VirtualBox

Ticket #18920: VBoxHardening2.log

File VBoxHardening2.log, 456.6 KB (added by CKing123, 5 years ago)
Line 
12540.210c: Log file opened: 6.0.12r133076 g_hStartupLog=0000000000000074 g_uNtVerCombined=0xa047ba00
22540.210c: \SystemRoot\System32\ntdll.dll:
32540.210c: CreationTime: 2019-09-11T15:06:46.480481700Z
42540.210c: LastWriteTime: 2019-09-11T15:06:46.519381400Z
52540.210c: ChangeTime: 2019-09-11T15:11:11.763337600Z
62540.210c: FileAttributes: 0x20
72540.210c: Size: 0x1e8458
82540.210c: NT Headers: 0xd8
92540.210c: Timestamp: 0xf24fc044
102540.210c: Machine: 0x8664 - amd64
112540.210c: Timestamp: 0xf24fc044
122540.210c: Image Version: 10.0
132540.210c: SizeOfImage: 0x1f0000 (2031616)
142540.210c: Resource Dir: 0x17f000 LB 0x6f310
152540.210c: [Version info resource found at 0xd8! (ID/Name: 0x1; SubID/SubName: 0x409)]
162540.210c: [Raw version resource data: 0x17f0f0 LB 0x380, codepage 0x0 (reserved 0x0)]
172540.210c: ProductName: Microsoft® Windows® Operating System
182540.210c: ProductVersion: 10.0.18362.356
192540.210c: FileVersion: 10.0.18362.356 (WinBuild.160101.0800)
202540.210c: FileDescription: NT Layer DLL
212540.210c: \SystemRoot\System32\kernel32.dll:
222540.210c: CreationTime: 2019-09-11T15:06:30.537351000Z
232540.210c: LastWriteTime: 2019-09-11T15:06:30.554305600Z
242540.210c: ChangeTime: 2019-09-11T15:11:09.793563100Z
252540.210c: FileAttributes: 0x20
262540.210c: Size: 0xb0570
272540.210c: NT Headers: 0xe8
282540.210c: Timestamp: 0xd0cecc10
292540.210c: Machine: 0x8664 - amd64
302540.210c: Timestamp: 0xd0cecc10
312540.210c: Image Version: 10.0
322540.210c: SizeOfImage: 0xb2000 (729088)
332540.210c: Resource Dir: 0xb0000 LB 0x520
342540.210c: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
352540.210c: [Raw version resource data: 0xb00b0 LB 0x3a4, codepage 0x0 (reserved 0x0)]
362540.210c: ProductName: Microsoft® Windows® Operating System
372540.210c: ProductVersion: 10.0.18362.329
382540.210c: FileVersion: 10.0.18362.329 (WinBuild.160101.0800)
392540.210c: FileDescription: Windows NT BASE API Client DLL
402540.210c: \SystemRoot\System32\KernelBase.dll:
412540.210c: CreationTime: 2019-09-11T15:06:46.941250600Z
422540.210c: LastWriteTime: 2019-09-11T15:06:46.992113700Z
432540.210c: ChangeTime: 2019-09-11T15:11:11.390799400Z
442540.210c: FileAttributes: 0x20
452540.210c: Size: 0x2a2638
462540.210c: NT Headers: 0xf0
472540.210c: Timestamp: 0x7083db20
482540.210c: Machine: 0x8664 - amd64
492540.210c: Timestamp: 0x7083db20
502540.210c: Image Version: 10.0
512540.210c: SizeOfImage: 0x2a3000 (2764800)
522540.210c: Resource Dir: 0x27d000 LB 0x548
532540.210c: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
542540.210c: [Raw version resource data: 0x27d0b0 LB 0x3bc, codepage 0x0 (reserved 0x0)]
552540.210c: ProductName: Microsoft® Windows® Operating System
562540.210c: ProductVersion: 10.0.18362.356
572540.210c: FileVersion: 10.0.18362.356 (WinBuild.160101.0800)
582540.210c: FileDescription: Windows NT BASE API Client DLL
592540.210c: \SystemRoot\System32\apisetschema.dll:
602540.210c: CreationTime: 2019-03-19T04:43:54.837151500Z
612540.210c: LastWriteTime: 2019-03-19T04:43:54.837151500Z
622540.210c: ChangeTime: 2019-09-11T15:07:25.157338500Z
632540.210c: FileAttributes: 0x20
642540.210c: Size: 0x1d028
652540.210c: NT Headers: 0xc8
662540.210c: Timestamp: 0xd6ced080
672540.210c: Machine: 0x8664 - amd64
682540.210c: Timestamp: 0xd6ced080
692540.210c: Image Version: 10.0
702540.210c: SizeOfImage: 0x1e000 (122880)
712540.210c: Resource Dir: 0x1d000 LB 0x408
722540.210c: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
732540.210c: [Raw version resource data: 0x1d060 LB 0x3a8, codepage 0x0 (reserved 0x0)]
742540.210c: ProductName: Microsoft® Windows® Operating System
752540.210c: ProductVersion: 10.0.18362.1
762540.210c: FileVersion: 10.0.18362.1 (WinBuild.160101.0800)
772540.210c: FileDescription: ApiSet Schema DLL
782540.210c: NtOpenDirectoryObject failed on \Driver: 0xc0000022
792540.210c: supR3HardenedWinFindAdversaries: 0x0
802540.210c: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox'
812540.210c: Calling main()
822540.210c: SUPR3HardenedMain: pszProgName=VirtualBoxVM fFlags=0x2
832540.210c: supR3HardenedWinInitAppBin(0x2): '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox'
842540.210c: SUPR3HardenedMain: Respawn #1
852540.210c: System32: \Device\HarddiskVolume3\Windows\System32
862540.210c: WinSxS: \Device\HarddiskVolume3\Windows\WinSxS
872540.210c: KnownDllPath: C:\WINDOWS\System32
882540.210c: supR3HardenedWinInit: Performing a limited self purification...
892540.210c: supHardNtVpScanVirtualMemory: enmKind=SELF_PURIFICATION
902540.210c: *0000000000000000-000000000040ffff 0x0001/0x0000 0x0000000
912540.210c: *0000000000410000-000000000041ffff 0x0004/0x0004 0x0040000
922540.210c: 0000000000420000-000000000042ffff 0x0001/0x0000 0x0000000
932540.210c: *0000000000430000-000000000044afff 0x0002/0x0002 0x0040000
942540.210c: 000000000044b000-000000000044ffff 0x0001/0x0000 0x0000000
952540.210c: *0000000000450000-0000000000508fff 0x0000/0x0004 0x0020000
962540.210c: 0000000000509000-000000000050bfff 0x0104/0x0004 0x0020000
972540.210c: 000000000050c000-000000000054ffff 0x0004/0x0004 0x0020000
982540.210c: *0000000000550000-0000000000553fff 0x0002/0x0002 0x0040000
992540.210c: 0000000000554000-000000000055ffff 0x0001/0x0000 0x0000000
1002540.210c: *0000000000560000-0000000000561fff 0x0004/0x0004 0x0020000
1012540.210c: 0000000000562000-000000000056ffff 0x0001/0x0000 0x0000000
1022540.210c: *0000000000570000-0000000000571fff 0x0004/0x0004 0x0020000
1032540.210c: 0000000000572000-00000000005d1fff 0x0000/0x0004 0x0020000
1042540.210c: 00000000005d2000-00000000005fffff 0x0001/0x0000 0x0000000
1052540.210c: *0000000000600000-000000000070afff 0x0000/0x0004 0x0020000
1062540.210c: 000000000070b000-000000000070dfff 0x0004/0x0004 0x0020000
1072540.210c: 000000000070e000-00000000007fffff 0x0000/0x0004 0x0020000
1082540.210c: *0000000000800000-00000000008c6fff 0x0002/0x0002 0x0040000
1092540.210c: 00000000008c7000-00000000008effff 0x0001/0x0000 0x0000000
1102540.210c: *00000000008f0000-00000000008f4fff 0x0004/0x0004 0x0020000
1112540.210c: 00000000008f5000-00000000009effff 0x0000/0x0004 0x0020000
1122540.210c: *00000000009f0000-0000000000a0cfff 0x0004/0x0004 0x0020000
1132540.210c: 0000000000a0d000-0000000000aeffff 0x0000/0x0004 0x0020000
1142540.210c: 0000000000af0000-0000000000b9ffff 0x0001/0x0000 0x0000000
1152540.210c: *0000000000ba0000-0000000000baefff 0x0004/0x0004 0x0020000
1162540.210c: 0000000000baf000-0000000000baffff 0x0000/0x0004 0x0020000
1172540.210c: *0000000000bb0000-0000000000bbcfff 0x0000/0x0004 0x0020000
1182540.210c: 0000000000bbd000-0000000000dadfff 0x0004/0x0004 0x0020000
1192540.210c: 0000000000dae000-0000000000daefff 0x0000/0x0004 0x0020000
1202540.210c: 0000000000daf000-000000007ffdffff 0x0001/0x0000 0x0000000
1212540.210c: *000000007ffe0000-000000007ffe0fff 0x0002/0x0002 0x0020000
1222540.210c: 000000007ffe1000-000000007ffeafff 0x0001/0x0000 0x0000000
1232540.210c: *000000007ffeb000-000000007ffebfff 0x0002/0x0002 0x0020000
1242540.210c: 000000007ffec000-00007ff4b59dffff 0x0001/0x0000 0x0000000
1252540.210c: *00007ff4b59e0000-00007ff4b59e4fff 0x0002/0x0002 0x0040000
1262540.210c: 00007ff4b59e5000-00007ff4b5adffff 0x0000/0x0002 0x0040000
1272540.210c: *00007ff4b5ae0000-00007ff5b5afffff 0x0000/0x0004 0x0020000
1282540.210c: *00007ff5b5b00000-00007ff5b7afffff 0x0000/0x0004 0x0020000
1292540.210c: 00007ff5b7b00000-00007ff5b7b00fff 0x0004/0x0004 0x0020000
1302540.210c: 00007ff5b7b01000-00007ff5b7b0ffff 0x0001/0x0000 0x0000000
1312540.210c: *00007ff5b7b10000-00007ff5b7b10fff 0x0002/0x0002 0x0040000
1322540.210c: 00007ff5b7b11000-00007ff5b7b1ffff 0x0001/0x0000 0x0000000
1332540.210c: *00007ff5b7b20000-00007ff5b7b42fff 0x0002/0x0002 0x0040000
1342540.210c: 00007ff5b7b43000-00007ff73ebcffff 0x0001/0x0000 0x0000000
1352540.210c: *00007ff73ebd0000-00007ff73ebd0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
1362540.210c: 00007ff73ebd1000-00007ff73ec45fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
1372540.210c: 00007ff73ec46000-00007ff73ec46fff 0x0080/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
1382540.210c: 00007ff73ec47000-00007ff73ec8efff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
1392540.210c: 00007ff73ec8f000-00007ff73ec91fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
1402540.210c: 00007ff73ec92000-00007ff73ec94fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
1412540.210c: 00007ff73ec95000-00007ff73ec97fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
1422540.210c: 00007ff73ec98000-00007ff73ec98fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
1432540.210c: 00007ff73ec99000-00007ff73ec9afff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
1442540.210c: 00007ff73ec9b000-00007ff73ec9bfff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
1452540.210c: 00007ff73ec9c000-00007ff73ece4fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
1462540.210c: 00007ff73ece5000-00007ff918f6ffff 0x0001/0x0000 0x0000000
1472540.210c: *00007ff918f70000-00007ff918f70fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\KernelBase.dll
1482540.210c: 00007ff918f71000-00007ff919075fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\KernelBase.dll
1492540.210c: 00007ff919076000-00007ff9191d7fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\KernelBase.dll
1502540.210c: 00007ff9191d8000-00007ff9191dbfff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\KernelBase.dll
1512540.210c: 00007ff9191dc000-00007ff9191dcfff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\KernelBase.dll
1522540.210c: 00007ff9191dd000-00007ff919212fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\KernelBase.dll
1532540.210c: 00007ff919213000-00007ff91a99ffff 0x0001/0x0000 0x0000000
1542540.210c: *00007ff91a9a0000-00007ff91a9a0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\kernel32.dll
1552540.210c: 00007ff91a9a1000-00007ff91aa15fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\kernel32.dll
1562540.210c: 00007ff91aa16000-00007ff91aa47fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\kernel32.dll
1572540.210c: 00007ff91aa48000-00007ff91aa48fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\kernel32.dll
1582540.210c: 00007ff91aa49000-00007ff91aa49fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\kernel32.dll
1592540.210c: 00007ff91aa4a000-00007ff91aa51fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\kernel32.dll
1602540.210c: 00007ff91aa52000-00007ff91b61ffff 0x0001/0x0000 0x0000000
1612540.210c: *00007ff91b620000-00007ff91b620fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
1622540.210c: 00007ff91b621000-00007ff91b737fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
1632540.210c: 00007ff91b738000-00007ff91b77efff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
1642540.210c: 00007ff91b77f000-00007ff91b77ffff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
1652540.210c: 00007ff91b780000-00007ff91b781fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
1662540.210c: 00007ff91b782000-00007ff91b78afff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
1672540.210c: 00007ff91b78b000-00007ff91b80ffff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
1682540.210c: 00007ff91b810000-00007ffffffeffff 0x0001/0x0000 0x0000000
1692540.210c: kernel32.dll: timestamp 0xd0cecc10 (rc=VINF_SUCCESS)
1702540.210c: kernelbase.dll: timestamp 0x7083db20 (rc=VINF_SUCCESS)
1712540.210c: VirtualBoxVM.exe: timestamp 0x5d6e3430 (rc=VINF_SUCCESS)
1722540.210c: '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe' has no imports
1732540.210c: '\Device\HarddiskVolume3\Windows\System32\ntdll.dll' has no imports
1742540.210c: supR3HardenedWinInit: SUPHARDNTVPKIND_SELF_PURIFICATION_LIMITED -> VINF_SUCCESS, cFixes=0
1752540.210c: '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe' has no imports
1762540.210c: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe)
1772540.210c: supR3HardNtEnableThreadCreationEx:
1782540.210c: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007ff91b691800 pvNtTerminateThread=00007ff91b6bcb20
1792540.210c: supR3HardenedWinDoReSpawn(1): New child 314c.27b8 [kernel32].
1802540.210c: supR3HardNtChildGatherData: PebBaseAddress=0000000000582000 cbPeb=0x388
1812540.210c: supR3HardNtPuChFindNtdll: uNtDllParentAddr=00007ff91b620000 uNtDllChildAddr=00007ff91b620000
1822540.210c: supR3HardenedWinSetupChildInit: uLdrInitThunk=00007ff91b691800
1832540.210c: supR3HardenedWinSetupChildInit: Start child.
1842540.210c: supR3HardNtChildWaitFor: Found expected request 0 (PurifyChildAndCloseHandles) after 0 ms.
1852540.210c: supR3HardNtChildPurify: Startup delay kludge #1/0: 260 ms, 29 sleeps
1862540.210c: supHardNtVpScanVirtualMemory: enmKind=CHILD_PURIFICATION
1872540.210c: *0000000000000000-00000000002bffff 0x0001/0x0000 0x0000000
1882540.210c: *00000000002c0000-00000000002dffff 0x0004/0x0004 0x0020000
1892540.210c: *00000000002e0000-00000000002fafff 0x0002/0x0002 0x0040000
1902540.210c: 00000000002fb000-00000000002fffff 0x0001/0x0000 0x0000000
1912540.210c: *0000000000300000-00000000003fafff 0x0000/0x0004 0x0020000
1922540.210c: 00000000003fb000-00000000003fdfff 0x0104/0x0004 0x0020000
1932540.210c: 00000000003fe000-00000000003fffff 0x0004/0x0004 0x0020000
1942540.210c: *0000000000400000-0000000000581fff 0x0000/0x0004 0x0020000
1952540.210c: 0000000000582000-0000000000584fff 0x0004/0x0004 0x0020000
1962540.210c: 0000000000585000-00000000005fffff 0x0000/0x0004 0x0020000
1972540.210c: *0000000000600000-0000000000603fff 0x0002/0x0002 0x0040000
1982540.210c: 0000000000604000-000000000060ffff 0x0001/0x0000 0x0000000
1992540.210c: *0000000000610000-0000000000611fff 0x0004/0x0004 0x0020000
2002540.210c: 0000000000612000-000000007ffdffff 0x0001/0x0000 0x0000000
2012540.210c: *000000007ffe0000-000000007ffe0fff 0x0002/0x0002 0x0020000
2022540.210c: 000000007ffe1000-000000007ffeafff 0x0001/0x0000 0x0000000
2032540.210c: *000000007ffeb000-000000007ffebfff 0x0002/0x0002 0x0020000
2042540.210c: 000000007ffec000-00007ff52594ffff 0x0001/0x0000 0x0000000
2052540.210c: *00007ff525950000-00007ff525950fff 0x0002/0x0002 0x0040000
2062540.210c: 00007ff525951000-00007ff52595ffff 0x0001/0x0000 0x0000000
2072540.210c: *00007ff525960000-00007ff525982fff 0x0002/0x0002 0x0040000
2082540.210c: 00007ff525983000-00007ff73ebcffff 0x0001/0x0000 0x0000000
2092540.210c: *00007ff73ebd0000-00007ff73ebd0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
2102540.210c: 00007ff73ebd1000-00007ff73ec45fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
2112540.210c: 00007ff73ec46000-00007ff73ec46fff 0x0080/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
2122540.210c: 00007ff73ec47000-00007ff73ec8efff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
2132540.210c: 00007ff73ec8f000-00007ff73ec8ffff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
2142540.210c: 00007ff73ec90000-00007ff73ec90fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
2152540.210c: 00007ff73ec91000-00007ff73ec95fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
2162540.210c: 00007ff73ec96000-00007ff73ec96fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
2172540.210c: 00007ff73ec97000-00007ff73ec97fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
2182540.210c: 00007ff73ec98000-00007ff73ec9bfff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
2192540.210c: 00007ff73ec9c000-00007ff73ece4fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
2202540.210c: 00007ff73ece5000-00007ff91b61ffff 0x0001/0x0000 0x0000000
2212540.210c: *00007ff91b620000-00007ff91b620fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
2222540.210c: 00007ff91b621000-00007ff91b737fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
2232540.210c: 00007ff91b738000-00007ff91b77efff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
2242540.210c: 00007ff91b77f000-00007ff91b78afff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
2252540.210c: 00007ff91b78b000-00007ff91b799fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
2262540.210c: 00007ff91b79a000-00007ff91b79afff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
2272540.210c: 00007ff91b79b000-00007ff91b79dfff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
2282540.210c: 00007ff91b79e000-00007ff91b80ffff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
2292540.210c: 00007ff91b810000-00007ffffffeffff 0x0001/0x0000 0x0000000
2302540.210c: supR3HardNtChildPurify: Done after 262 ms and 0 fixes (loop #0).
