: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll
9993144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
10003144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
10013144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9df040000 'C:\WINDOWS\system32\rsaenh.dll'
10023144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e0c30000 'C:\WINDOWS\System32\crypt32.dll'
10033144.3168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #21 'rpcrt4.dll'.
10043144.3168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #44 'gdi32.dll'.
10053144.3168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #45 'user32.dll'.
10063144.3168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #46 'combase.dll'.
10073144.3168: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\ole32.dll) WinVerifyTrust
10083144.3168: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\ole32.dll
10093144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
10103144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume3\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
10113144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
10123144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
10133144.3168: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\combase.dll [lacks WinVerifyTrust]
10143144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
10153144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
10163144.3168: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\user32.dll'.
10173144.3168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'win32u.dll'.
10183144.3168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #32 'gdi32.dll'.
10193144.3168: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\user32.dll)
10203144.3168: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\user32.dll
10213144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
10223144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
10233144.3168: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\gdi32.dll'.
10243144.3168: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\gdi32.dll)
10253144.3168: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\gdi32.dll
10263144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
10273144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
10283144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
10293144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
10303144.3168: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
10313144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
10323144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
10333144.3168: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\win32u.dll'.
10343144.3168: '\Device\HarddiskVolume3\Windows\System32\win32u.dll' has no imports
10353144.3168: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\win32u.dll)
10363144.3168: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\win32u.dll
10373144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9df040000 'C:\WINDOWS\system32\rsaenh.dll'
10383144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e0c30000 'C:\WINDOWS\System32\crypt32.dll'
10393144.3168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
10403144.3168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #66 'user32.dll'.
10413144.3168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #68 'gdi32.dll'.
10423144.3168: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\shell32.dll) WinVerifyTrust
10433144.3168: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\shell32.dll
10443144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
10453144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
10463144.3168: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll
10473144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
10483144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
10493144.3168: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [redoing WinVerifyTrust]
10503144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
10513144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
10523144.3168: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
10533144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
10543144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
10553144.3168: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
10563144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
10573144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
10583144.3168: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll
10593144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9df040000 'C:\WINDOWS\system32\rsaenh.dll'
10603144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e0c30000 'C:\WINDOWS\System32\crypt32.dll'
10613144.3168: supR3HardenedScreenImage/Imports: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\user32.dll'
10623144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5openglvbox.dll'...
10633144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5openglvbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5openglvbox.dll' [rcNtRedir=0xc0150008]
10643144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9df040000 'C:\WINDOWS\system32\rsaenh.dll'
10653144.3168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'qt5widgetsvbox.dll'.
10663144.3168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'qt5guivbox.dll'.
10673144.3168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5corevbox.dll'.
10683144.3168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'msvcr100.dll'.
10693144.3168: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll) WinVerifyTrust
10703144.3168: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll
10713144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5printsupportvbox.dll'...
10723144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5printsupportvbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5printsupportvbox.dll' [rcNtRedir=0xc0150008]
10733144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
10743144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
10753144.3168: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
10763144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
10773144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
10783144.3168: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll'.
10793144.3168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'.
10803144.3168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'shell32.dll'.
10813144.3168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'ole32.dll'.
10823144.3168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'advapi32.dll'.
10833144.3168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'ws2_32.dll'.
10843144.3168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'mpr.dll'.
10853144.3168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'msvcp100.dll'.
10863144.3168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'msvcr100.dll'.
10873144.3168: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll)
10883144.3168: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll
10893144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
10903144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
10913144.3168: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll'.
10923144.3168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'ole32.dll'.
10933144.3168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'opengl32.dll'.
10943144.3168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'gdi32.dll'.
10953144.3168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
10963144.3168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'qt5corevbox.dll'.
10973144.3168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'msvcp100.dll'.
10983144.3168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msvcr100.dll'.
10993144.3168: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll)
11003144.3168: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll
11013144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5widgetsvbox.dll'...