231314c.27b8: Log file opened: 6.0.12r133076 g_hStartupLog=0000000000000004 g_uNtVerCombined=0xa047ba00
232314c.27b8: supR3HardenedVmProcessInit: uNtDllAddr=00007ff91b620000 g_uNtVerCombined=0xa047ba00
233314c.27b8: ntdll.dll: timestamp 0xf24fc044 (rc=VINF_SUCCESS)
234314c.27b8: New simple heap: #1 0000000000720000 LB 0x400000 (for 2031616 allocation)
2352540.210c: supR3HardNtEnableThreadCreationEx:
236314c.27b8: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox'
237314c.27b8: System32: \Device\HarddiskVolume3\Windows\System32
238314c.27b8: WinSxS: \Device\HarddiskVolume3\Windows\WinSxS
239314c.27b8: KnownDllPath: C:\WINDOWS\System32
240314c.27b8: supR3HardenedVmProcessInit: Opening vboxdrv stub...
241314c.27b8: supR3HardenedVmProcessInit: Restoring LdrInitializeThunk...
242314c.27b8: supR3HardenedVmProcessInit: Returning to LdrInitializeThunk...
243314c.27b8: Registered Dll notification callback with NTDLL.
244314c.27b8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\kernel32.dll)
245314c.27b8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\kernel32.dll
246314c.27b8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\KERNEL32.DLL (Input=KERNEL32.DLL, rcNtResolve=0xc0150008) *pfFlags=0xffffffff pwszSearchPath=0000000000004001:<flags> [calling]
247314c.27b8: supR3HardenedDllNotificationCallback: load 00007ff918f70000 LB 0x002a3000 C:\WINDOWS\System32\KERNELBASE.dll [fFlags=0x0]
248314c.27b8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\KernelBase.dll)
249314c.27b8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\KernelBase.dll
250314c.27b8: supR3HardenedDllNotificationCallback: load 00007ff91a9a0000 LB 0x000b2000 C:\WINDOWS\System32\KERNEL32.DLL [fFlags=0x0]
251314c.27b8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
252314c.27b8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff91a9a0000 'C:\WINDOWS\System32\KERNEL32.DLL'
253314c.27b8: supR3HardenedDllNotificationCallback: load 00007ff73ebd0000 LB 0x00115000 C:\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe [fFlags=0x0]
254314c.27b8: '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe' has no imports
255314c.27b8: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe)
256314c.27b8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
257314c.27b8: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007ff91b691800 pvNtTerminateThread=00007ff91b6bcb20
2582540.210c: supR3HardNtChildWaitFor: Found expected request 1 (CloseEvents) after 79 ms.
259314c.27b8: \SystemRoot\System32\ntdll.dll:
260314c.27b8: CreationTime: 2019-09-11T15:06:46.480481700Z
261314c.27b8: LastWriteTime: 2019-09-11T15:06:46.519381400Z
262314c.27b8: ChangeTime: 2019-09-11T15:11:11.763337600Z
263314c.27b8: FileAttributes: 0x20
264314c.27b8: Size: 0x1e8458
265314c.27b8: NT Headers: 0xd8
266314c.27b8: Timestamp: 0xf24fc044
267314c.27b8: Machine: 0x8664 - amd64
268314c.27b8: Timestamp: 0xf24fc044
269314c.27b8: Image Version: 10.0
270314c.27b8: SizeOfImage: 0x1f0000 (2031616)
271314c.27b8: Resource Dir: 0x17f000 LB 0x6f310
272314c.27b8: [Version info resource found at 0xd8! (ID/Name: 0x1; SubID/SubName: 0x409)]
273314c.27b8: [Raw version resource data: 0x17f0f0 LB 0x380, codepage 0x0 (reserved 0x0)]
274314c.27b8: ProductName: Microsoft® Windows® Operating System
275314c.27b8: ProductVersion: 10.0.18362.356
276314c.27b8: FileVersion: 10.0.18362.356 (WinBuild.160101.0800)
277314c.27b8: FileDescription: NT Layer DLL
278314c.27b8: \SystemRoot\System32\kernel32.dll:
279314c.27b8: CreationTime: 2019-09-11T15:06:30.537351000Z
280314c.27b8: LastWriteTime: 2019-09-11T15:06:30.554305600Z
281314c.27b8: ChangeTime: 2019-09-11T15:11:09.793563100Z
282314c.27b8: FileAttributes: 0x20
283314c.27b8: Size: 0xb0570
284314c.27b8: NT Headers: 0xe8
285314c.27b8: Timestamp: 0xd0cecc10
286314c.27b8: Machine: 0x8664 - amd64
287314c.27b8: Timestamp: 0xd0cecc10
288314c.27b8: Image Version: 10.0
289314c.27b8: SizeOfImage: 0xb2000 (729088)
290314c.27b8: Resource Dir: 0xb0000 LB 0x520
291314c.27b8: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
292314c.27b8: [Raw version resource data: 0xb00b0 LB 0x3a4, codepage 0x0 (reserved 0x0)]
293314c.27b8: ProductName: Microsoft® Windows® Operating System
294314c.27b8: ProductVersion: 10.0.18362.329
295314c.27b8: FileVersion: 10.0.18362.329 (WinBuild.160101.0800)
296314c.27b8: FileDescription: Windows NT BASE API Client DLL
297314c.27b8: \SystemRoot\System32\KernelBase.dll:
298314c.27b8: CreationTime: 2019-09-11T15:06:46.941250600Z
299314c.27b8: LastWriteTime: 2019-09-11T15:06:46.992113700Z
300314c.27b8: ChangeTime: 2019-09-11T15:11:11.390799400Z
301314c.27b8: FileAttributes: 0x20
302314c.27b8: Size: 0x2a2638
303314c.27b8: NT Headers: 0xf0
304314c.27b8: Timestamp: 0x7083db20
305314c.27b8: Machine: 0x8664 - amd64
306314c.27b8: Timestamp: 0x7083db20
307314c.27b8: Image Version: 10.0
308314c.27b8: SizeOfImage: 0x2a3000 (2764800)
309314c.27b8: Resource Dir: 0x27d000 LB 0x548
310314c.27b8: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
311314c.27b8: [Raw version resource data: 0x27d0b0 LB 0x3bc, codepage 0x0 (reserved 0x0)]
312314c.27b8: ProductName: Microsoft® Windows® Operating System
313314c.27b8: ProductVersion: 10.0.18362.356
314314c.27b8: FileVersion: 10.0.18362.356 (WinBuild.160101.0800)
315314c.27b8: FileDescription: Windows NT BASE API Client DLL
316314c.27b8: \SystemRoot\System32\apisetschema.dll:
317314c.27b8: CreationTime: 2019-03-19T04:43:54.837151500Z
318314c.27b8: LastWriteTime: 2019-03-19T04:43:54.837151500Z
319314c.27b8: ChangeTime: 2019-09-11T15:07:25.157338500Z
320314c.27b8: FileAttributes: 0x20
321314c.27b8: Size: 0x1d028
322314c.27b8: NT Headers: 0xc8
323314c.27b8: Timestamp: 0xd6ced080
324314c.27b8: Machine: 0x8664 - amd64
325314c.27b8: Timestamp: 0xd6ced080
326314c.27b8: Image Version: 10.0
327314c.27b8: SizeOfImage: 0x1e000 (122880)
328314c.27b8: Resource Dir: 0x1d000 LB 0x408
329314c.27b8: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
330314c.27b8: [Raw version resource data: 0x1d060 LB 0x3a8, codepage 0x0 (reserved 0x0)]
331314c.27b8: ProductName: Microsoft® Windows® Operating System
332314c.27b8: ProductVersion: 10.0.18362.1
333314c.27b8: FileVersion: 10.0.18362.1 (WinBuild.160101.0800)
334314c.27b8: FileDescription: ApiSet Schema DLL
335314c.27b8: NtOpenDirectoryObject failed on \Driver: 0xc0000022
336314c.27b8: supR3HardenedWinFindAdversaries: 0x0
337314c.27b8: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox'
338314c.27b8: Calling main()
339314c.27b8: SUPR3HardenedMain: pszProgName=VirtualBoxVM fFlags=0x2
340314c.27b8: supR3HardenedWinInitAppBin(0x2): '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox'
341314c.27b8: '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe' has no imports
342314c.27b8: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe)
343314c.27b8: SUPR3HardenedMain: Respawn #2
344314c.27b8: supR3HardNtEnableThreadCreationEx:
345314c.27b8: supR3HardenedDllNotificationCallback: load 00007ff919dc0000 LB 0x00120000 C:\WINDOWS\System32\RPCRT4.dll [fFlags=0x0]
346314c.27b8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll)
347314c.27b8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll
348314c.27b8: supR3HardenedDllNotificationCallback: load 00007ff91aaa0000 LB 0x00097000 C:\WINDOWS\System32\sechost.dll [fFlags=0x0]
349314c.27b8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'rpcrt4.dll'.
350314c.27b8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\sechost.dll)
351314c.27b8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\sechost.dll
352314c.27b8: '\Device\HarddiskVolume3\Windows\System32\ntdll.dll' has no imports
353314c.27b8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\ntdll.dll)
354314c.27b8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\ntdll.dll
355314c.27b8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
356314c.27b8: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
357314c.27b8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
358314c.27b8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\ntdll.dll (Input=ntdll.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
359314c.27b8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff91b620000 'C:\WINDOWS\System32\ntdll.dll'
360314c.27b8: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007ff91b691800 pvNtTerminateThread=00007ff91b6bcb20
361314c.27b8: supR3HardenedWinDoReSpawn(2): New child 3d74.2dbc [kernel32].
362314c.27b8: supR3HardenedWinReSpawn: NtSetInformationThread/ThreadHideFromDebugger failed: 0xc0000022 (harmless)
363314c.27b8: supR3HardNtChildGatherData: PebBaseAddress=00000000009fd000 cbPeb=0x388
364314c.27b8: supR3HardNtPuChFindNtdll: uNtDllParentAddr=00007ff91b620000 uNtDllChildAddr=00007ff91b620000
365314c.27b8: supR3HardenedWinSetupChildInit: uLdrInitThunk=00007ff91b691800
366314c.27b8: supR3HardenedWinSetupChildInit: Start child.
367314c.27b8: supR3HardNtChildWaitFor: Found expected request 0 (PurifyChildAndCloseHandles) after 0 ms.
368314c.27b8: supR3HardNtChildPurify: Startup delay kludge #1/0: 260 ms, 29 sleeps
369314c.27b8: supHardNtVpScanVirtualMemory: enmKind=CHILD_PURIFICATION
370314c.27b8: *0000000000000000-00000000007fffff 0x0001/0x0000 0x0000000
371314c.27b8: *0000000000800000-00000000009fcfff 0x0000/0x0004 0x0020000
372314c.27b8: 00000000009fd000-00000000009fffff 0x0004/0x0004 0x0020000
373314c.27b8: *0000000000a00000-0000000000a1ffff 0x0004/0x0004 0x0020000
374314c.27b8: *0000000000a20000-0000000000a3afff 0x0002/0x0002 0x0040000
375314c.27b8: 0000000000a3b000-0000000000a3ffff 0x0001/0x0000 0x0000000
376314c.27b8: *0000000000a40000-0000000000b3afff 0x0000/0x0004 0x0020000
377314c.27b8: 0000000000b3b000-0000000000b3dfff 0x0104/0x0004 0x0020000
378314c.27b8: 0000000000b3e000-0000000000b3ffff 0x0004/0x0004 0x0020000
379314c.27b8: *0000000000b40000-0000000000b43fff 0x0002/0x0002 0x0040000
380314c.27b8: 0000000000b44000-0000000000b4ffff 0x0001/0x0000 0x0000000
381314c.27b8: *0000000000b50000-0000000000b51fff 0x0004/0x0004 0x0020000
382314c.27b8: 0000000000b52000-000000007ffdffff 0x0001/0x0000 0x0000000
383314c.27b8: *000000007ffe0000-000000007ffe0fff 0x0002/0x0002 0x0020000
384314c.27b8: 000000007ffe1000-000000007ffeafff 0x0001/0x0000 0x0000000
385314c.27b8: *000000007ffeb000-000000007ffebfff 0x0002/0x0002 0x0020000
386314c.27b8: 000000007ffec000-00007ff53910ffff 0x0001/0x0000 0x0000000
387314c.27b8: *00007ff539110000-00007ff539110fff 0x0002/0x0002 0x0040000
388314c.27b8: 00007ff539111000-00007ff53911ffff 0x0001/0x0000 0x0000000
389314c.27b8: *00007ff539120000-00007ff539142fff 0x0002/0x0002 0x0040000
390314c.27b8: 00007ff539143000-00007ff73ebcffff 0x0001/0x0000 0x0000000
391314c.27b8: *00007ff73ebd0000-00007ff73ebd0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
392314c.27b8: 00007ff73ebd1000-00007ff73ec45fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
393314c.27b8: 00007ff73ec46000-00007ff73ec46fff 0x0080/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
394314c.27b8: 00007ff73ec47000-00007ff73ec8efff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
395314c.27b8: 00007ff73ec8f000-00007ff73ec8ffff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
396314c.27b8: 00007ff73ec90000-00007ff73ec90fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
397314c.27b8: 00007ff73ec91000-00007ff73ec95fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
398314c.27b8: 00007ff73ec96000-00007ff73ec96fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
399314c.27b8: 00007ff73ec97000-00007ff73ec97fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
400314c.27b8: 00007ff73ec98000-00007ff73ec9bfff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
401314c.27b8: 00007ff73ec9c000-00007ff73ece4fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
402314c.27b8: 00007ff73ece5000-00007ff91b61ffff 0x0001/0x0000 0x0000000
403314c.27b8: *00007ff91b620000-00007ff91b620fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
404314c.27b8: 00007ff91b621000-00007ff91b737fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
405314c.27b8: 00007ff91b738000-00007ff91b77efff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
406314c.27b8: 00007ff91b77f000-00007ff91b78afff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
407314c.27b8: 00007ff91b78b000-00007ff91b799fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
408314c.27b8: 00007ff91b79a000-00007ff91b79afff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
409314c.27b8: 00007ff91b79b000-00007ff91b79dfff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
410314c.27b8: 00007ff91b79e000-00007ff91b80ffff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume3\Windows\System32\ntdll.dll
411314c.27b8: 00007ff91b810000-00007ffffffeffff 0x0001/0x0000 0x0000000
412314c.27b8: VirtualBoxVM.exe: timestamp 0x5d6e3430 (rc=VINF_SUCCESS)
413314c.27b8: '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe' has no imports
414314c.27b8: '\Device\HarddiskVolume3\Windows\System32\ntdll.dll' has no imports
415314c.27b8: supR3HardNtChildPurify: Done after 285 ms and 0 fixes (loop #0).
4163d74.2dbc: Log file opened: 6.0.12r133076 g_hStartupLog=0000000000000004 g_uNtVerCombined=0xa047ba00
4173d74.2dbc: supR3HardenedVmProcessInit: uNtDllAddr=00007ff91b620000 g_uNtVerCombined=0xa047ba00
418314c.27b8: supR3HardenedEarlyCompact: Removed heap 1 (0x00000000720000 LB 0x400000)
419314c.27b8: supR3HardNtEnableThreadCreationEx:
4203d74.2dbc: ntdll.dll: timestamp 0xf24fc044 (rc=VINF_SUCCESS)
4213d74.2dbc: New simple heap: #1 0000000000c60000 LB 0x400000 (for 2031616 allocation)
4223d74.2dbc: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox'
4233d74.2dbc: System32: \Device\HarddiskVolume3\Windows\System32
4243d74.2dbc: WinSxS: \Device\HarddiskVolume3\Windows\WinSxS
4253d74.2dbc: KnownDllPath: C:\WINDOWS\System32
4263d74.2dbc: supR3HardenedVmProcessInit: Opening vboxdrv...
4273d74.2dbc: supR3HardenedVmProcessInit: Restoring LdrInitializeThunk...
4283d74.2dbc: supR3HardenedVmProcessInit: Returning to LdrInitializeThunk...
4293d74.2dbc: Registered Dll notification callback with NTDLL.
4303d74.2dbc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\kernel32.dll)
4313d74.2dbc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\kernel32.dll
4323d74.2dbc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\KERNEL32.DLL (Input=KERNEL32.DLL, rcNtResolve=0xc0150008) *pfFlags=0xffffffff pwszSearchPath=0000000000004001:<flags> [calling]
4333d74.2dbc: supR3HardenedDllNotificationCallback: load 00007ff918f70000 LB 0x002a3000 C:\WINDOWS\System32\KERNELBASE.dll [fFlags=0x0]
4343d74.2dbc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\KernelBase.dll)
4353d74.2dbc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\KernelBase.dll
4363d74.2dbc: supR3HardenedDllNotificationCallback: load 00007ff91a9a0000 LB 0x000b2000 C:\WINDOWS\System32\KERNEL32.DLL [fFlags=0x0]
4373d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
4383d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff91a9a0000 'C:\WINDOWS\System32\KERNEL32.DLL'
4393d74.2dbc: supR3HardenedDllNotificationCallback: load 00007ff73ebd0000 LB 0x00115000 C:\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe [fFlags=0x0]
4403d74.2dbc: '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe' has no imports
4413d74.2dbc: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe)
4423d74.2dbc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
4433d74.2dbc: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007ff91b691800 pvNtTerminateThread=00007ff91b6bcb20
444314c.27b8: supR3HardNtChildWaitFor: Found expected request 1 (CloseEvents) after 93 ms.
4453d74.2dbc: \SystemRoot\System32\ntdll.dll:
4463d74.2dbc: CreationTime: 2019-09-11T15:06:46.480481700Z
4473d74.2dbc: LastWriteTime: 2019-09-11T15:06:46.519381400Z
4483d74.2dbc: ChangeTime: 2019-09-11T15:11:11.763337600Z
4493d74.2dbc: FileAttributes: 0x20
4503d74.2dbc: Size: 0x1e8458
4513d74.2dbc: NT Headers: 0xd8
4523d74.2dbc: Timestamp: 0xf24fc044
4533d74.2dbc: Machine: 0x8664 - amd64
4543d74.2dbc: Timestamp: 0xf24fc044
4553d74.2dbc: Image Version: 10.0
4563d74.2dbc: SizeOfImage: 0x1f0000 (2031616)
4573d74.2dbc: Resource Dir: 0x17f000 LB 0x6f310
4583d74.2dbc: [Version info resource found at 0xd8! (ID/Name: 0x1; SubID/SubName: 0x409)]
4593d74.2dbc: [Raw version resource data: 0x17f0f0 LB 0x380, codepage 0x0 (reserved 0x0)]
4603d74.2dbc: ProductName: Microsoft® Windows® Operating System
4613d74.2dbc: ProductVersion: 10.0.18362.356
4623d74.2dbc: FileVersion: 10.0.18362.356 (WinBuild.160101.0800)
4633d74.2dbc: FileDescription: NT Layer DLL
4643d74.2dbc: \SystemRoot\System32\kernel32.dll:
4653d74.2dbc: CreationTime: 2019-09-11T15:06:30.537351000Z
4663d74.2dbc: LastWriteTime: 2019-09-11T15:06:30.554305600Z
4673d74.2dbc: ChangeTime: 2019-09-11T15:11:09.793563100Z
4683d74.2dbc: FileAttributes: 0x20
4693d74.2dbc: Size: 0xb0570
4703d74.2dbc: NT Headers: 0xe8
4713d74.2dbc: Timestamp: 0xd0cecc10
4723d74.2dbc: Machine: 0x8664 - amd64
4733d74.2dbc: Timestamp: 0xd0cecc10
4743d74.2dbc: Image Version: 10.0
4753d74.2dbc: SizeOfImage: 0xb2000 (729088)
4763d74.2dbc: Resource Dir: 0xb0000 LB 0x520
4773d74.2dbc: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
4783d74.2dbc: [Raw version resource data: 0xb00b0 LB 0x3a4, codepage 0x0 (reserved 0x0)]
4793d74.2dbc: ProductName: Microsoft® Windows® Operating System
4803d74.2dbc: ProductVersion: 10.0.18362.329
4813d74.2dbc: FileVersion: 10.0.18362.329 (WinBuild.160101.0800)
4823d74.2dbc: FileDescription: Windows NT BASE API Client DLL
4833d74.2dbc: \SystemRoot\System32\KernelBase.dll:
4843d74.2dbc: CreationTime: 2019-09-11T15:06:46.941250600Z
4853d74.2dbc: LastWriteTime: 2019-09-11T15:06:46.992113700Z
4863d74.2dbc: ChangeTime: 2019-09-11T15:11:11.390799400Z
4873d74.2dbc: FileAttributes: 0x20
4883d74.2dbc: Size: 0x2a2638
4893d74.2dbc: NT Headers: 0xf0
4903d74.2dbc: Timestamp: 0x7083db20
4913d74.2dbc: Machine: 0x8664 - amd64
4923d74.2dbc: Timestamp: 0x7083db20
4933d74.2dbc: Image Version: 10.0
4943d74.2dbc: SizeOfImage: 0x2a3000 (2764800)
4953d74.2dbc: Resource Dir: 0x27d000 LB 0x548
4963d74.2dbc: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
4973d74.2dbc: [Raw version resource data: 0x27d0b0 LB 0x3bc, codepage 0x0 (reserved 0x0)]
4983d74.2dbc: ProductName: Microsoft® Windows® Operating System
4993d74.2dbc: ProductVersion: 10.0.18362.356
5003d74.2dbc: FileVersion: 10.0.18362.356 (WinBuild.160101.0800)
5013d74.2dbc: FileDescription: Windows NT BASE API Client DLL
5023d74.2dbc: \SystemRoot\System32\apisetschema.dll:
5033d74.2dbc: CreationTime: 2019-03-19T04:43:54.837151500Z
5043d74.2dbc: LastWriteTime: 2019-03-19T04:43:54.837151500Z
5053d74.2dbc: ChangeTime: 2019-09-11T15:07:25.157338500Z
5063d74.2dbc: FileAttributes: 0x20
5073d74.2dbc: Size: 0x1d028
5083d74.2dbc: NT Headers: 0xc8
5093d74.2dbc: Timestamp: 0xd6ced080
5103d74.2dbc: Machine: 0x8664 - amd64
5113d74.2dbc: Timestamp: 0xd6ced080
5123d74.2dbc: Image Version: 10.0
5133d74.2dbc: SizeOfImage: 0x1e000 (122880)
5143d74.2dbc: Resource Dir: 0x1d000 LB 0x408
5153d74.2dbc: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
5163d74.2dbc: [Raw version resource data: 0x1d060 LB 0x3a8, codepage 0x0 (reserved 0x0)]
5173d74.2dbc: ProductName: Microsoft® Windows® Operating System
5183d74.2dbc: ProductVersion: 10.0.18362.1
5193d74.2dbc: FileVersion: 10.0.18362.1 (WinBuild.160101.0800)
5203d74.2dbc: FileDescription: ApiSet Schema DLL
5213d74.2dbc: NtOpenDirectoryObject failed on \Driver: 0xc0000022
5223d74.2dbc: supR3HardenedWinFindAdversaries: 0x0
5233d74.2dbc: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox'
5243d74.2dbc: Calling main()
5253d74.2dbc: SUPR3HardenedMain: pszProgName=VirtualBoxVM fFlags=0x2
5263d74.2dbc: supR3HardenedWinInitAppBin(0x2): '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox'
5273d74.2dbc: '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe' has no imports
5283d74.2dbc: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe)
5293d74.2dbc: SUPR3HardenedMain: Final process, opening VBoxDrv...
5303d74.2dbc: supR3HardenedEarlyCompact: Removed heap 1 (0x00000000c60000 LB 0x400000)
5313d74.2dbc: supR3HardNtEnableThreadCreationEx:
5323d74.2dbc: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxSupLib.dll)
5333d74.2dbc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxSupLib.dll
5343d74.2dbc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
5353d74.2dbc: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxSupLib.dll [lacks WinVerifyTrust]
5363d74.2dbc: supR3HardenedDllNotificationCallback: load 00007ff90ea30000 LB 0x00005000 C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL [fFlags=0x0]
5373d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxSupLib.dll [lacks WinVerifyTrust]
5383d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxSupLib.dll [lacks WinVerifyTrust]
5393d74.2dbc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
5403d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90ea30000 'C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL'
5413d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxSupLib.dll [lacks WinVerifyTrust]
5423d74.2dbc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
5433d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90ea30000 'C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL'
5443d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90ea30000 'C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL'
5453d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
5463d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msasn1.dll'.
5473d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'crypt32.dll'.
5483d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #27 'rpcrt4.dll'.
5493d74.2dbc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\wintrust.dll)
5503d74.2dbc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\wintrust.dll
5513d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
5523d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
5533d74.2dbc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll)
5543d74.2dbc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll
5553d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'crypt32.dll'...
5563d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'crypt32.dll' -> '\Device\HarddiskVolume3\Windows\System32\crypt32.dll' [rcNtRedir=0xc0150008]
5573d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #34 'msasn1.dll'.
5583d74.2dbc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\crypt32.dll)
5593d74.2dbc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\crypt32.dll
5603d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msasn1.dll'...
5613d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msasn1.dll' -> '\Device\HarddiskVolume3\Windows\System32\msasn1.dll' [rcNtRedir=0xc0150008]
5623d74.2dbc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\msasn1.dll)
5633d74.2dbc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\msasn1.dll
5643d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
5653d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
5663d74.2dbc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\msvcrt.dll)
5673d74.2dbc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\msvcrt.dll
5683d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msasn1.dll'...
5693d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msasn1.dll' -> '\Device\HarddiskVolume3\Windows\System32\msasn1.dll' [rcNtRedir=0xc0150008]
5703d74.2dbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msasn1.dll [lacks WinVerifyTrust]
5713d74.2dbc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\Wintrust.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
5723d74.2dbc: supR3HardenedDllNotificationCallback: load 00007ff91a890000 LB 0x0009e000 C:\WINDOWS\System32\msvcrt.dll [fFlags=0x0]
5733d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
5743d74.2dbc: supR3HardenedDllNotificationCallback: load 00007ff918520000 LB 0x00012000 C:\WINDOWS\System32\MSASN1.dll [fFlags=0x0]
5753d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msasn1.dll [lacks WinVerifyTrust]
5763d74.2dbc: supR3HardenedDllNotificationCallback: load 00007ff918610000 LB 0x000fa000 C:\WINDOWS\System32\ucrtbase.dll [fFlags=0x0]
5773d74.2dbc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\ucrtbase.dll)
5783d74.2dbc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\ucrtbase.dll
5793d74.2dbc: supR3HardenedDllNotificationCallback: load 00007ff9193c0000 LB 0x00149000 C:\WINDOWS\System32\CRYPT32.dll [fFlags=0x0]
5803d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll [lacks WinVerifyTrust]
5813d74.2dbc: supR3HardenedDllNotificationCallback: load 00007ff919dc0000 LB 0x00120000 C:\WINDOWS\System32\RPCRT4.dll [fFlags=0x0]
5823d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
5833d74.2dbc: supR3HardenedDllNotificationCallback: load 00007ff9185b0000 LB 0x0005c000 C:\WINDOWS\System32\Wintrust.dll [fFlags=0x0]
5843d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
5853d74.2dbc: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-synch-l1-2-0) -> 0x0, fPresent=1
5863d74.2dbc: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-synch-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
5873d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff918f70000 'api-ms-win-core-synch-l1-2-0'
5883d74.2dbc: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-fibers-l1-1-1) -> 0x0, fPresent=1
5893d74.2dbc: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-fibers-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
5903d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff918f70000 'api-ms-win-core-fibers-l1-1-1'
5913d74.2dbc: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-fibers-l1-1-1) -> 0x0, fPresent=1
5923d74.2dbc: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-fibers-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
5933d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff918f70000 'api-ms-win-core-fibers-l1-1-1'
5943d74.2dbc: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-synch-l1-2-0) -> 0x0, fPresent=1
5953d74.2dbc: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-synch-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
5963d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff918f70000 'api-ms-win-core-synch-l1-2-0'
5973d74.2dbc: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-localization-l1-2-1) -> 0x0, fPresent=1
5983d74.2dbc: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-l1-2-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
5993d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff918f70000 'api-ms-win-core-localization-l1-2-1'
6003d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9185b0000 'C:\WINDOWS\system32\Wintrust.dll'
6013d74.2dbc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\bcrypt.dll)
6023d74.2dbc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\bcrypt.dll
6033d74.2dbc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\bcrypt.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
6043d74.2dbc: supR3HardenedDllNotificationCallback: load 00007ff918790000 LB 0x00026000 C:\WINDOWS\System32\bcrypt.dll [fFlags=0x0]
6053d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\bcrypt.dll [lacks WinVerifyTrust]
6063d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff918790000 'C:\WINDOWS\system32\bcrypt.dll'
6073d74.2dbc: bcrypt.dll loaded at 00007ff918790000, BCryptOpenAlgorithmProvider at 00007ff918794c70, preloading providers:
6083d74.2dbc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll)
6093d74.2dbc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll
6103d74.2dbc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\bcryptprimitives.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
6113d74.2dbc: supR3HardenedDllNotificationCallback: load 00007ff918710000 LB 0x00080000 C:\WINDOWS\System32\bcryptprimitives.dll [fFlags=0x0]
6123d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll [lacks WinVerifyTrust]
6133d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff918710000 'C:\WINDOWS\system32\bcryptprimitives.dll'
6143d74.2dbc: BCryptOpenAlgorithmProvider(,'MD2',0,0) -> 0x0 (hAlgo=00000000010849a0)
6153d74.2dbc: BCryptOpenAlgorithmProvider(,'MD4',0,0) -> 0x0 (hAlgo=000000000108eb70)
6163d74.2dbc: BCryptOpenAlgorithmProvider(,'MD5',0,0) -> 0x0 (hAlgo=000000000108ee70)
6173d74.2dbc: BCryptOpenAlgorithmProvider(,'SHA1',0,0) -> 0x0 (hAlgo=000000000108f170)
6183d74.2dbc: BCryptOpenAlgorithmProvider(,'SHA256',0,0) -> 0x0 (hAlgo=000000000108f470)
6193d74.2dbc: BCryptOpenAlgorithmProvider(,'SHA512',0,0) -> 0x0 (hAlgo=000000000108f770)
6203d74.2dbc: BCryptOpenAlgorithmProvider(,'RSA',0,0) -> 0x0 (hAlgo=000000000108fa70)
6213d74.2dbc: BCryptOpenAlgorithmProvider(,'DSA',0,0) -> 0x0 (hAlgo=0000000001090180)
6223d74.2dbc: supR3HardenedDllNotificationCallback: load 00007ff919600000 LB 0x00017000 C:\WINDOWS\System32\CRYPTSP.dll [fFlags=0x0]
6233d74.2dbc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\cryptsp.dll)
6243d74.2dbc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\cryptsp.dll
6253d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #18 'bcrypt.dll'.
6263d74.2dbc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\rsaenh.dll)
6273d74.2dbc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
6283d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcrypt.dll'...
6293d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcrypt.dll' -> '\Device\HarddiskVolume3\Windows\System32\bcrypt.dll' [rcNtRedir=0xc0150008]
6303d74.2dbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\bcrypt.dll [lacks WinVerifyTrust]
6313d74.2dbc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
6323d74.2dbc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
6333d74.2dbc: supR3HardenedDllNotificationCallback: load 00007ff9178d0000 LB 0x00033000 C:\WINDOWS\system32\rsaenh.dll [fFlags=0x0]
6343d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
6353d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
6363d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'bcryptprimitives.dll'.
6373d74.2dbc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\cryptbase.dll)
6383d74.2dbc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\cryptbase.dll
6393d74.2dbc: supR3HardenedDllNotificationCallback: load 00007ff917f30000 LB 0x0000c000 C:\WINDOWS\SYSTEM32\CRYPTBASE.dll [fFlags=0x0]
6403d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\cryptbase.dll [lacks WinVerifyTrust]
6413d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
6423d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcryptprimitives.dll'...
6433d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcryptprimitives.dll' -> '\Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll' [rcNtRedir=0xc0150008]
6443d74.2dbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll [lacks WinVerifyTrust]
6453d74.2dbc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\kernel32.dll (Input=kernel32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
6463d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff91a9a0000 'C:\WINDOWS\System32\kernel32.dll'
6473d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
6483d74.2dbc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\WINTRUST.DLL (Input=WINTRUST.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
6493d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9185b0000 'C:\WINDOWS\System32\WINTRUST.DLL'
6503d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll [lacks WinVerifyTrust]
6513d74.2dbc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\CRYPT32.dll (rcNtResolve=0xc0150008) *pfFlags=0x2 pwszSearchPath=0000000000000001:<flags> [calling]
6523d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9193c0000 'C:\WINDOWS\System32\CRYPT32.dll'
6533d74.2dbc: supR3HardenedDllNotificationCallback: load 00007ff91aef0000 LB 0x0001d000 C:\WINDOWS\System32\imagehlp.dll [fFlags=0x0]
6543d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #20 'rpcrt4.dll'.
6553d74.2dbc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\imagehlp.dll)
6563d74.2dbc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\imagehlp.dll
6573d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
6583d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
6593d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
6603d74.2dbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
6613d74.2dbc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
6623d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
6633d74.2dbc: supR3HardenedDllNotificationCallback: load 00007ff91aaa0000 LB 0x00097000 C:\WINDOWS\System32\sechost.dll [fFlags=0x0]
6643d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'rpcrt4.dll'.
6653d74.2dbc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\sechost.dll)
6663d74.2dbc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\sechost.dll
6673d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
6683d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'rpcrt4.dll'.
6693d74.2dbc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\gpapi.dll)
6703d74.2dbc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\gpapi.dll
6713d74.2dbc: supR3HardenedDllNotificationCallback: load 00007ff917110000 LB 0x00022000 C:\WINDOWS\SYSTEM32\gpapi.dll [fFlags=0x0]
6723d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gpapi.dll [lacks WinVerifyTrust]
6733d74.2dbc: supR3HardenedDllNotificationCallback: load 00007ff918590000 LB 0x0001f000 C:\WINDOWS\System32\profapi.dll [fFlags=0x0]
6743d74.2dbc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\profapi.dll)
6753d74.2dbc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\profapi.dll
6763d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
6773d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'crypt32.dll'.
6783d74.2dbc: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\cryptnet.dll)
6793d74.2dbc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\cryptnet.dll
6803d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'crypt32.dll'...
6813d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'crypt32.dll' -> '\Device\HarddiskVolume3\Windows\System32\crypt32.dll' [rcNtRedir=0xc0150008]
6823d74.2dbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll [lacks WinVerifyTrust]
6833d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
6843d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
6853d74.2dbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
6863d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
6873d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
6883d74.2dbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
6893d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
6903d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
6913d74.2dbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
6923d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
6933d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
6943d74.2dbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
6953d74.2dbc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\cryptnet.dll (Input=cryptnet.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
6963d74.2dbc: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
6973d74.2dbc: supR3HardenedDllNotificationCallback: load 00007ff904890000 LB 0x0002f000 C:\WINDOWS\System32\cryptnet.dll [fFlags=0x0]
6983d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
6993d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
7003d74.2dbc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x2 pwszSearchPath=0000000000000001:<flags> [calling]
7013d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff904890000 'C:\WINDOWS\System32\cryptnet.dll'
7023d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
7033d74.2dbc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x2 pwszSearchPath=0000000000000001:<flags> [calling]
7043d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff904890000 'C:\WINDOWS\System32\cryptnet.dll'
7053d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
7063d74.2dbc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x2 pwszSearchPath=0000000000000001:<flags> [calling]
7073d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff904890000 'C:\WINDOWS\System32\cryptnet.dll'
7083d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
7093d74.2dbc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x2 pwszSearchPath=0000000000000001:<flags> [calling]
7103d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff904890000 'C:\WINDOWS\System32\cryptnet.dll'
7113d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
7123d74.2dbc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x2 pwszSearchPath=0000000000000001:<flags> [calling]
7133d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff904890000 'C:\WINDOWS\System32\cryptnet.dll'
7143d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
7153d74.2dbc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x2 pwszSearchPath=0000000000000001:<flags> [calling]
7163d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff904890000 'C:\WINDOWS\System32\cryptnet.dll'
7173d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
7183d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff904890000 'C:\WINDOWS\System32\cryptnet.dll'
7193d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
7203d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff904890000 'C:\WINDOWS\System32\cryptnet.dll'
7213d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
7223d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff904890000 'C:\WINDOWS\System32\cryptnet.dll'
7233d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
7243d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff904890000 'C:\WINDOWS\System32\cryptnet.dll'
7253d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
7263d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff904890000 'C:\WINDOWS\System32\cryptnet.dll'
7273d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff904890000 'C:\WINDOWS\System32\cryptnet.dll'
7283d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
7293d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff904890000 'C:\Windows\System32\cryptnet.dll'
7303d74.2dbc: supR3HardenedDllNotificationCallback: load 00007ff91ac80000 LB 0x000a3000 C:\WINDOWS\System32\advapi32.dll [fFlags=0x0]
7313d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
7323d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'sechost.dll'.
7333d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #27 'rpcrt4.dll'.