11023144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5widgetsvbox.dll' [rcNtRedir=0xc0150008]
11033144.3168: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'.
11043144.3168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'gdi32.dll'.
11053144.3168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'.
11063144.3168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5guivbox.dll'.
11073144.3168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'qt5corevbox.dll'.
11083144.3168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'shell32.dll'.
11093144.3168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'msvcp100.dll'.
11103144.3168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msvcr100.dll'.
11113144.3168: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll)
11123144.3168: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll
11133144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
11143144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
11153144.3168: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
11163144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
11173144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
11183144.3168: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll
11193144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
11203144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume3\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
11213144.3168: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
11223144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
11233144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
11243144.3168: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
11253144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
11263144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
11273144.3168: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
11283144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
11293144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
11303144.3168: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll
11313144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
11323144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
11333144.3168: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
11343144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
11353144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
11363144.3168: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
11373144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
11383144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
11393144.3168: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll
11403144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
11413144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
11423144.3168: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
11433144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
11443144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
11453144.3168: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll
11463144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
11473144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
11483144.3168: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
11493144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
11503144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume3\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008]
11513144.3168: Detected WinVerifyTrust recursion: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume3\Windows\System32\opengl32.dll'.
11523144.3168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
11533144.3168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'advapi32.dll'.
11543144.3168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'gdi32.dll'.
11553144.3168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'glu32.dll'.
11563144.3168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'ddraw.dll'.
11573144.3168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'user32.dll'.
11583144.3168: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\opengl32.dll)
11593144.3168: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\opengl32.dll
11603144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
11613144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
11623144.3168: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ole32.dll
11633144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
11643144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
11653144.3168: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
11663144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
11673144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
11683144.3168: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll
11693144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mpr.dll'...
11703144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: 'mpr.dll' -> '\Device\HarddiskVolume3\Windows\System32\mpr.dll' [rcNtRedir=0xc0150008]
11713144.3168: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\mpr.dll'.
11723144.3168: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\mpr.dll)
11733144.3168: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\mpr.dll
11743144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
11753144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
11763144.3168: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ws2_32.dll
11773144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
11783144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
11793144.3168: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll
11803144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
11813144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
11823144.3168: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ole32.dll
11833144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
11843144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume3\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
11853144.3168: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
11863144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
11873144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
11883144.3168: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll
11893144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
11903144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
11913144.3168: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll
11923144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ddraw.dll'...
11933144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: 'ddraw.dll' -> '\Device\HarddiskVolume3\Windows\System32\ddraw.dll' [rcNtRedir=0xc0150008]
11943144.3168: Detected WinVerifyTrust recursion: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume3\Windows\System32\ddraw.dll'.
11953144.3168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
11963144.3168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #18 'user32.dll'.
11973144.3168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #19 'gdi32.dll'.
11983144.3168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #20 'dciman32.dll'.
11993144.3168: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\ddraw.dll)
12003144.3168: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\ddraw.dll
12013144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'glu32.dll'...
12023144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: 'glu32.dll' -> '\Device\HarddiskVolume3\Windows\System32\glu32.dll' [rcNtRedir=0xc0150008]
12033144.3168: Detected WinVerifyTrust recursion: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume3\Windows\System32\glu32.dll'.
12043144.3168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
12053144.3168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'opengl32.dll'.
12063144.3168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
12073144.3168: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\glu32.dll)
12083144.3168: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\glu32.dll
12093144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
12103144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
12113144.3168: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
12123144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
12133144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
12143144.3168: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll
12153144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
12163144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
12173144.3168: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll
12183144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
12193144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
12203144.3168: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll
12213144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
12223144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume3\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008]
12233144.3168: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\opengl32.dll [lacks WinVerifyTrust]
12243144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
12253144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
12263144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'dciman32.dll'...
12273144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: 'dciman32.dll' -> '\Device\HarddiskVolume3\Windows\System32\dciman32.dll' [rcNtRedir=0xc0150008]
12283144.3168: Detected WinVerifyTrust recursion: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume3\Windows\System32\dciman32.dll'.