7343d74.2dbc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\advapi32.dll)
7353d74.2dbc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\advapi32.dll
7363d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
7373d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
7383d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
7393d74.2dbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
7403d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'sechost.dll'...
7413d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'sechost.dll' -> '\Device\HarddiskVolume3\Windows\System32\sechost.dll' [rcNtRedir=0xc0150008]
7423d74.2dbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\sechost.dll [lacks WinVerifyTrust]
7433d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
7443d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
7453d74.2dbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
7463d74.2dbc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
7473d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
7483d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll [lacks WinVerifyTrust]
7493d74.2dbc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\crypt32.dll (Input=crypt32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
7503d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9193c0000 'C:\WINDOWS\System32\crypt32.dll'
7513d74.2dbc: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000000 pwszName=\SystemRoot\System32\ntdll.dll
7523d74.2dbc: supR3HardNtViCallWinVerifyTrustCatFile: New context 00000000018561f0
7533d74.2dbc: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000018561f0
7543d74.2dbc: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=FF0E0DB0F3B25F10A57DF1ED1D340BCBE29B8F90
7553d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
7563d74.2dbc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\rpcrt4.dll (Input=rpcrt4.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
7573d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff919dc0000 'C:\WINDOWS\System32\rpcrt4.dll'
7583d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
7593d74.2dbc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
7603d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
7613d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll [lacks WinVerifyTrust]
7623d74.2dbc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\crypt32.dll (Input=crypt32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
7633d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9193c0000 'C:\WINDOWS\System32\crypt32.dll'
7643d74.2dbc: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.18362.356.cat'; file='\SystemRoot\System32\ntdll.dll'
7653d74.2dbc: g_pfnWinVerifyTrust=00007ff9185b61f0
7663d74.2dbc: supR3HardenedScreenImage/preload: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll [redoing WinVerifyTrust]
7673d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
7683d74.2dbc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
7693d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
7703d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll [lacks WinVerifyTrust]
7713d74.2dbc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\crypt32.dll (Input=crypt32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
7723d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9193c0000 'C:\WINDOWS\System32\crypt32.dll'
7733d74.2dbc: supR3HardenedScreenImage/preload: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\crypt32.dll'
7743d74.2dbc: supR3HardenedScreenImage/preload: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wintrust.dll [redoing WinVerifyTrust]
7753d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
7763d74.2dbc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
7773d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
7783d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll
7793d74.2dbc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\crypt32.dll (Input=crypt32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
7803d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9193c0000 'C:\WINDOWS\System32\crypt32.dll'
7813d74.2dbc: supR3HardenedScreenImage/preload: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\wintrust.dll'
7823d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
7833d74.2dbc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
7843d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
7853d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9193c0000 'C:\WINDOWS\System32\crypt32.dll'
7863d74.2dbc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\advapi32.dll'
7873d74.2dbc: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000394 pwszName=\Device\HarddiskVolume3\Windows\System32\cryptnet.dll
7883d74.2dbc: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000018561f0
7893d74.2dbc: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000018561f0
7903d74.2dbc: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=09032EBC3D9D9BDDC0EE4A6463C043296B79FF20
7913d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
7923d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
7933d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9193c0000 'C:\WINDOWS\System32\crypt32.dll'
7943d74.2dbc: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.18362.356.cat'; file='\Device\HarddiskVolume3\Windows\System32\cryptnet.dll'
7953d74.2dbc: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
7963d74.2dbc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\cryptnet.dll'
7973d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
7983d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
7993d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9193c0000 'C:\WINDOWS\System32\crypt32.dll'
8003d74.2dbc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\profapi.dll'
8013d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
8023d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
8033d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9193c0000 'C:\WINDOWS\System32\crypt32.dll'
8043d74.2dbc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\gpapi.dll'
8053d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
8063d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
8073d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9193c0000 'C:\WINDOWS\System32\crypt32.dll'
8083d74.2dbc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\sechost.dll'
8093d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
8103d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
8113d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9193c0000 'C:\WINDOWS\System32\crypt32.dll'
8123d74.2dbc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\imagehlp.dll'
8133d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
8143d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
8153d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9193c0000 'C:\WINDOWS\System32\crypt32.dll'
8163d74.2dbc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\cryptbase.dll'
8173d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
8183d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
8193d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll
8203d74.2dbc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\crypt32.dll (Input=crypt32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
8213d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9193c0000 'C:\WINDOWS\System32\crypt32.dll'
8223d74.2dbc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\rsaenh.dll'
8233d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
8243d74.2dbc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
8253d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
8263d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9193c0000 'C:\WINDOWS\System32\crypt32.dll'
8273d74.2dbc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\cryptsp.dll'
8283d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
8293d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9193c0000 'C:\WINDOWS\System32\crypt32.dll'
8303d74.2dbc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll'
8313d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
8323d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9193c0000 'C:\WINDOWS\System32\crypt32.dll'
8333d74.2dbc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\bcrypt.dll'
8343d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
8353d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9193c0000 'C:\WINDOWS\System32\crypt32.dll'
8363d74.2dbc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\ucrtbase.dll'
8373d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
8383d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9193c0000 'C:\WINDOWS\System32\crypt32.dll'
8393d74.2dbc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll'
8403d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
8413d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9193c0000 'C:\WINDOWS\System32\crypt32.dll'
8423d74.2dbc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\msasn1.dll'
8433d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
8443d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9193c0000 'C:\WINDOWS\System32\crypt32.dll'
8453d74.2dbc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll'
8463d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
8473d74.2dbc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 24202) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxSupLib.dll'
8483d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
8493d74.2dbc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 24202) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe'
8503d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
8513d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9193c0000 'C:\WINDOWS\System32\crypt32.dll'
8523d74.2dbc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\KernelBase.dll'
8533d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
8543d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9193c0000 'C:\WINDOWS\System32\crypt32.dll'
8553d74.2dbc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\kernel32.dll'
8563d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9193c0000 'C:\WINDOWS\system32\crypt32.dll'
8573d74.2dbc: supR3HardenedWinIsDesiredRootCA: Adding 0xba02d0ab12c5ed00 CN=XBL Client IPsec Issuing CA
8583d74.2dbc: supR3HardenedWinIsDesiredRootCA: Adding 0x3d98ab22bb04a300 C=IE, O=Baltimore, OU=CyberTrust, CN=Baltimore CyberTrust Root
8593d74.2dbc: supR3HardenedWinIsDesiredRootCA: Adding 0x5ad46780fa5df300 DC=com, DC=microsoft, CN=Microsoft Root Certificate Authority
8603d74.2dbc: supR3HardenedWinIsDesiredRootCA: Adding 0xea5386456178582b C=ZA, ST=Western Cape, L=Durbanville, O=Thawte, OU=Thawte Certification, CN=Thawte Timestamping CA
8613d74.2dbc: supR3HardenedWinIsDesiredRootCA: Adding 0x560ad29254e89100 C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO RSA Certification Authority
8623d74.2dbc: supR3HardenedWinIsDesiredRootCA: Adding 0x3be670c1bd02a900 OU=Copyright (c) 1997 Microsoft Corp., OU=Microsoft Corporation, CN=Microsoft Root Authority
8633d74.2dbc: supR3HardenedWinIsDesiredRootCA: Adding 0xe991ee72b03db500 C=US, O=Symantec Corporation, CN=Symantec Enterprise Mobile Root for Microsoft
8643d74.2dbc: supR3HardenedWinIsDesiredRootCA: Adding 0x4d3835aa4180b200 C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Root Certificate Authority 2011
8653d74.2dbc: supR3HardenedWinIsDesiredRootCA: Adding 0x646e3fe3ba08df00 C=US, O=MSFT, CN=Microsoft Authenticode(tm) Root Authority
8663d74.2dbc: supR3HardenedWinIsDesiredRootCA: Adding 0x9546d06a8d70b800 CN=XBL Server IPsec Issuing CA
8673d74.2dbc: supR3HardenedWinIsDesiredRootCA: Adding 0xd4fbe673e5ccc600 C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert High Assurance EV Root CA
8683d74.2dbc: supR3HardenedWinIsDesiredRootCA: Adding 0xece4e4289e08b900 C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Root Certificate Authority 2010
8693d74.2dbc: supR3HardenedWinIsDesiredRootCA: Adding 0xf3bb4d7e894b420 C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft ECC TS Root Certificate Authority 2018
8703d74.2dbc: supR3HardenedWinIsDesiredRootCA: Adding 0x43a9cc371ff5385a O=Microsoft Trust Network, OU=Microsoft Corporation, OU=Microsoft Time Stamping Service Root, OU=Copyright (c) 1997 Microsoft Corp.
8713d74.2dbc: supR3HardenedWinIsDesiredRootCA: Adding 0x2e2d2c7c68f0202e O=VeriSign Trust Network, OU=VeriSign, Inc., OU=VeriSign Time Stamping Service Root, OU=NO LIABILITY ACCEPTED, (c)97 VeriSign, Inc.
8723d74.2dbc: supR3HardenedWinIsDesiredRootCA: Adding 0xcec3d46562b9be8e C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft ECC Product Root Certificate Authority 2018
8733d74.2dbc: supR3HardenedWinIsDesiredRootCA: Adding 0xca58a05dd401ae00 C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Time Stamp Root Certificate Authority 2014
8743d74.2dbc: supR3HardenedWinIsDesiredRootCA: Adding 0x61a3a33f81aace00 C=US, ST=UT, L=Salt Lake City, O=The USERTRUST Network, OU=http://www.usertrust.com, CN=UTN-USERFirst-Object
8753d74.2dbc: supR3HardenedWinIsDesiredRootCA: Adding 0x6b7bdc34cd37bb00 C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root G2
8763d74.2dbc: supR3HardenedWinIsDesiredRootCA: Adding 0x57ba5395b561bf00 C=BM, O=QuoVadis Limited, OU=Root Certification Authority, CN=QuoVadis Root Certification Authority
8773d74.2dbc: supR3HardenedWinIsDesiredRootCA: Adding 0x83085097e9afdf00 O=Digital Signature Trust Co., CN=DST Root CA X3
8783d74.2dbc: supR3HardenedWinIsDesiredRootCA: Adding 0x780679907625cc00 OU=GlobalSign Root CA - R3, O=GlobalSign, CN=GlobalSign
8793d74.2dbc: supR3HardenedWinIsDesiredRootCA: Adding 0x3d98ab22bb04a300 C=IE, O=Baltimore, OU=CyberTrust, CN=Baltimore CyberTrust Root
8803d74.2dbc: supR3HardenedWinIsDesiredRootCA: Adding 0x8ff6fc03c1edbd00 C=US, ST=Arizona, L=Scottsdale, O=Starfield Technologies, Inc., CN=Starfield Root Certificate Authority - G2
8813d74.2dbc: supR3HardenedWinIsDesiredRootCA: Adding 0xc6fa4243b695b600 C=US, O=Entrust, Inc., OU=www.entrust.net/CPS is incorporated by reference, OU=(c) 2006 Entrust, Inc., CN=Entrust Root Certification Authority
8823d74.2dbc: supR3HardenedWinIsDesiredRootCA: Adding 0xa3ce8d99e60eda00 C=BE, O=GlobalSign nv-sa, OU=Root CA, CN=GlobalSign Root CA
8833d74.2dbc: supR3HardenedWinIsDesiredRootCA: Adding 0xa671e9fec832b700 C=US, O=Starfield Technologies, Inc., OU=Starfield Class 2 Certification Authority
8843d74.2dbc: supR3HardenedWinIsDesiredRootCA: Adding 0xa8de7211e13be200 C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root CA
8853d74.2dbc: supR3HardenedWinIsDesiredRootCA: Adding 0xd45980fbf0a0ac00 C=US, O=thawte, Inc., OU=Certification Services Division, OU=(c) 2006 thawte, Inc. - For authorized use only, CN=thawte Primary Root CA
8863d74.2dbc: supR3HardenedWinIsDesiredRootCA: Adding 0xf5cd95e581a4ab00 C=US, O=SecureTrust Corporation, CN=SecureTrust CA
8873d74.2dbc: supR3HardenedWinIsDesiredRootCA: Adding 0x6f2ebe0e24cfa600 OU=GlobalSign Root CA - R2, O=GlobalSign, CN=GlobalSign
8883d74.2dbc: supR3HardenedWinIsDesiredRootCA: Adding 0x14018a1bf29e595c C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification Authority
8893d74.2dbc: supR3HardenedWinIsDesiredRootCA: Adding 0xd4fbe673e5ccc600 C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert High Assurance EV Root CA
8903d74.2dbc: supR3HardenedWinIsDesiredRootCA: Adding 0xef477acf4ab2d300 C=DE, O=D-Trust GmbH, CN=D-TRUST Root Class 3 CA 2 2009
8913d74.2dbc: supR3HardenedWinIsDesiredRootCA: Adding 0x1b8578514b74ac00 C=US, O=WFA Hotspot 2.0, CN=Hotspot 2.0 Trust Root CA - 03
8923d74.2dbc: supR3HardenedWinIsDesiredRootCA: Adding 0xb28612a94b4dad00 O=Entrust.net, OU=www.entrust.net/CPS_2048 incorp. by ref. (limits liab.), OU=(c) 1999 Entrust.net Limited, CN=Entrust.net Certification Authority (2048)
8933d74.2dbc: supR3HardenedWinIsDesiredRootCA: Adding 0x357a29080824af00 C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. - For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority - G5
8943d74.2dbc: supR3HardenedWinIsDesiredRootCA: Adding 0x59faf1086271bf00 C=US, ST=Arizona, L=Scottsdale, O=GoDaddy.com, Inc., CN=Go Daddy Root Certificate Authority - G2
8953d74.2dbc: supR3HardenedWinIsDesiredRootCA: Adding 0x3401b15e3761c700 C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2008 VeriSign, Inc. - For authorized use only, CN=VeriSign Universal Root Certification Authority
8963d74.2dbc: supR3HardenedWinIsDesiredRootCA: Adding 0xc30e361765128000 C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority
8973d74.2dbc: supR3HardenedWinIsDesiredRootCA: Adding 0x491857ead79dde00 C=US, O=The Go Daddy Group, Inc., OU=Go Daddy Class 2 Certification Authority
8983d74.2dbc: supR3HardenedWinIsDesiredRootCA: Adding 0xc2ba72a37dfbe300 C=PL, O=Unizeto Technologies S.A., OU=Certum Certification Authority, CN=Certum Trusted Network CA
8993d74.2dbc: supR3HardenedWinIsDesiredRootCA: Adding 0x8043e4ce150ead00 C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Assured ID Root CA
9003d74.2dbc: supR3HardenedWinIsDesiredRootCA: Adding 0xf2e6331af7b700 C=SE, O=AddTrust AB, OU=AddTrust External TTP Network, CN=AddTrust External CA Root
9013d74.2dbc: supR3HardenedWinRetrieveTrustedRootCAs: cAdded=44
9023d74.2dbc: SUPR3HardenedMain: Load Runtime...
9033d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
9043d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
9053d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp100.dll'.
9063d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'rpcrt4.dll'.
9073d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'ws2_32.dll'.
9083d74.2dbc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll) WinVerifyTrust
9093d74.2dbc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll
9103d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
9113d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
9123d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
9133d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9193c0000 'C:\WINDOWS\System32\crypt32.dll'
9143d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #26 'rpcrt4.dll'.
9153d74.2dbc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\ws2_32.dll) WinVerifyTrust
9163d74.2dbc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\ws2_32.dll
9173d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
9183d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
9193d74.2dbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll
9203d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
9213d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
9223d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
9233d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
9243d74.2dbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll
9253d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
9263d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
9273d74.2dbc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll) WinVerifyTrust
9283d74.2dbc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll
9293d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
9303d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
9313d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
9323d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
9333d74.2dbc: Detected WinVerifyTrust recursion: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
9343d74.2dbc: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll)
9353d74.2dbc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll
9363d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
9373d74.2dbc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll) WinVerifyTrust
9383d74.2dbc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000a01:<flags> [calling]
9393d74.2dbc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll
9403d74.2dbc: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [avoiding WinVerifyTrust]
9413d74.2dbc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll
9423d74.2dbc: supR3HardenedDllNotificationCallback: load 0000000065db0000 LB 0x000d2000 C:\Program Files\Oracle\VirtualBox\MSVCR100.dll [fFlags=0x0]
9433d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [avoiding WinVerifyTrust]
9443d74.2dbc: supR3HardenedDllNotificationCallback: load 0000000065d10000 LB 0x00098000 C:\Program Files\Oracle\VirtualBox\MSVCP100.dll [fFlags=0x0]
9453d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll
9463d74.2dbc: supR3HardenedDllNotificationCallback: load 00007ff91b560000 LB 0x0006f000 C:\WINDOWS\System32\WS2_32.dll [fFlags=0x0]
9473d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ws2_32.dll
9483d74.2dbc: supR3HardenedDllNotificationCallback: load 00007ff8ae950000 LB 0x005e0000 C:\Program Files\Oracle\VirtualBox\VBoxRT.dll [fFlags=0x0]
9493d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll
9503d74.2dbc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'.
9513d74.2dbc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
9523d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll
9533d74.2dbc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
9543d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8ae950000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9553d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll
9563d74.2dbc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
9573d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8ae950000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9583d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll
9593d74.2dbc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
9603d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8ae950000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9613d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll
9623d74.2dbc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
9633d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8ae950000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9643d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll
9653d74.2dbc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
9663d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8ae950000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9673d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll
9683d74.2dbc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
9693d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8ae950000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9703d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8ae950000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9713d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8ae950000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9723d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8ae950000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9733d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8ae950000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9743d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8ae950000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9753d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8ae950000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9763d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8ae950000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9773d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll
9783d74.2dbc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
9793d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8ae950000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9803d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8ae950000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9813d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8ae950000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9823d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8ae950000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9833d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8ae950000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9843d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8ae950000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9853d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8ae950000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9863d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8ae950000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9873d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8ae950000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9883d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8ae950000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9893d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8ae950000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9903d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8ae950000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9913d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8ae950000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9923d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8ae950000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9933d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8ae950000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9943d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8ae950000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9953d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxRT.dll
9963d74.2dbc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
9973d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8ae950000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9983d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8ae950000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
9993d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8ae950000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10003d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8ae950000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10013d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wintrust.dll
10023d74.2dbc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\Wintrust.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
10033d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9185b0000 'C:\WINDOWS\system32\Wintrust.dll'
10043d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
10053d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9193c0000 'C:\WINDOWS\System32\crypt32.dll'
10063d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
10073d74.2dbc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
10083d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
10093d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9193c0000 'C:\WINDOWS\System32\crypt32.dll'
10103d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9193c0000 'C:\WINDOWS\system32\crypt32.dll'
10113d74.2dbc: SUPR3HardenedMain: Load TrustedMain...
10123d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
10133d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'opengl32.dll'.
10143d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxglobal.dll'.
10153d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxrt.dll'.
10163d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'msvcp100.dll'.
10173d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'msvcr100.dll'.
10183d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'qt5corevbox.dll'.
10193d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'qt5guivbox.dll'.
10203d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'qt5widgetsvbox.dll'.
10213d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'qt5openglvbox.dll'.
10223d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'user32.dll'.
10233d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'ole32.dll'.
10243d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'oleaut32.dll'.
10253d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #13 'winmm.dll'.
10263d74.2dbc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll) WinVerifyTrust
10273d74.2dbc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll
10283d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
10293d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume3\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008]
10303d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
10313d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9193c0000 'C:\WINDOWS\System32\crypt32.dll'
10323d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'winmmbase.dll'.
10333d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'msvcrt.dll'.
10343d74.2dbc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\winmm.dll) WinVerifyTrust
10353d74.2dbc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\winmm.dll
10363d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
10373d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
10383d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
10393d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
10403d74.2dbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll
10413d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmmbase.dll'...
10423d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmmbase.dll' -> '\Device\HarddiskVolume3\Windows\System32\winmmbase.dll' [rcNtRedir=0xc0150008]
10433d74.2dbc: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\winmmbase.dll'.
10443d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
10453d74.2dbc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\winmmbase.dll)
10463d74.2dbc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\winmmbase.dll
10473d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
10483d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
10493d74.2dbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll
10503d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
10513d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll
10523d74.2dbc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\crypt32.dll (Input=crypt32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
10533d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9193c0000 'C:\WINDOWS\System32\crypt32.dll'
10543d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcp_win.dll'.
10553d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'combase.dll'.
10563d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #23 'rpcrt4.dll'.
10573d74.2dbc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\oleaut32.dll) WinVerifyTrust
10583d74.2dbc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\oleaut32.dll
10593d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
10603d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
10613d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
10623d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
10633d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
10643d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
10653d74.2dbc: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\combase.dll'.
10663d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'rpcrt4.dll'.
10673d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #46 'bcryptprimitives.dll'.
10683d74.2dbc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\combase.dll)
10693d74.2dbc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\combase.dll
10703d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
10713d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
10723d74.2dbc: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll'.
10733d74.2dbc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll)
10743d74.2dbc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll
10753d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcryptprimitives.dll'...
10763d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcryptprimitives.dll' -> '\Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll' [rcNtRedir=0xc0150008]
10773d74.2dbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll
10783d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
10793d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
10803d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
10813d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9193c0000 'C:\WINDOWS\System32\crypt32.dll'
10823d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #22 'rpcrt4.dll'.
10833d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #56 'gdi32.dll'.
10843d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #57 'user32.dll'.
10853d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #58 'combase.dll'.
10863d74.2dbc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\ole32.dll) WinVerifyTrust
10873d74.2dbc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\ole32.dll
10883d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
10893d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
10903d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
10913d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
10923d74.2dbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\combase.dll [lacks WinVerifyTrust]
10933d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
10943d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
10953d74.2dbc: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\user32.dll'.
10963d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'win32u.dll'.
10973d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #34 'gdi32.dll'.
10983d74.2dbc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\user32.dll)
10993d74.2dbc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\user32.dll
11003d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
11013d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
11023d74.2dbc: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\gdi32.dll'.
11033d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'win32u.dll'.
11043d74.2dbc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\gdi32.dll)
11053d74.2dbc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\gdi32.dll
11063d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
11073d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
11083d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
11093d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
11103d74.2dbc: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\win32u.dll'.
11113d74.2dbc: '\Device\HarddiskVolume3\Windows\System32\win32u.dll' has no imports
11123d74.2dbc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\win32u.dll)
11133d74.2dbc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\win32u.dll
11143d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
11153d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
11163d74.2dbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
11173d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
11183d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
11193d74.2dbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\win32u.dll [lacks WinVerifyTrust]
11203d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
11213d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9193c0000 'C:\WINDOWS\System32\crypt32.dll'
11223d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'win32u.dll'.
11233d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #34 'gdi32.dll'.
11243d74.2dbc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\user32.dll) WinVerifyTrust
11253d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5openglvbox.dll'...
11263d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5openglvbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5openglvbox.dll' [rcNtRedir=0xc0150008]
11273d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
11283d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
11293d74.2dbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
11303d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
11313d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
11323d74.2dbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\win32u.dll [lacks WinVerifyTrust]
11333d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
11343d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'qt5widgetsvbox.dll'.
11353d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'qt5guivbox.dll'.
11363d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5corevbox.dll'.
11373d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'msvcr100.dll'.
11383d74.2dbc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll) WinVerifyTrust
11393d74.2dbc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll
11403d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5widgetsvbox.dll'...
11413d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5widgetsvbox.dll' [rcNtRedir=0xc0150008]
11423d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
11433d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
11443d74.2dbc: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
11453d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
11463d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
11473d74.2dbc: Detected WinVerifyTrust recursion: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll'.
11483d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'.
11493d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'shell32.dll'.
11503d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'ole32.dll'.
11513d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'advapi32.dll'.
11523d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'ws2_32.dll'.
11533d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'mpr.dll'.
11543d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'msvcp100.dll'.
11553d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'msvcr100.dll'.
11563d74.2dbc: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll)
11573d74.2dbc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll
11583d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
11593d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
11603d74.2dbc: Detected WinVerifyTrust recursion: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll'.
11613d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'ole32.dll'.
11623d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'opengl32.dll'.
11633d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'gdi32.dll'.
11643d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
11653d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'qt5corevbox.dll'.
11663d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'msvcp100.dll'.
11673d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msvcr100.dll'.
11683d74.2dbc: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll)
11693d74.2dbc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll
11703d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5widgetsvbox.dll'...
11713d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5widgetsvbox.dll' [rcNtRedir=0xc0150008]
11723d74.2dbc: Detected WinVerifyTrust recursion: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'.
11733d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'gdi32.dll'.
11743d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'.
11753d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5guivbox.dll'.
11763d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'qt5corevbox.dll'.
11773d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'shell32.dll'.
11783d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'msvcp100.dll'.
11793d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msvcr100.dll'.
11803d74.2dbc: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll)
11813d74.2dbc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll
11823d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
11833d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
11843d74.2dbc: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
11853d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
11863d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
11873d74.2dbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll
11883d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
11893d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume3\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
11903d74.2dbc: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\shell32.dll'.
11913d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #77 'user32.dll'.
11923d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #79 'gdi32.dll'.
11933d74.2dbc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\shell32.dll)
11943d74.2dbc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\shell32.dll
11953d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
11963d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
11973d74.2dbc: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
11983d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
11993d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
12003d74.2dbc: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
12013d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
12023d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
12033d74.2dbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
12043d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
12053d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
12063d74.2dbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
12073d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
12083d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
12093d74.2dbc: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
12103d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
12113d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
12123d74.2dbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll
12133d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
12143d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
12153d74.2dbc: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
12163d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
12173d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
12183d74.2dbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
12193d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
12203d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
12213d74.2dbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
12223d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
12233d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume3\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008]
12243d74.2dbc: Detected WinVerifyTrust recursion: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume3\Windows\System32\opengl32.dll'.
12253d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
12263d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'advapi32.dll'.
12273d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
12283d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'gdi32.dll'.
12293d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'glu32.dll'.
12303d74.2dbc: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\opengl32.dll)
12313d74.2dbc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\opengl32.dll
12323d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
12333d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
12343d74.2dbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ole32.dll
12353d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
12363d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
12373d74.2dbc: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
12383d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
12393d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
12403d74.2dbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll
12413d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mpr.dll'...
12423d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'mpr.dll' -> '\Device\HarddiskVolume3\Windows\System32\mpr.dll' [rcNtRedir=0xc0150008]
12433d74.2dbc: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\mpr.dll'.
12443d74.2dbc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\mpr.dll)
12453d74.2dbc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\mpr.dll
12463d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
12473d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
12483d74.2dbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ws2_32.dll
12493d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
12503d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
12513d74.2dbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll
12523d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
12533d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
12543d74.2dbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ole32.dll
12553d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
12563d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume3\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
12573d74.2dbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll [lacks WinVerifyTrust]
12583d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
12593d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
12603d74.2dbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
12613d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'glu32.dll'...
12623d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'glu32.dll' -> '\Device\HarddiskVolume3\Windows\System32\glu32.dll' [rcNtRedir=0xc0150008]
12633d74.2dbc: Detected WinVerifyTrust recursion: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume3\Windows\System32\glu32.dll'.
12643d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
12653d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'user32.dll'.
12663d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'opengl32.dll'.
12673d74.2dbc: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\glu32.dll)
12683d74.2dbc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\glu32.dll
12693d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
12703d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
12713d74.2dbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
12723d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
12733d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
12743d74.2dbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
12753d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
12763d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
12773d74.2dbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll
12783d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
12793d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
12803d74.2dbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll
12813d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
12823d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
12833d74.2dbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
12843d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
12853d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
12863d74.2dbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
12873d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
12883d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume3\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008]
12893d74.2dbc: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\opengl32.dll [lacks WinVerifyTrust]
12903d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
12913d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
12923d74.2dbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
12933d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
12943d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
12953d74.2dbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll
12963d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
12973d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'gdi32.dll'.
12983d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'.
12993d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5guivbox.dll'.
13003d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'qt5corevbox.dll'.
13013d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'shell32.dll'.
13023d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'msvcp100.dll'.
13033d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msvcr100.dll'.
13043d74.2dbc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll) WinVerifyTrust
13053d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
13063d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
13073d74.2dbc: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [redoing WinVerifyTrust]
13083d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
13093d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
13103d74.2dbc: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [lacks WinVerifyTrust]
13113d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
13123d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
13133d74.2dbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll
13143d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
13153d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume3\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
13163d74.2dbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll [lacks WinVerifyTrust]
13173d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
13183d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
13193d74.2dbc: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
13203d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
13213d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
13223d74.2dbc: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
13233d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
13243d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
13253d74.2dbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
13263d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
13273d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
13283d74.2dbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
13293d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
13303d74.2dbc: supR3HardenedScreenImage/Imports: 0 (was 24202) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll'
13313d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
13323d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
13333d74.2dbc: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [redoing WinVerifyTrust]
13343d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
13353d74.2dbc: supR3HardenedScreenImage/Imports: 0 (was 24202) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll'
13363d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
13373d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
13383d74.2dbc: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll [redoing WinVerifyTrust]
13393d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
13403d74.2dbc: supR3HardenedScreenImage/Imports: 0 (was 24202) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll'
13413d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
13423d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
13433d74.2dbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll
13443d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
13453d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
13463d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxglobal.dll'...
13473d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxglobal.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxglobal.dll' [rcNtRedir=0xc0150008]
13483d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
13493d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'vboxrt.dll'.
13503d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcr100.dll'.
13513d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5corevbox.dll'.
13523d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'qt5guivbox.dll'.
13533d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'qt5widgetsvbox.dll'.
13543d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'user32.dll'.
13553d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'advapi32.dll'.
13563d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'ole32.dll'.
13573d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'oleaut32.dll'.
13583d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'rpcrt4.dll'.
13593d74.2dbc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxGlobal.dll) WinVerifyTrust
13603d74.2dbc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxGlobal.dll
13613d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
13623d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume3\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008]
13633d74.2dbc: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\opengl32.dll [redoing WinVerifyTrust]
13643d74.2dbc: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000000000004b0 pwszName=\Device\HarddiskVolume3\Windows\System32\opengl32.dll
13653d74.2dbc: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000018561f0
13663d74.2dbc: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000018561f0
13673d74.2dbc: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=D96AC08A370555DBA383B5B229B9D92AB1322E57
13683d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
13693d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
13703d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
13713d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
13723d74.2dbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll
13733d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
13743d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
13753d74.2dbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ole32.dll
13763d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
13773d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
13783d74.2dbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll
13793d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
13803d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
13813d74.2dbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [lacks WinVerifyTrust]
13823d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5widgetsvbox.dll'...
13833d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5widgetsvbox.dll' [rcNtRedir=0xc0150008]
13843d74.2dbc: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [lacks WinVerifyTrust]
13853d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
13863d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
13873d74.2dbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll
13883d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
13893d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
13903d74.2dbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll
13913d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
13923d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
13933d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
13943d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
13953d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
13963d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9193c0000 'C:\WINDOWS\System32\crypt32.dll'
13973d74.2dbc: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0212~31bf3856ad364e35~amd64~~10.0.18362.329.cat'; file='\Device\HarddiskVolume3\Windows\System32\opengl32.dll'
13983d74.2dbc: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
13993d74.2dbc: supR3HardenedScreenImage/Imports: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\opengl32.dll'
14003d74.2dbc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000a01:<flags> [calling]
14013d74.2dbc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll
14023d74.2dbc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\opengl32.dll
14033d74.2dbc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxGlobal.dll
14043d74.2dbc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll
14053d74.2dbc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll
14063d74.2dbc: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [avoiding WinVerifyTrust]
14073d74.2dbc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll
14083d74.2dbc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmm.dll
14093d74.2dbc: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\glu32.dll [avoiding WinVerifyTrust]
14103d74.2dbc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\mpr.dll [avoiding WinVerifyTrust]
14113d74.2dbc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmmbase.dll [avoiding WinVerifyTrust]
14123d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcp_win.dll'.
14133d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #22 'win32u.dll'.
14143d74.2dbc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\DXCore.dll)
14153d74.2dbc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\DXCore.dll
14163d74.2dbc: supR3HardenedDllNotificationCallback: load 00007ff918f40000 LB 0x00021000 C:\WINDOWS\System32\win32u.dll [fFlags=0x0]
14173d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\win32u.dll [avoiding WinVerifyTrust]
14183d74.2dbc: supR3HardenedDllNotificationCallback: load 00007ff919510000 LB 0x0009e000 C:\WINDOWS\System32\msvcp_win.dll [fFlags=0x0]
14193d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll [avoiding WinVerifyTrust]
14203d74.2dbc: supR3HardenedDllNotificationCallback: load 00007ff919220000 LB 0x00194000 C:\WINDOWS\System32\gdi32full.dll [fFlags=0x0]
14213d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcp_win.dll'.
14223d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #33 'gdi32.dll'.
14233d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #35 'user32.dll'.
14243d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #36 'win32u.dll'.
14253d74.2dbc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\gdi32full.dll)
14263d74.2dbc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\gdi32full.dll
14273d74.2dbc: supR3HardenedDllNotificationCallback: load 00007ff91b530000 LB 0x00026000 C:\WINDOWS\System32\GDI32.dll [fFlags=0x0]
14283d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [avoiding WinVerifyTrust]
14293d74.2dbc: supR3HardenedDllNotificationCallback: load 00007ff91b390000 LB 0x00193000 C:\WINDOWS\System32\USER32.dll [fFlags=0x0]
14303d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [avoiding WinVerifyTrust]
14313d74.2dbc: supR3HardenedDllNotificationCallback: load 00007ff91a480000 LB 0x00336000 C:\WINDOWS\System32\combase.dll [fFlags=0x0]
14323d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\combase.dll [avoiding WinVerifyTrust]
14333d74.2dbc: supR3HardenedDllNotificationCallback: load 00007ff9195b0000 LB 0x0004a000 C:\WINDOWS\System32\cfgmgr32.dll [fFlags=0x0]
14343d74.2dbc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll)
14353d74.2dbc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll
14363d74.2dbc: supR3HardenedDllNotificationCallback: load 00007ff917160000 LB 0x00020000 C:\WINDOWS\SYSTEM32\dxcore.dll [fFlags=0x0]
14373d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\DXCore.dll [avoiding WinVerifyTrust]
14383d74.2dbc: supR3HardenedDllNotificationCallback: load 00007ff8e3a80000 LB 0x0002c000 C:\WINDOWS\SYSTEM32\GLU32.dll [fFlags=0x0]
14393d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\glu32.dll [avoiding WinVerifyTrust]
14403d74.2dbc: supR3HardenedDllNotificationCallback: load 00007ff8e2e60000 LB 0x00156000 C:\WINDOWS\SYSTEM32\OPENGL32.dll [fFlags=0x0]
14413d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\opengl32.dll
14423d74.2dbc: supR3HardenedDllNotificationCallback: load 00007ff91b190000 LB 0x000a9000 C:\WINDOWS\System32\shcore.dll [fFlags=0x0]
14433d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
14443d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #36 'rpcrt4.dll'.
14453d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #43 'combase.dll'.
14463d74.2dbc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\SHCore.dll)
14473d74.2dbc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\SHCore.dll
14483d74.2dbc: supR3HardenedDllNotificationCallback: load 00007ff9184f0000 LB 0x00010000 C:\WINDOWS\System32\UMPDC.dll [fFlags=0x0]
14493d74.2dbc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\umpdc.dll)
14503d74.2dbc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\umpdc.dll
14513d74.2dbc: supR3HardenedDllNotificationCallback: load 00007ff918540000 LB 0x0004a000 C:\WINDOWS\System32\powrprof.dll [fFlags=0x0]
14523d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'rpcrt4.dll'.
14533d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #19 'umpdc.dll'.
14543d74.2dbc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\powrprof.dll)
14553d74.2dbc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\powrprof.dll
14563d74.2dbc: supR3HardenedDllNotificationCallback: load 00007ff91a930000 LB 0x00052000 C:\WINDOWS\System32\shlwapi.dll [fFlags=0x0]
14573d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcrt.dll'.
14583d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #44 'gdi32.dll'.
14593d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #45 'user32.dll'.
14603d74.2dbc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\shlwapi.dll)
14613d74.2dbc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\shlwapi.dll
14623d74.2dbc: supR3HardenedDllNotificationCallback: load 00007ff918500000 LB 0x00011000 C:\WINDOWS\System32\kernel.appcore.dll [fFlags=0x0]
14633d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'msvcrt.dll'.
14643d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'rpcrt4.dll'.
14653d74.2dbc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll)
14663d74.2dbc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll
14673d74.2dbc: supR3HardenedDllNotificationCallback: load 00007ff9187c0000 LB 0x0077e000 C:\WINDOWS\System32\windows.storage.dll [fFlags=0x0]
14683d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #31 'combase.dll'.
14693d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #32 'msvcp_win.dll'.
14703d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #39 'rpcrt4.dll'.
14713d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #56 'profapi.dll'.