12293144.3168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
12303144.3168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'gdi32.dll'.
12313144.3168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'user32.dll'.
12323144.3168: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\dciman32.dll)
12333144.3168: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\dciman32.dll
12343144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
12353144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
12363144.3168: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
12373144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
12383144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
12393144.3168: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll
12403144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
12413144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
12423144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
12433144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
12443144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
12453144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
12463144.3168: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
12473144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
12483144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
12493144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9df040000 'C:\WINDOWS\system32\rsaenh.dll'
12503144.3168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'gdi32.dll'.
12513144.3168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'.
12523144.3168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5widgetsvbox.dll'.
12533144.3168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'qt5guivbox.dll'.
12543144.3168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'qt5corevbox.dll'.
12553144.3168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'winspool.drv'.
12563144.3168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'comdlg32.dll'.
12573144.3168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'msvcr100.dll'.
12583144.3168: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5PrintSupportVBox.dll) WinVerifyTrust
12593144.3168: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5PrintSupportVBox.dll
12603144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5widgetsvbox.dll'...
12613144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5widgetsvbox.dll' [rcNtRedir=0xc0150008]
12623144.3168: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [redoing WinVerifyTrust]
12633144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
12643144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
12653144.3168: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
12663144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'comdlg32.dll'...
12673144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: 'comdlg32.dll' -> '\Device\HarddiskVolume3\Windows\System32\comdlg32.dll' [rcNtRedir=0xc0150008]
12683144.3168: Detected WinVerifyTrust recursion: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume3\Windows\System32\comdlg32.dll'.
12693144.3168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
12703144.3168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #30 'user32.dll'.
12713144.3168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #31 'shlwapi.dll'.
12723144.3168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #32 'gdi32.dll'.
12733144.3168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #33 'comctl32.dll'.
12743144.3168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #34 'shell32.dll'.
12753144.3168: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\comdlg32.dll)
12763144.3168: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\comdlg32.dll
12773144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winspool.drv'...
12783144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: 'winspool.drv' -> '\Device\HarddiskVolume3\Windows\System32\winspool.drv' [rcNtRedir=0xc0150008]
12793144.3168: Detected WinVerifyTrust recursion: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume3\Windows\System32\winspool.drv'.
12803144.3168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
12813144.3168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #26 'bcrypt.dll'.
12823144.3168: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\winspool.drv)
12833144.3168: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\winspool.drv
12843144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
12853144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
12863144.3168: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
12873144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
12883144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
12893144.3168: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
12903144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5widgetsvbox.dll'...
12913144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5widgetsvbox.dll' [rcNtRedir=0xc0150008]
12923144.3168: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [lacks WinVerifyTrust]
12933144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
12943144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
12953144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
12963144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
12973144.3168: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
12983144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcrypt.dll'...
12993144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcrypt.dll' -> '\Device\HarddiskVolume3\Windows\System32\bcrypt.dll' [rcNtRedir=0xc0150008]
13003144.3168: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\bcrypt.dll
13013144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
13023144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
13033144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
13043144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume3\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
13053144.3168: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
13063144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'comctl32.dll'...
13073144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: 'comctl32.dll' -> '\Device\HarddiskVolume3\Windows\System32\comctl32.dll' [rcNtRedir=0x0]
13083144.3168: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\comctl32.dll'.
13093144.3168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'advapi32.dll'.
13103144.3168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'gdi32.dll'.
13113144.3168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'user32.dll'.
13123144.3168: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\comctl32.dll)
13133144.3168: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\comctl32.dll
13143144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
13153144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
13163144.3168: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
13173144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shlwapi.dll'...
13183144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: 'shlwapi.dll' -> '\Device\HarddiskVolume3\Windows\System32\shlwapi.dll' [rcNtRedir=0xc0150008]
13193144.3168: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\shlwapi.dll'.
13203144.3168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcrt.dll'.