14723d74.2dbc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\windows.storage.dll)
14733d74.2dbc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\windows.storage.dll
14743d74.2dbc: supR3HardenedDllNotificationCallback: load 00007ff9196d0000 LB 0x006e5000 C:\WINDOWS\System32\SHELL32.dll [fFlags=0x0]
14753d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll [avoiding WinVerifyTrust]
14763d74.2dbc: supR3HardenedDllNotificationCallback: load 00007ff91ad90000 LB 0x00156000 C:\WINDOWS\System32\ole32.dll [fFlags=0x0]
14773d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ole32.dll
14783d74.2dbc: supR3HardenedDllNotificationCallback: load 00007ff905800000 LB 0x0001b000 C:\WINDOWS\SYSTEM32\MPR.dll [fFlags=0x0]
14793d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\mpr.dll [avoiding WinVerifyTrust]
14803d74.2dbc: supR3HardenedDllNotificationCallback: load 0000000064980000 LB 0x00565000 C:\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [fFlags=0x0]
14813d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll
14823d74.2dbc: supR3HardenedDllNotificationCallback: load 00007ff8ae350000 LB 0x005f7000 C:\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [fFlags=0x0]
14833d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll
14843d74.2dbc: supR3HardenedDllNotificationCallback: load 0000000064410000 LB 0x00561000 C:\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [fFlags=0x0]
14853d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [avoiding WinVerifyTrust]
14863d74.2dbc: supR3HardenedDllNotificationCallback: load 00007ff91af10000 LB 0x000c4000 C:\WINDOWS\System32\OLEAUT32.dll [fFlags=0x0]
14873d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll
14883d74.2dbc: supR3HardenedDllNotificationCallback: load 00007ff8aef30000 LB 0x02387000 C:\Program Files\Oracle\VirtualBox\VBoxGlobal.dll [fFlags=0x0]
14893d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxGlobal.dll
14903d74.2dbc: supR3HardenedDllNotificationCallback: load 00000000643b0000 LB 0x00054000 C:\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll [fFlags=0x0]
14913d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll
14923d74.2dbc: supR3HardenedDllNotificationCallback: load 00007ff915dd0000 LB 0x0002d000 C:\WINDOWS\SYSTEM32\WINMMBASE.dll [fFlags=0x0]
14933d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmmbase.dll [avoiding WinVerifyTrust]
14943d74.2dbc: supR3HardenedDllNotificationCallback: load 00007ff915e00000 LB 0x00024000 C:\WINDOWS\SYSTEM32\WINMM.dll [fFlags=0x0]
14953d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmm.dll
14963d74.2dbc: supR3HardenedDllNotificationCallback: load 00007ff8ad630000 LB 0x00188000 C:\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll [fFlags=0x0]
14973d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll
14983d74.2dbc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\windows.storage.dll'.
14993d74.2dbc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\windows.storage.dll' [rescheduled]
15003d74.2dbc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll'.
15013d74.2dbc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\kernel.appcore.dll' [rescheduled]
15023d74.2dbc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\shlwapi.dll'.
15033d74.2dbc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\shlwapi.dll' [rescheduled]
15043d74.2dbc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\powrprof.dll'.
15053d74.2dbc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\powrprof.dll' [rescheduled]
15063d74.2dbc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\umpdc.dll'.
15073d74.2dbc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\umpdc.dll' [rescheduled]
15083d74.2dbc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\SHCore.dll'.
15093d74.2dbc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\SHCore.dll' [rescheduled]
15103d74.2dbc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll'.
15113d74.2dbc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll' [rescheduled]
15123d74.2dbc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\gdi32full.dll'.
15133d74.2dbc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\gdi32full.dll' [rescheduled]
15143d74.2dbc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\DXCore.dll'.
15153d74.2dbc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\DXCore.dll' [rescheduled]
15163d74.2dbc: Detected loader lock ownership: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume3\Windows\System32\glu32.dll'.
15173d74.2dbc: supR3HardenedWinVerifyCacheProcessWvtTodos: 22900 (was 22900) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\glu32.dll' [rescheduled]
15183d74.2dbc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\mpr.dll'.
15193d74.2dbc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\mpr.dll' [rescheduled]
15203d74.2dbc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\shell32.dll'.
15213d74.2dbc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\shell32.dll' [rescheduled]
15223d74.2dbc: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'.
15233d74.2dbc: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll' [rescheduled]
15243d74.2dbc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\win32u.dll'.
15253d74.2dbc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rescheduled]
15263d74.2dbc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\gdi32.dll'.
15273d74.2dbc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rescheduled]
15283d74.2dbc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\user32.dll'.
15293d74.2dbc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rescheduled]
15303d74.2dbc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll'.
15313d74.2dbc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rescheduled]
15323d74.2dbc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\combase.dll'.
15333d74.2dbc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rescheduled]
15343d74.2dbc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\winmmbase.dll'.
15353d74.2dbc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\winmmbase.dll' [rescheduled]
15363d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\kernel32.dll
15373d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'profapi.dll'...
15383d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'profapi.dll' -> '\Device\HarddiskVolume3\Windows\System32\profapi.dll' [rcNtRedir=0xc0150008]
15393d74.2dbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\profapi.dll
15403d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
15413d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
15423d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
15433d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
15443d74.2dbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll [redoing WinVerifyTrust]
15453d74.2dbc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll'.
15463d74.2dbc: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll
15473d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
15483d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
15493d74.2dbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\combase.dll [redoing WinVerifyTrust]
15503d74.2dbc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\combase.dll'.
15513d74.2dbc: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume3\Windows\System32\combase.dll
15523d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
15533d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
15543d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
15553d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
15563d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
15573d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
15583d74.2dbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [redoing WinVerifyTrust]
15593d74.2dbc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\user32.dll'.
15603d74.2dbc: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume3\Windows\System32\user32.dll
15613d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
15623d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
15633d74.2dbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [redoing WinVerifyTrust]
15643d74.2dbc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\gdi32.dll'.
15653d74.2dbc: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume3\Windows\System32\gdi32.dll
15663d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
15673d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
15683d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'umpdc.dll'...
15693d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'umpdc.dll' -> '\Device\HarddiskVolume3\Windows\System32\umpdc.dll' [rcNtRedir=0xc0150008]
15703d74.2dbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\umpdc.dll [redoing WinVerifyTrust]
15713d74.2dbc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\umpdc.dll'.
15723d74.2dbc: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume3\Windows\System32\umpdc.dll
15733d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
15743d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
15753d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
15763d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
15773d74.2dbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\combase.dll [redoing WinVerifyTrust]
15783d74.2dbc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\combase.dll'.
15793d74.2dbc: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume3\Windows\System32\combase.dll
15803d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
15813d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
15823d74.2dbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll
15833d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
15843d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
15853d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
15863d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
15873d74.2dbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\win32u.dll [redoing WinVerifyTrust]
15883d74.2dbc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\win32u.dll'.
15893d74.2dbc: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume3\Windows\System32\win32u.dll
15903d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
15913d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
15923d74.2dbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [redoing WinVerifyTrust]
15933d74.2dbc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\user32.dll'.
15943d74.2dbc: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume3\Windows\System32\user32.dll
15953d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
15963d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
15973d74.2dbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [redoing WinVerifyTrust]
15983d74.2dbc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\gdi32.dll'.
15993d74.2dbc: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume3\Windows\System32\gdi32.dll
16003d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
16013d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
16023d74.2dbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll [redoing WinVerifyTrust]
16033d74.2dbc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll'.
16043d74.2dbc: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll
16053d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
16063d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
16073d74.2dbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\win32u.dll [redoing WinVerifyTrust]
16083d74.2dbc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\win32u.dll'.
16093d74.2dbc: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume3\Windows\System32\win32u.dll
16103d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
16113d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
16123d74.2dbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll [redoing WinVerifyTrust]
16133d74.2dbc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll'.
16143d74.2dbc: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll
16153d74.2dbc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\kernel32.dll (Input=kernel32, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
16163d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff91a9a0000 'C:\WINDOWS\System32\kernel32.dll'
16173d74.2dbc: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-string-l1-1-0) -> 0x0, fPresent=1
16183d74.2dbc: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-string-l1-1-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
16193d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff918f70000 'api-ms-win-core-string-l1-1-0'
16203d74.2dbc: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-datetime-l1-1-1) -> 0x0, fPresent=1
16213d74.2dbc: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-datetime-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
16223d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff918f70000 'api-ms-win-core-datetime-l1-1-1'
16233d74.2dbc: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-localization-obsolete-l1-2-0) -> 0x0, fPresent=1
16243d74.2dbc: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-obsolete-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
16253d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff918f70000 'api-ms-win-core-localization-obsolete-l1-2-0'
16263d74.2dbc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\imm32.dll'.
16273d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'user32.dll'.
16283d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #25 'win32u.dll'.
16293d74.2dbc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\imm32.dll)
16303d74.2dbc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\imm32.dll
16313d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
16323d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
16333d74.2dbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\win32u.dll [redoing WinVerifyTrust]
16343d74.2dbc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\win32u.dll'.
16353d74.2dbc: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume3\Windows\System32\win32u.dll
16363d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
16373d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
16383d74.2dbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [redoing WinVerifyTrust]
16393d74.2dbc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\user32.dll'.
16403d74.2dbc: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume3\Windows\System32\user32.dll
16413d74.2dbc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\IMM32.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
16423d74.2dbc: supR3HardenedDllNotificationCallback: load 00007ff91aa70000 LB 0x0002e000 C:\WINDOWS\System32\IMM32.DLL [fFlags=0x0]
16433d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\imm32.dll [avoiding WinVerifyTrust]
16443d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff91aa70000 'C:\WINDOWS\system32\IMM32.DLL'
16453d74.2dbc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\imm32.dll'.
16463d74.2dbc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\imm32.dll' [rescheduled]
16473d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll
16483d74.2dbc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\ADVAPI32.DLL (Input=ADVAPI32.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
16493d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff91ac80000 'C:\WINDOWS\System32\ADVAPI32.DLL'
16503d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8ad630000 'C:\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll'
16513d74.2dbc: SUPR3HardenedMain: Calling TrustedMain (00007ff8ad6316c0)...
16523d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
16533d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'gdi32.dll'.
16543d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'ole32.dll'.
16553d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'user32.dll'.
16563d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'imm32.dll'.
16573d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'winmm.dll'.
16583d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'oleaut32.dll'.
16593d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'shell32.dll'.
16603d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'advapi32.dll'.
16613d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'qt5guivbox.dll'.
16623d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'qt5corevbox.dll'.
16633d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'msvcr100.dll'.
16643d74.2dbc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\platforms\qwindows.dll) WinVerifyTrust
16653d74.2dbc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\platforms\qwindows.dll
16663d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
16673d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
16683d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
16693d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
16703d74.2dbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll
16713d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
16723d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
16733d74.2dbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll
16743d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
16753d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
16763d74.2dbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll
16773d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
16783d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume3\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
16793d74.2dbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll [redoing WinVerifyTrust]
16803d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
16813d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9193c0000 'C:\WINDOWS\System32\crypt32.dll'
16823d74.2dbc: supR3HardenedScreenImage/Imports: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\shell32.dll'
16833d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
16843d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
16853d74.2dbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll
16863d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
16873d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume3\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008]
16883d74.2dbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmm.dll
16893d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'imm32.dll'...
16903d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'imm32.dll' -> '\Device\HarddiskVolume3\Windows\System32\imm32.dll' [rcNtRedir=0xc0150008]
16913d74.2dbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\imm32.dll [redoing WinVerifyTrust]
16923d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
16933d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9193c0000 'C:\WINDOWS\System32\crypt32.dll'
16943d74.2dbc: supR3HardenedScreenImage/Imports: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\imm32.dll'
16953d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
16963d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
16973d74.2dbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll [redoing WinVerifyTrust]
16983d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
16993d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9193c0000 'C:\WINDOWS\System32\crypt32.dll'
17003d74.2dbc: supR3HardenedScreenImage/Imports: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\user32.dll'
17013d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
17023d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
17033d74.2dbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ole32.dll
17043d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
17053d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
17063d74.2dbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll [redoing WinVerifyTrust]
17073d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
17083d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9193c0000 'C:\WINDOWS\System32\crypt32.dll'
17093d74.2dbc: supR3HardenedScreenImage/Imports: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\gdi32.dll'
17103d74.2dbc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\platforms\qwindows.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
17113d74.2dbc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\platforms\qwindows.dll
17123d74.2dbc: supR3HardenedDllNotificationCallback: load 00007ff8d3460000 LB 0x0012e000 C:\Program Files\Oracle\VirtualBox\platforms\qwindows.dll [fFlags=0x0]
17133d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\platforms\qwindows.dll
17143d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8d3460000 'C:\Program Files\Oracle\VirtualBox\platforms\qwindows.dll'
17153d74.2dbc: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000698 pwszName=\Device\HarddiskVolume3\Windows\System32\uxtheme.dll
17163d74.2dbc: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000018561f0
17173d74.2dbc: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000018561f0
17183d74.2dbc: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=71A0B41C2A2D97E6C17677503DBE8A9A21901872
17193d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
17203d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9193c0000 'C:\WINDOWS\System32\crypt32.dll'
17213d74.2dbc: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.18362.356.cat'; file='\Device\HarddiskVolume3\Windows\System32\uxtheme.dll'
17223d74.2dbc: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
17233d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
17243d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #33 'gdi32.dll'.
17253d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #34 'user32.dll'.
17263d74.2dbc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\uxtheme.dll) WinVerifyTrust
17273d74.2dbc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\uxtheme.dll
17283d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
17293d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
17303d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
17313d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
17323d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
17333d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
17343d74.2dbc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\uxtheme.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
17353d74.2dbc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\uxtheme.dll
17363d74.2dbc: supR3HardenedDllNotificationCallback: load 00007ff9161d0000 LB 0x00099000 C:\WINDOWS\system32\uxtheme.dll [fFlags=0x0]
17373d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\uxtheme.dll
17383d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9161d0000 'C:\WINDOWS\system32\uxtheme.dll'
17393d74.2dbc: \Device\HarddiskVolume3\ProgramData\A-Volute\A-Volute.SonicStudio3\Modules\ScheduledModules\x64\A-Volute.SonicStudio3DevProps2.dll: Owner is administrators group.
17403d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
17413d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9193c0000 'C:\WINDOWS\System32\crypt32.dll'
17423d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'.
17433d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'advapi32.dll'.
17443d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'ole32.dll'.
17453d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'ws2_32.dll'.
17463d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'shell32.dll'.
17473d74.2dbc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\ProgramData\A-Volute\A-Volute.SonicStudio3\Modules\ScheduledModules\x64\A-Volute.SonicStudio3DevProps2.dll) WinVerifyTrust
17483d74.2dbc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\ProgramData\A-Volute\A-Volute.SonicStudio3\Modules\ScheduledModules\x64\A-Volute.SonicStudio3DevProps2.dll
17493d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
17503d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume3\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
17513d74.2dbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
17523d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
17533d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
17543d74.2dbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ws2_32.dll
17553d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
17563d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
17573d74.2dbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ole32.dll
17583d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
17593d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
17603d74.2dbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll
17613d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
17623d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
17633d74.2dbc: supR3HardenedMonitor_LdrLoadDll: pName=C:\ProgramData\A-Volute\A-Volute.SonicStudio3\Modules\ScheduledModules\x64\A-Volute.SonicStudio3DevProps2.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
17643d74.2dbc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\ProgramData\A-Volute\A-Volute.SonicStudio3\Modules\ScheduledModules\x64\A-Volute.SonicStudio3DevProps2.dll
17653d74.2dbc: supR3HardenedDllNotificationCallback: load 00007ff8ced00000 LB 0x000f8000 C:\ProgramData\A-Volute\A-Volute.SonicStudio3\Modules\ScheduledModules\x64\A-Volute.SonicStudio3DevProps2.dll [fFlags=0x0]
17663d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\ProgramData\A-Volute\A-Volute.SonicStudio3\Modules\ScheduledModules\x64\A-Volute.SonicStudio3DevProps2.dll
17673d74.2dbc: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-synch-l1-2-0) -> 0x0, fPresent=1
17683d74.2dbc: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-synch-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
17693d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff918f70000 'api-ms-win-core-synch-l1-2-0'
17703d74.2dbc: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-fibers-l1-1-1) -> 0x0, fPresent=1
17713d74.2dbc: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-fibers-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
17723d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff918f70000 'api-ms-win-core-fibers-l1-1-1'
17733d74.2dbc: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-synch-l1-2-0) -> 0x0, fPresent=1
17743d74.2dbc: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-synch-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
17753d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff918f70000 'api-ms-win-core-synch-l1-2-0'
17763d74.2dbc: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-fibers-l1-1-1) -> 0x0, fPresent=1
17773d74.2dbc: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-fibers-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
17783d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff918f70000 'api-ms-win-core-fibers-l1-1-1'
17793d74.2dbc: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-localization-l1-2-1) -> 0x0, fPresent=1
17803d74.2dbc: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-l1-2-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
17813d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff918f70000 'api-ms-win-core-localization-l1-2-1'
17823d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8ced00000 'C:\ProgramData\A-Volute\A-Volute.SonicStudio3\Modules\ScheduledModules\x64\A-Volute.SonicStudio3DevProps2.dll'
17833d74.2dbc: \Device\HarddiskVolume3\Program Files (x86)\RivaTuner Statistics Server\RTSSHooks64.dll: Owner is administrators group.
17843d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
17853d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'shlwapi.dll'.
17863d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'winmm.dll'.
17873d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
17883d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'gdi32.dll'.
17893d74.2dbc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files (x86)\RivaTuner Statistics Server\RTSSHooks64.dll) WinVerifyTrust
17903d74.2dbc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files (x86)\RivaTuner Statistics Server\RTSSHooks64.dll
17913d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
17923d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
17933d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
17943d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
17953d74.2dbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\user32.dll
17963d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
17973d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume3\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008]
17983d74.2dbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmm.dll
17993d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shlwapi.dll'...
18003d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'shlwapi.dll' -> '\Device\HarddiskVolume3\Windows\System32\shlwapi.dll' [rcNtRedir=0xc0150008]
18013d74.2dbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shlwapi.dll [redoing WinVerifyTrust]
18023d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
18033d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9193c0000 'C:\WINDOWS\System32\crypt32.dll'
18043d74.2dbc: supR3HardenedScreenImage/Imports: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\shlwapi.dll'
18053d74.2dbc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files (x86)\RivaTuner Statistics Server\RTSSHooks64.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
18063d74.2dbc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files (x86)\RivaTuner Statistics Server\RTSSHooks64.dll
18073d74.2dbc: supR3HardenedDllNotificationCallback: load 0000000180000000 LB 0x00272000 C:\Program Files (x86)\RivaTuner Statistics Server\RTSSHooks64.dll [fFlags=0x0]
18083d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files (x86)\RivaTuner Statistics Server\RTSSHooks64.dll
18093d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=0000000180000000 'C:\Program Files (x86)\RivaTuner Statistics Server\RTSSHooks64.dll'
18103d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff91b390000 'C:\WINDOWS\system32\user32.dll'
18113d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
18123d74.2dbc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\shell32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
18133d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9196d0000 'C:\WINDOWS\system32\shell32.dll'
18143d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\SHCore.dll [redoing WinVerifyTrust]
18153d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
18163d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9193c0000 'C:\WINDOWS\System32\crypt32.dll'
18173d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\SHCore.dll'
18183d74.2dbc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\SHCore.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
18193d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff91b190000 'C:\WINDOWS\system32\SHCore.dll'
18203d74.2dbc: supR3HardenedMonitor_LdrLoadDll: error opening 'C:\WINDOWS\system32\wintab32.dll': 0 (NtPath=\??\C:\WINDOWS\system32\wintab32.dll; Input=C:\WINDOWS\system32\wintab32.dll; rcNtGetDll=0x0
18213d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0xc0000034 'C:\WINDOWS\system32\wintab32.dll'
18223d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmm.dll
18233d74.2dbc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\winmm.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
18243d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff915e00000 'C:\WINDOWS\system32\winmm.dll'
18253d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmm.dll
18263d74.2dbc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\winmm.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
18273d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff915e00000 'C:\WINDOWS\system32\winmm.dll'
18283d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
18293d74.2dbc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\shell32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
18303d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9196d0000 'C:\WINDOWS\system32\shell32.dll'
18313d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\uxtheme.dll
18323d74.2dbc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\uxtheme.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
18333d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9161d0000 'C:\WINDOWS\system32\uxtheme.dll'
18343d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll
18353d74.2dbc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\advapi32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
18363d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff91ac80000 'C:\WINDOWS\system32\advapi32.dll'
18373d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
18383d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9193c0000 'C:\WINDOWS\System32\crypt32.dll'
18393d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #13 'rpcrt4.dll'.
18403d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #30 'profapi.dll'.
18413d74.2dbc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\userenv.dll) WinVerifyTrust
18423d74.2dbc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\userenv.dll
18433d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'profapi.dll'...
18443d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'profapi.dll' -> '\Device\HarddiskVolume3\Windows\System32\profapi.dll' [rcNtRedir=0xc0150008]
18453d74.2dbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\profapi.dll
18463d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
18473d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
18483d74.2dbc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\userenv.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
18493d74.2dbc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\userenv.dll
18503d74.2dbc: supR3HardenedDllNotificationCallback: load 00007ff918410000 LB 0x00025000 C:\WINDOWS\system32\userenv.dll [fFlags=0x0]
18513d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\userenv.dll
18523d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff918410000 'C:\WINDOWS\system32\userenv.dll'
18533d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\kernel32.dll
18543d74.2dbc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\kernel32.dll (Input=kernel32, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
18553d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff91a9a0000 'C:\WINDOWS\System32\kernel32.dll'
18563d74.2dbc: supR3HardenedDllNotificationCallback: load 00007ff91a350000 LB 0x000a2000 C:\WINDOWS\System32\clbcatq.dll [fFlags=0x0]
18573d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
18583d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #30 'rpcrt4.dll'.
18593d74.2dbc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\clbcatq.dll)
18603d74.2dbc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\clbcatq.dll
18613d74.3638: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
18623d74.3638: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
18633d74.3638: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
18643d74.3638: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
18653d74.3638: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
18663d74.3638: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9193c0000 'C:\WINDOWS\System32\crypt32.dll'
18673d74.3638: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\clbcatq.dll'
18683d74.3638: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
18693d74.3638: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
18703d74.3638: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp100.dll'.
18713d74.3638: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxrt.dll'.
18723d74.3638: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'advapi32.dll'.
18733d74.3638: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'ole32.dll'.
18743d74.3638: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'oleaut32.dll'.
18753d74.3638: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxC.dll) WinVerifyTrust
18763d74.3638: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxC.dll
18773d74.3638: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
18783d74.3638: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
18793d74.3638: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll
18803d74.3638: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
18813d74.3638: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
18823d74.3638: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ole32.dll
18833d74.3638: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
18843d74.3638: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
18853d74.3638: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll
18863d74.3638: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
18873d74.3638: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
18883d74.3638: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
18893d74.3638: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
18903d74.3638: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll
18913d74.3638: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
18923d74.3638: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
18933d74.3638: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxC.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
18943d74.3638: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxC.dll
18953d74.3638: supR3HardenedDllNotificationCallback: load 00007ff8adec0000 LB 0x003a4000 C:\Program Files\Oracle\VirtualBox\VBoxC.dll [fFlags=0x0]
18963d74.3638: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxC.dll
18973d74.3638: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8adec0000 'C:\Program Files\Oracle\VirtualBox\VBoxC.dll'
18983d74.3638: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
18993d74.3638: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
19003d74.3638: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
19013d74.3638: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'advapi32.dll'.
19023d74.3638: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'shlwapi.dll'.
19033d74.3638: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'ole32.dll'.
19043d74.3638: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'oleaut32.dll'.
19053d74.3638: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'rpcrt4.dll'.
19063d74.3638: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxProxyStub.dll) WinVerifyTrust
19073d74.3638: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxProxyStub.dll
19083d74.3638: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
19093d74.3638: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
19103d74.3638: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
19113d74.3638: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
19123d74.3638: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll
19133d74.3638: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
19143d74.3638: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
19153d74.3638: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ole32.dll
19163d74.3638: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shlwapi.dll'...
19173d74.3638: supR3HardenedWinVerifyCacheProcessImportTodos: 'shlwapi.dll' -> '\Device\HarddiskVolume3\Windows\System32\shlwapi.dll' [rcNtRedir=0xc0150008]
19183d74.3638: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shlwapi.dll
19193d74.3638: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
19203d74.3638: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
19213d74.3638: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
19223d74.3638: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
19233d74.3638: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
19243d74.3638: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
19253d74.3638: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxProxyStub.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
19263d74.3638: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxProxyStub.dll
19273d74.3638: supR3HardenedDllNotificationCallback: load 00007ff8ae270000 LB 0x000d5000 C:\Program Files\Oracle\VirtualBox\VBoxProxyStub.dll [fFlags=0x0]
19283d74.3638: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxProxyStub.dll
19293d74.3638: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8ae270000 'C:\Program Files\Oracle\VirtualBox\VBoxProxyStub.dll'
19303d74.3638: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll
19313d74.3638: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\oleaut32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
19323d74.3638: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff91af10000 'C:\Windows\System32\oleaut32.dll'
19333d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff91b530000 'C:\WINDOWS\system32\gdi32.dll'
19343d74.2d48: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
19353d74.2d48: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
19363d74.2d48: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
19373d74.2d48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
19383d74.2d48: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
19393d74.2d48: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxPuelMainVM.dll) WinVerifyTrust
19403d74.2d48: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxPuelMainVM.dll
19413d74.2d48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
19423d74.2d48: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
19433d74.2d48: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
19443d74.2d48: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
19453d74.2d48: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxPuelMainVM.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
19463d74.2d48: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxPuelMainVM.dll
19473d74.2d48: supR3HardenedDllNotificationCallback: load 00007ff8fc9f0000 LB 0x0000e000 C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxPuelMainVM.DLL [fFlags=0x0]
19483d74.2d48: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxPuelMainVM.dll
19493d74.2d48: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8fc9f0000 'C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxPuelMainVM.DLL'
19503d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\shell32.dll
19513d74.2dbc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\shell32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
19523d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9196d0000 'C:\WINDOWS\system32\shell32.dll'
19533d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
19543d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9193c0000 'C:\WINDOWS\System32\crypt32.dll'
19553d74.2dbc: '\Device\HarddiskVolume3\Windows\System32\ntdll.dll' has no imports
19563d74.2dbc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\ntdll.dll) WinVerifyTrust
19573d74.2dbc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\ntdll.dll
19583d74.2dbc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\ntdll.dll (Input=ntdll.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
19593d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff91b620000 'C:\WINDOWS\System32\ntdll.dll'
19603d74.2dbc: supR3HardenedDllNotificationCallback: load 00007ff91ab40000 LB 0x00135000 C:\WINDOWS\System32\MSCTF.dll [fFlags=0x0]
19613d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
19623d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'oleaut32.dll'.
19633d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #38 'user32.dll'.
19643d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #39 'gdi32.dll'.
19653d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #40 'imm32.dll'.
19663d74.2dbc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\msctf.dll)
19673d74.2dbc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\msctf.dll
19683d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'imm32.dll'...
19693d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'imm32.dll' -> '\Device\HarddiskVolume3\Windows\System32\imm32.dll' [rcNtRedir=0xc0150008]
19703d74.2dbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\imm32.dll
19713d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
19723d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
19733d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
19743d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
19753d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
19763d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
19773d74.2dbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll
19783d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
19793d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
19803d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
19813d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9193c0000 'C:\WINDOWS\System32\crypt32.dll'
19823d74.2dbc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\msctf.dll'
19833d74.2dbc: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000000000009f8 pwszName=\Device\HarddiskVolume3\Windows\System32\DataExchange.dll
19843d74.2dbc: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000018561f0
19853d74.2dbc: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000018561f0
19863d74.2dbc: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=3632E0380EF7C400BBC7C4B0B9ED8D9F9860503B
19873d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
19883d74.2dbc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
19893d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
19903d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9193c0000 'C:\WINDOWS\System32\crypt32.dll'
19913d74.2dbc: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.18362.295.cat'; file='\Device\HarddiskVolume3\Windows\System32\DataExchange.dll'
19923d74.2dbc: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
19933d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
19943d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'shcore.dll'.
19953d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #29 'combase.dll'.
19963d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #34 'd3d11.dll'.
19973d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #35 'dcomp.dll'.
19983d74.2dbc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\DataExchange.dll) WinVerifyTrust
19993d74.2dbc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\DataExchange.dll
20003d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'dcomp.dll'...
20013d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'dcomp.dll' -> '\Device\HarddiskVolume3\Windows\System32\dcomp.dll' [rcNtRedir=0xc0150008]
20023d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
20033d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9193c0000 'C:\WINDOWS\System32\crypt32.dll'
20043d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'win32u.dll'.
20053d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp_win.dll'.
20063d74.2dbc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\dcomp.dll) WinVerifyTrust
20073d74.2dbc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\dcomp.dll
20083d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'd3d11.dll'...
20093d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'd3d11.dll' -> '\Device\HarddiskVolume3\Windows\System32\d3d11.dll' [rcNtRedir=0xc0150008]
20103d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
20113d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
20123d74.2dbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll [lacks WinVerifyTrust]
20133d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
20143d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
20153d74.2dbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\win32u.dll [lacks WinVerifyTrust]
20163d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
20173d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9193c0000 'C:\WINDOWS\System32\crypt32.dll'
20183d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
20193d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #24 'dxgi.dll'.
20203d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #27 'win32u.dll'.
20213d74.2dbc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\d3d11.dll) WinVerifyTrust
20223d74.2dbc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\d3d11.dll
20233d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
20243d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
20253d74.2dbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\combase.dll [redoing WinVerifyTrust]
20263d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
20273d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
20283d74.2dbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\win32u.dll [lacks WinVerifyTrust]
20293d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'dxgi.dll'...
20303d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'dxgi.dll' -> '\Device\HarddiskVolume3\Windows\System32\dxgi.dll' [rcNtRedir=0xc0150008]
20313d74.2dbc: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\dxgi.dll'.
20323d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
20333d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'win32u.dll'.
20343d74.2dbc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\dxgi.dll)
20353d74.2dbc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\dxgi.dll
20363d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
20373d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
20383d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
20393d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
20403d74.2dbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\win32u.dll [lacks WinVerifyTrust]
20413d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
20423d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
20433d74.2dbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll
20443d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
20453d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9193c0000 'C:\WINDOWS\System32\crypt32.dll'
20463d74.2dbc: supR3HardenedScreenImage/Imports: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\combase.dll'
20473d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shcore.dll'...
20483d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'shcore.dll' -> '\Device\HarddiskVolume3\Windows\System32\shcore.dll' [rcNtRedir=0xc0150008]
20493d74.2dbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\SHCore.dll
20503d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
20513d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
20523d74.2dbc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\dataexchange.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
20533d74.2dbc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\DataExchange.dll
20543d74.2dbc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\d3d11.dll
20553d74.2dbc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\dcomp.dll
20563d74.2dbc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\dxgi.dll [avoiding WinVerifyTrust]
20573d74.2dbc: supR3HardenedDllNotificationCallback: load 00007ff9171f0000 LB 0x000eb000 C:\WINDOWS\system32\dxgi.dll [fFlags=0x0]
20583d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\dxgi.dll [avoiding WinVerifyTrust]
20593d74.2dbc: supR3HardenedDllNotificationCallback: load 00007ff914fa0000 LB 0x0025b000 C:\WINDOWS\system32\d3d11.dll [fFlags=0x0]
20603d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\d3d11.dll
20613d74.2dbc: supR3HardenedDllNotificationCallback: load 00007ff915660000 LB 0x001db000 C:\WINDOWS\system32\dcomp.dll [fFlags=0x0]
20623d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\dcomp.dll
20633d74.2dbc: supR3HardenedDllNotificationCallback: load 00007ff8e39f0000 LB 0x0003a000 C:\WINDOWS\system32\dataexchange.dll [fFlags=0x0]
20643d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\DataExchange.dll
20653d74.2dbc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\dxgi.dll'.
20663d74.2dbc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\dxgi.dll' [rescheduled]
20673d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\gdi32.dll
20683d74.2dbc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\gdi32.dll (Input=gdi32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
20693d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff91b530000 'C:\WINDOWS\System32\gdi32.dll'
20703d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8e39f0000 'C:\WINDOWS\system32\dataexchange.dll'
20713d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'rmclient.dll'.
20723d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #31 'rpcrt4.dll'.
20733d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #47 'combase.dll'.
20743d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #50 'msvcp_win.dll'.
20753d74.2dbc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\twinapi.appcore.dll)
20763d74.2dbc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\twinapi.appcore.dll
20773d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
20783d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'rpcrt4.dll'.
20793d74.2dbc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\rmclient.dll)
20803d74.2dbc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\rmclient.dll
20813d74.2dbc: supR3HardenedDllNotificationCallback: load 00007ff916a10000 LB 0x00029000 C:\WINDOWS\system32\RMCLIENT.dll [fFlags=0x0]
20823d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rmclient.dll [avoiding WinVerifyTrust]
20833d74.2dbc: supR3HardenedDllNotificationCallback: load 00007ff9163e0000 LB 0x0025a000 C:\WINDOWS\system32\twinapi.appcore.dll [fFlags=0x0]
20843d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\twinapi.appcore.dll [avoiding WinVerifyTrust]
20853d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
20863d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
20873d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
20883d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
20893d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
20903d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
20913d74.2dbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll [lacks WinVerifyTrust]
20923d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
20933d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
20943d74.2dbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\combase.dll
20953d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
20963d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
20973d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rmclient.dll'...
20983d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rmclient.dll' -> '\Device\HarddiskVolume3\Windows\System32\rmclient.dll' [rcNtRedir=0xc0150008]
20993d74.2dbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rmclient.dll [lacks WinVerifyTrust]
21003d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
21013d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9193c0000 'C:\WINDOWS\System32\crypt32.dll'
21023d74.2dbc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\rmclient.dll'
21033d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
21043d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9193c0000 'C:\WINDOWS\System32\crypt32.dll'
21053d74.2dbc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\twinapi.appcore.dll'
21063d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\SHCore.dll
21073d74.2dbc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\Shcore.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
21083d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff91b190000 'C:\WINDOWS\system32\Shcore.dll'
21093d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff91ad90000 'C:\WINDOWS\System32\ole32.dll'
21103d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\oleaut32.dll
21113d74.2dbc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\OLEAUT32.dll (Input=OLEAUT32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
21123d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff91af10000 'C:\WINDOWS\System32\OLEAUT32.dll'
21133d74.2dbc: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000ab0 pwszName=\Device\HarddiskVolume3\Windows\System32\wbem\wbemprox.dll
21143d74.2dbc: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000018561f0
21153d74.2dbc: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000018561f0
21163d74.2dbc: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=DB1AA7E2E4704C908EC9382E1F9E64808B9E5E1D
21173d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
21183d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9193c0000 'C:\WINDOWS\System32\crypt32.dll'
21193d74.2dbc: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package03~31bf3856ad364e35~amd64~~10.0.18362.295.cat'; file='\Device\HarddiskVolume3\Windows\System32\wbem\wbemprox.dll'
21203d74.2dbc: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
21213d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
21223d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'ws2_32.dll'.
21233d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #18 'wbemcomn.dll'.
21243d74.2dbc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\wbem\wbemprox.dll) WinVerifyTrust
21253d74.2dbc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\wbem\wbemprox.dll
21263d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'wbemcomn.dll'...
21273d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'wbemcomn.dll' -> '\Device\HarddiskVolume3\Windows\System32\wbemcomn.dll' [rcNtRedir=0xc0150008]
21283d74.2dbc: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000a70 pwszName=\Device\HarddiskVolume3\Windows\System32\wbemcomn.dll
21293d74.2dbc: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000018561f0
21303d74.2dbc: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000018561f0
21313d74.2dbc: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=22EAF38FA276D7A374D3945ACD556FA0953D3440
21323d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
21333d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9193c0000 'C:\WINDOWS\System32\crypt32.dll'
21343d74.2dbc: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package03~31bf3856ad364e35~amd64~~10.0.18362.295.cat'; file='\Device\HarddiskVolume3\Windows\System32\wbemcomn.dll'
21353d74.2dbc: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
21363d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
21373d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #14 'bcrypt.dll'.
21383d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #18 'ws2_32.dll'.
21393d74.2dbc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\wbemcomn.dll) WinVerifyTrust
21403d74.2dbc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\wbemcomn.dll
21413d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
21423d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
21433d74.2dbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ws2_32.dll
21443d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
21453d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
21463d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
21473d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
21483d74.2dbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ws2_32.dll
21493d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcrypt.dll'...
21503d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcrypt.dll' -> '\Device\HarddiskVolume3\Windows\System32\bcrypt.dll' [rcNtRedir=0xc0150008]
21513d74.2dbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\bcrypt.dll
21523d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
21533d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
21543d74.2dbc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\wbem\wbemprox.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
21553d74.2dbc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wbem\wbemprox.dll
21563d74.2dbc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wbemcomn.dll
21573d74.2dbc: supR3HardenedDllNotificationCallback: load 00007ff908330000 LB 0x00084000 C:\WINDOWS\SYSTEM32\wbemcomn.dll [fFlags=0x0]
21583d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wbemcomn.dll
21593d74.2dbc: supR3HardenedDllNotificationCallback: load 00007ff9083c0000 LB 0x00011000 C:\WINDOWS\system32\wbem\wbemprox.dll [fFlags=0x0]
21603d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wbem\wbemprox.dll
21613d74.2dbc: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(API-MS-Win-Core-LocalRegistry-L1-1-0.dll) -> 0x0, fPresent=1
21623d74.2dbc: supR3HardenedMonitor_LdrLoadDll: pName=API-MS-Win-Core-LocalRegistry-L1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
21633d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff918f70000 'API-MS-Win-Core-LocalRegistry-L1-1-0.dll'
21643d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9083c0000 'C:\WINDOWS\system32\wbem\wbemprox.dll'
21653d74.2dbc: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000aec pwszName=\Device\HarddiskVolume3\Windows\System32\wbem\wbemsvc.dll
21663d74.2dbc: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000018561f0
21673d74.2dbc: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000018561f0
21683d74.2dbc: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=00C864D7F76A7AD25E7D0DA164B0B66188F5B7FF
21693d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
21703d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9193c0000 'C:\WINDOWS\System32\crypt32.dll'
21713d74.2dbc: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package03~31bf3856ad364e35~amd64~~10.0.18362.295.cat'; file='\Device\HarddiskVolume3\Windows\System32\wbem\wbemsvc.dll'
21723d74.2dbc: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
21733d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
21743d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'rpcrt4.dll'.