13213144.3168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #42 'gdi32.dll'.
13223144.3168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #43 'user32.dll'.
13233144.3168: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\shlwapi.dll)
13243144.3168: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\shlwapi.dll
13253144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
13263144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
13273144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
13283144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
13293144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
13303144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
13313144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
13323144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
13333144.3168: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
13343144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
13353144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
13363144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
13373144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
13383144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
13393144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
13403144.3168: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
13413144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
13423144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
13433144.3168: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll
13443144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9df040000 'C:\WINDOWS\system32\rsaenh.dll'
13453144.3168: supR3HardenedScreenImage/Imports: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'
13463144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
13473144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
13483144.3168: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [redoing WinVerifyTrust]
13493144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9df040000 'C:\WINDOWS\system32\rsaenh.dll'
13503144.3168: supR3HardenedScreenImage/Imports: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll'
13513144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
13523144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
13533144.3168: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [redoing WinVerifyTrust]
13543144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9df040000 'C:\WINDOWS\system32\rsaenh.dll'
13553144.3168: supR3HardenedScreenImage/Imports: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll'
13563144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
13573144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
13583144.3168: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [redoing WinVerifyTrust]
13593144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9df040000 'C:\WINDOWS\system32\rsaenh.dll'
13603144.3168: supR3HardenedScreenImage/Imports: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'
13613144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
13623144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
13633144.3168: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll
13643144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
13653144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
13663144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
13673144.3168: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume3\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008]
13683144.3168: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\opengl32.dll [redoing WinVerifyTrust]
13693144.3168: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000450 pwszName=\Device\HarddiskVolume3\Windows\System32\opengl32.dll
13703144.3168: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000012540f0
13713144.3168: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000012540f0
13723144.3168: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=3ABE9A0F560416C701B358C7A044A7ADA2496E52
13733144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9df040000 'C:\WINDOWS\system32\rsaenh.dll'
13743144.3168: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e0c30000 'C:\WINDOWS\System32\crypt32.dll'
13753144.3168: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package-AutoMerged-windows~31bf3856ad364e35~amd64~~10.0.14393.0.cat'; file='\Device\HarddiskVolume3\Windows\System32\opengl32.dll'
13763144.3168: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
13773144.3168: supR3HardenedScreenImage/Imports: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\opengl32.dll'
13783144.3168: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VirtualBox.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000a01:<flags> [calling]
13793144.3168: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBox.dll
13803144.3168: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\opengl32.dll
13813144.3168: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll
13823144.3168: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll
13833144.3168: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll
13843144.3168: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5PrintSupportVBox.dll
13853144.3168: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll
13863144.3168: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmm.dll
13873144.3168: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\glu32.dll [avoiding WinVerifyTrust]
13883144.3168: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\ddraw.dll [avoiding WinVerifyTrust]
13893144.3168: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\mpr.dll [avoiding WinVerifyTrust]
13903144.3168: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\winspool.drv [avoiding WinVerifyTrust]
13913144.3168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'advapi32.dll'.
13923144.3168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'gdi32.dll'.
13933144.3168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'user32.dll'.
13943144.3168: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.14393.447_none_0d5aa7fbb6d35646\comctl32.dll)
13953144.3168: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.14393.447_none_0d5aa7fbb6d35646\comctl32.dll
13963144.3168: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmmbase.dll [avoiding WinVerifyTrust]
13973144.3168: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\dciman32.dll [avoiding WinVerifyTrust]
13983144.3168: supR3HardenedDllNotificationCallback: load 00007ff9e0c10000 LB 0x0001e000 C:\WINDOWS\System32\win32u.dll [fFlags=0x0]
13993144.3168: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\win32u.dll [avoiding WinVerifyTrust]
14003144.3168: supR3HardenedDllNotificationCallback: load 00007ff9e3500000 LB 0x00165000 C:\WINDOWS\System32\USER32.dll [fFlags=0x0]
14013144.3168: supR3HardenedDllNotificationCallback: load 00007ff9e0e00000 LB 0x00182000 C:\WINDOWS\System32\gdi32full.dll [fFlags=0x0]
14023144.3168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #22 'gdi32.dll'.
14033144.3168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #23 'user32.dll'.
14043144.3168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #24 'win32u.dll'.
14053144.3168: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\gdi32full.dll)
14063144.3168: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\gdi32full.dll
14073144.3168: supR3HardenedDllNotificationCallback: load 00007ff9e3360000 LB 0x00034000 C:\WINDOWS\System32\GDI32.dll [fFlags=0x0]
14083144.3168: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [avoiding WinVerifyTrust]
14093144.3168: supR3HardenedDllNotificationCallback: load 00007ff9a5540000 LB 0x00008000 C:\WINDOWS\SYSTEM32\DCIMAN32.dll [fFlags=0x0]
14103144.3168: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\dciman32.dll [avoiding WinVerifyTrust]
14113144.3168: supR3HardenedDllNotificationCallback: load 00007ff9a5550000 LB 0x000f7000 C:\WINDOWS\SYSTEM32\DDRAW.dll [fFlags=0x0]
14123144.3168: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\ddraw.dll [avoiding WinVerifyTrust]
14133144.3168: supR3HardenedDllNotificationCallback: load 00007ff9a5650000 LB 0x0002d000 C:\WINDOWS\SYSTEM32\GLU32.dll [fFlags=0x0]
14143144.3168: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\glu32.dll [avoiding WinVerifyTrust]
14153144.3168: supR3HardenedDllNotificationCallback: load 00007ff9a56e0000 LB 0x00123000 C:\WINDOWS\SYSTEM32\OPENGL32.dll [fFlags=0x0]
14163144.3168: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\opengl32.dll
14173144.3168: supR3HardenedDllNotificationCallback: load 00007ff9e0bc0000 LB 0x00042000 C:\WINDOWS\System32\cfgmgr32.dll [fFlags=0x0]
14183144.3168: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll)
14193144.3168: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll
14203144.3168: supR3HardenedDllNotificationCallback: load 00007ff9e3670000 LB 0x002c8000 C:\WINDOWS\System32\combase.dll [fFlags=0x0]
14213144.3168: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\combase.dll [avoiding WinVerifyTrust]
14223144.3168: supR3HardenedDllNotificationCallback: load 00007ff9dfea0000 LB 0x0004c000 C:\WINDOWS\System32\powrprof.dll [fFlags=0x0]
14233144.3168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'rpcrt4.dll'.
14243144.3168: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\powrprof.dll)
14253144.3168: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\powrprof.dll
14263144.3168: supR3HardenedDllNotificationCallback: load 00007ff9e3300000 LB 0x00052000 C:\WINDOWS\System32\shlwapi.dll [fFlags=0x0]
14273144.3168: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shlwapi.dll [avoiding WinVerifyTrust]
14283144.3168: supR3HardenedDllNotificationCallback: load 00007ff9dfe70000 LB 0x0000f000 C:\WINDOWS\System32\kernel.appcore.dll [fFlags=0x0]
14293144.3168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'msvcrt.dll'.
14303144.3168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'rpcrt4.dll'.
14313144.3168: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll)
14323144.3168: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll
14333144.3168: supR3HardenedDllNotificationCallback: load 00007ff9e0740000 LB 0x000a9000 C:\WINDOWS\System32\shcore.dll [fFlags=0x0]
14343144.3168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
14353144.3168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #30 'rpcrt4.dll'.
14363144.3168: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #40 'combase.dll'.
14373144.3168: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\SHCore.dll)
14383144.3168: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\SHCore.dll
14393144.3168: supR3HardenedDllNotificationCallback: load 00007ff9dfff0000 LB 0x006da000 C:\WINDOWS\System32\windows.storage.dll [fFlags=0x0]
1440

© 2024 Oracle Support Privacy / Do Not Sell My Info Terms of Use Trademark Policy Automated Access Etiquette