21753d74.2dbc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\wbem\wbemsvc.dll) WinVerifyTrust
21763d74.2dbc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\wbem\wbemsvc.dll
21773d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
21783d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
21793d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
21803d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
21813d74.2dbc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\wbem\wbemsvc.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
21823d74.2dbc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wbem\wbemsvc.dll
21833d74.2dbc: supR3HardenedDllNotificationCallback: load 00007ff907310000 LB 0x00014000 C:\WINDOWS\system32\wbem\wbemsvc.dll [fFlags=0x0]
21843d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wbem\wbemsvc.dll
21853d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff907310000 'C:\WINDOWS\system32\wbem\wbemsvc.dll'
21863d74.2dbc: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-localization-l1-2-0.dll) -> 0x0, fPresent=1
21873d74.2dbc: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-l1-2-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
21883d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff918f70000 'api-ms-win-core-localization-l1-2-0.dll'
21893d74.2dbc: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-localization-obsolete-l1-1-0.dll) -> 0x0, fPresent=1
21903d74.2dbc: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-obsolete-l1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
21913d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff918f70000 'api-ms-win-core-localization-obsolete-l1-1-0.dll'
21923d74.2dbc: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000b38 pwszName=\Device\HarddiskVolume3\Windows\System32\wbem\fastprox.dll
21933d74.2dbc: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000018561f0
21943d74.2dbc: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000018561f0
21953d74.2dbc: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=0708A64F48237CD4D5092546CE9C373F20B30CA1
21963d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
21973d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9193c0000 'C:\WINDOWS\System32\crypt32.dll'
21983d74.2dbc: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package03~31bf3856ad364e35~amd64~~10.0.18362.295.cat'; file='\Device\HarddiskVolume3\Windows\System32\wbem\fastprox.dll'
21993d74.2dbc: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
22003d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
22013d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #20 'wbemcomn.dll'.
22023d74.2dbc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\wbem\fastprox.dll) WinVerifyTrust
22033d74.2dbc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\wbem\fastprox.dll
22043d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'wbemcomn.dll'...
22053d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'wbemcomn.dll' -> '\Device\HarddiskVolume3\Windows\System32\wbemcomn.dll' [rcNtRedir=0xc0150008]
22063d74.2dbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wbemcomn.dll
22073d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
22083d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
22093d74.2dbc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\wbem\fastprox.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
22103d74.2dbc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wbem\fastprox.dll
22113d74.2dbc: supR3HardenedDllNotificationCallback: load 00007ff907400000 LB 0x00101000 C:\WINDOWS\system32\wbem\fastprox.dll [fFlags=0x0]
22123d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wbem\fastprox.dll
22133d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff907400000 'C:\WINDOWS\system32\wbem\fastprox.dll'
22143d74.2dbc: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000b08 pwszName=\Device\HarddiskVolume3\Windows\System32\amsi.dll
22153d74.2dbc: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000018561f0
22163d74.2dbc: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000018561f0
22173d74.2dbc: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=B5D4D58A583ACAD5AA76D7DD0F2DB8ADE903942B
22183d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
22193d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9193c0000 'C:\WINDOWS\System32\crypt32.dll'
22203d74.2dbc: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package04~31bf3856ad364e35~amd64~~10.0.18362.295.cat'; file='\Device\HarddiskVolume3\Windows\System32\amsi.dll'
22213d74.2dbc: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
22223d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
22233d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #14 'rpcrt4.dll'.
22243d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #16 'userenv.dll'.
22253d74.2dbc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\amsi.dll) WinVerifyTrust
22263d74.2dbc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\amsi.dll
22273d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'userenv.dll'...
22283d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'userenv.dll' -> '\Device\HarddiskVolume3\Windows\System32\userenv.dll' [rcNtRedir=0xc0150008]
22293d74.2dbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\userenv.dll
22303d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
22313d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
22323d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
22333d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
22343d74.2dbc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\amsi.dll (Input=amsi.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
22353d74.2dbc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\amsi.dll
22363d74.2dbc: supR3HardenedDllNotificationCallback: load 00007ff903980000 LB 0x00015000 C:\WINDOWS\System32\amsi.dll [fFlags=0x0]
22373d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\amsi.dll
22383d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff903980000 'C:\WINDOWS\System32\amsi.dll'
22393d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
22403d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9193c0000 'C:\WINDOWS\System32\crypt32.dll'
22413d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
22423d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'oleaut32.dll'.
22433d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'advapi32.dll'.
22443d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'ole32.dll'.
22453d74.2dbc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Platform\4.18.1907.4-0\MpOAV.dll) WinVerifyTrust
22463d74.2dbc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Platform\4.18.1907.4-0\MpOAV.dll
22473d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
22483d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
22493d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
22503d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
22513d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
22523d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
22533d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
22543d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
22553d74.2dbc: supR3HardenedMonitor_LdrLoadDll: pName=C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1907.4-0\MpOav.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
22563d74.2dbc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Platform\4.18.1907.4-0\MpOAV.dll
22573d74.2dbc: supR3HardenedDllNotificationCallback: load 00007ff9031f0000 LB 0x00022000 C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1907.4-0\MpOav.dll [fFlags=0x0]
22583d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Platform\4.18.1907.4-0\MpOAV.dll
22593d74.2dbc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\version.dll'.
22603d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
22613d74.2dbc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\version.dll)
22623d74.2dbc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\version.dll
22633d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
22643d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
22653d74.2dbc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\version.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
22663d74.2dbc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\version.dll [avoiding WinVerifyTrust]
22673d74.2dbc: supR3HardenedDllNotificationCallback: load 00007ff913520000 LB 0x0000a000 C:\WINDOWS\system32\version.dll [fFlags=0x0]
22683d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\version.dll [avoiding WinVerifyTrust]
22693d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff913520000 'C:\WINDOWS\system32\version.dll'
22703d74.2dbc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\version.dll'.
22713d74.2dbc: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\version.dll' [rescheduled]
22723d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9031f0000 'C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1907.4-0\MpOav.dll'
22733d74.21b0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
22743d74.21b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
22753d74.21b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrem.dll'.
22763d74.21b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxrt.dll'.
22773d74.21b0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxVMM.dll) WinVerifyTrust
22783d74.21b0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxVMM.dll
22793d74.21b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
22803d74.21b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
22813d74.21b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrem.dll'...
22823d74.21b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrem.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxrem.dll' [rcNtRedir=0xc0150008]
22833d74.21b0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
22843d74.21b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'vboxrt.dll'.
22853d74.21b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxvmm.dll'.
22863d74.21b0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'msvcrt.dll'.
22873d74.21b0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxREM.dll) WinVerifyTrust
22883d74.21b0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxREM.dll
22893d74.21b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
22903d74.21b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
22913d74.21b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
22923d74.21b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
22933d74.21b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxvmm.dll'...
22943d74.21b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxvmm.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxvmm.dll' [rcNtRedir=0xc0150008]
22953d74.21b0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxVMM.dll
22963d74.21b0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
22973d74.21b0: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
22983d74.21b0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxVMM.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
22993d74.21b0: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxVMM.dll
23003d74.21b0: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxREM.dll
23013d74.21b0: supR3HardenedDllNotificationCallback: load 00000000642a0000 LB 0x0010b000 C:\Program Files\Oracle\VirtualBox\VBoxREM.dll [fFlags=0x0]
23023d74.21b0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxREM.dll
23033d74.21b0: supR3HardenedDllNotificationCallback: load 00007ff8ad2f0000 LB 0x00331000 C:\Program Files\Oracle\VirtualBox\VBoxVMM.DLL [fFlags=0x0]
23043d74.21b0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxVMM.dll
23053d74.21b0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8ad2f0000 'C:\Program Files\Oracle\VirtualBox\VBoxVMM.DLL'
23063d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
23073d74.263c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
23083d74.263c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
23093d74.263c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxvmm.dll'.
23103d74.263c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxrt.dll'.
23113d74.263c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'user32.dll'.
23123d74.263c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxSharedClipboard.dll) WinVerifyTrust
23133d74.263c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxSharedClipboard.dll
23143d74.263c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
23153d74.263c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
23163d74.263c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
23173d74.263c: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
23183d74.263c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxvmm.dll'...
23193d74.263c: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxvmm.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxvmm.dll' [rcNtRedir=0xc0150008]
23203d74.263c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxVMM.dll
23213d74.263c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
23223d74.263c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
23233d74.263c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxSharedClipboard.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
23243d74.263c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxSharedClipboard.dll
23253d74.263c: supR3HardenedDllNotificationCallback: load 00007ff8fc950000 LB 0x0000b000 C:\Program Files\Oracle\VirtualBox\VBoxSharedClipboard.DLL [fFlags=0x0]
23263d74.263c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxSharedClipboard.dll
23273d74.263c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8fc950000 'C:\Program Files\Oracle\VirtualBox\VBoxSharedClipboard.DLL'
23283d74.263c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff91b390000 'C:\WINDOWS\system32\User32.dll'
23293d74.d8c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
23303d74.d8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
23313d74.d8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp100.dll'.
23323d74.d8c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxrt.dll'.
23333d74.d8c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxDragAndDropSvc.dll) WinVerifyTrust
23343d74.d8c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxDragAndDropSvc.dll
23353d74.d8c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
23363d74.d8c: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
23373d74.d8c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
23383d74.d8c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
23393d74.d8c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
23403d74.d8c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
23413d74.d8c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll
23423d74.d8c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxDragAndDropSvc.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
23433d74.d8c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxDragAndDropSvc.dll
23443d74.d8c: supR3HardenedDllNotificationCallback: load 00007ff8fc880000 LB 0x0000d000 C:\Program Files\Oracle\VirtualBox\VBoxDragAndDropSvc.DLL [fFlags=0x0]
23453d74.d8c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxDragAndDropSvc.dll
23463d74.d8c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8fc880000 'C:\Program Files\Oracle\VirtualBox\VBoxDragAndDropSvc.DLL'
23473d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9196d0000 'C:\WINDOWS\system32\Shell32.dll'
23483d74.392c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxVMM.dll
23493d74.392c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxVMM.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
23503d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8ad2f0000 'C:\Program Files\Oracle\VirtualBox\VBoxVMM.DLL'
23513d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
23523d74.392c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
23533d74.392c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
23543d74.392c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
23553d74.392c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'ole32.dll'.
23563d74.392c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'oleaut32.dll'.
23573d74.392c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.dll) WinVerifyTrust
23583d74.392c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.dll
23593d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
23603d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
23613d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
23623d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
23633d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
23643d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
23653d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
23663d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
23673d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
23683d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
23693d74.392c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
23703d74.392c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.dll
23713d74.392c: supR3HardenedDllNotificationCallback: load 00007ff8fc830000 LB 0x00041000 C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.DLL [fFlags=0x0]
23723d74.392c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.dll
23733d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8fc830000 'C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.DLL'
23743d74.392c: supR3HardenedDllNotificationCallback: Unload 00007ff8fc830000 LB 0x00041000 C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.DLL [flags=0x0]
23753d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
23763d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
23773d74.392c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
23783d74.392c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxvmm.dll'.
23793d74.392c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxrt.dll'.
23803d74.392c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'vboxddu.dll'.
23813d74.392c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'vboxdd2.dll'.
23823d74.392c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'user32.dll'.
23833d74.392c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'setupapi.dll'.
23843d74.392c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'ws2_32.dll'.
23853d74.392c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'ole32.dll'.
23863d74.392c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'iphlpapi.dll'.
23873d74.392c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxDD.dll) WinVerifyTrust
23883d74.392c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxDD.dll
23893d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'iphlpapi.dll'...
23903d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: 'iphlpapi.dll' -> '\Device\HarddiskVolume3\Windows\System32\iphlpapi.dll' [rcNtRedir=0xc0150008]
23913d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
23923d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9193c0000 'C:\WINDOWS\System32\crypt32.dll'
23933d74.392c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\IPHLPAPI.DLL) WinVerifyTrust
23943d74.392c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\IPHLPAPI.DLL
23953d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
23963d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
23973d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
23983d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
23993d74.392c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ws2_32.dll
24003d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'setupapi.dll'...
24013d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: 'setupapi.dll' -> '\Device\HarddiskVolume3\Windows\System32\setupapi.dll' [rcNtRedir=0xc0150008]
24023d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
24033d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9193c0000 'C:\WINDOWS\System32\crypt32.dll'
24043d74.392c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
24053d74.392c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #29 'rpcrt4.dll'.
24063d74.392c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #36 'cfgmgr32.dll'.
24073d74.392c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #41 'bcrypt.dll'.
24083d74.392c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\setupapi.dll) WinVerifyTrust
24093d74.392c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\setupapi.dll
24103d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
24113d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
24123d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxdd2.dll'...
24133d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxdd2.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxdd2.dll' [rcNtRedir=0xc0150008]
24143d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcrypt.dll'...
24153d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcrypt.dll' -> '\Device\HarddiskVolume3\Windows\System32\bcrypt.dll' [rcNtRedir=0xc0150008]
24163d74.392c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\bcrypt.dll
24173d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'cfgmgr32.dll'...
24183d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: 'cfgmgr32.dll' -> '\Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll' [rcNtRedir=0xc0150008]
24193d74.392c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll [lacks WinVerifyTrust]
24203d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
24213d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
24223d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
24233d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
24243d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
24253d74.392c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
24263d74.392c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
24273d74.392c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxDD2.dll) WinVerifyTrust
24283d74.392c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxDD2.dll
24293d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxddu.dll'...
24303d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxddu.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxddu.dll' [rcNtRedir=0xc0150008]
24313d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
24323d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
24333d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
24343d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
24353d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
24363d74.392c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
24373d74.392c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
24383d74.392c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
24393d74.392c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'setupapi.dll'.
24403d74.392c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'advapi32.dll'.
24413d74.392c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxDDU.dll) WinVerifyTrust
24423d74.392c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxDDU.dll
24433d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
24443d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
24453d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxvmm.dll'...
24463d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxvmm.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxvmm.dll' [rcNtRedir=0xc0150008]
24473d74.392c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxVMM.dll
24483d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
24493d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
24503d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
24513d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
24523d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'setupapi.dll'...
24533d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: 'setupapi.dll' -> '\Device\HarddiskVolume3\Windows\System32\setupapi.dll' [rcNtRedir=0xc0150008]
24543d74.392c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\setupapi.dll
24553d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
24563d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
24573d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
24583d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
24593d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
24603d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
24613d74.392c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxDD.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
24623d74.392c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxDD.dll
24633d74.392c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxDDU.dll
24643d74.392c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxDD2.dll
24653d74.392c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\IPHLPAPI.DLL
24663d74.392c: supR3HardenedDllNotificationCallback: load 00007ff919ee0000 LB 0x00470000 C:\WINDOWS\System32\SETUPAPI.dll [fFlags=0x0]
24673d74.392c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\setupapi.dll
24683d74.392c: supR3HardenedDllNotificationCallback: load 00007ff8d33f0000 LB 0x00064000 C:\Program Files\Oracle\VirtualBox\VBoxDDU.dll [fFlags=0x0]
24693d74.392c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxDDU.dll
24703d74.392c: supR3HardenedDllNotificationCallback: load 00007ff8fc820000 LB 0x0005c000 C:\Program Files\Oracle\VirtualBox\VBoxDD2.dll [fFlags=0x0]
24713d74.392c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxDD2.dll
24723d74.392c: supR3HardenedDllNotificationCallback: load 00007ff917a70000 LB 0x0003a000 C:\WINDOWS\SYSTEM32\IPHLPAPI.DLL [fFlags=0x0]
24733d74.392c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\IPHLPAPI.DLL
24743d74.392c: supR3HardenedDllNotificationCallback: load 00007ff8ac910000 LB 0x009d9000 C:\Program Files\Oracle\VirtualBox\VBoxDD.DLL [fFlags=0x0]
24753d74.392c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxDD.dll
24763d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8ac910000 'C:\Program Files\Oracle\VirtualBox\VBoxDD.DLL'
24773d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
24783d74.392c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.dll
24793d74.392c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
24803d74.392c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.dll
24813d74.392c: supR3HardenedDllNotificationCallback: load 00007ff8ec6e0000 LB 0x00041000 C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.DLL [fFlags=0x0]
24823d74.392c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.dll
24833d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8ec6e0000 'C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.DLL'
24843d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
24853d74.392c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxC.dll
24863d74.392c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxC.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
24873d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8adec0000 'C:\Program Files\Oracle\VirtualBox\VBoxC.DLL'
24883d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
24893d74.392c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxDD2.dll
24903d74.392c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxDD2.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
24913d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8fc820000 'C:\Program Files\Oracle\VirtualBox\VBoxDD2.DLL'
24923d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
24933d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
24943d74.392c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
24953d74.392c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
24963d74.392c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxEhciR3.dll) WinVerifyTrust
24973d74.392c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxEhciR3.dll
24983d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
24993d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
25003d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
25013d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
25023d74.392c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxEhciR3.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
25033d74.392c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxEhciR3.dll
25043d74.392c: supR3HardenedDllNotificationCallback: load 00007ff8f3ad0000 LB 0x0001e000 C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxEhciR3.DLL [fFlags=0x0]
25053d74.392c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxEhciR3.dll
25063d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8f3ad0000 'C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxEhciR3.DLL'
25073d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
25083d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
25093d74.392c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
25103d74.392c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
25113d74.392c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxNvmeR3.dll) WinVerifyTrust
25123d74.392c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxNvmeR3.dll
25133d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
25143d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
25153d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
25163d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
25173d74.392c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxNvmeR3.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
25183d74.392c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxNvmeR3.dll
25193d74.392c: supR3HardenedDllNotificationCallback: load 00007ff8f3330000 LB 0x00018000 C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxNvmeR3.DLL [fFlags=0x0]
25203d74.392c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxNvmeR3.dll
25213d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8f3330000 'C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxNvmeR3.DLL'
25223d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
25233d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
25243d74.392c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
25253d74.392c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
25263d74.392c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbCardReaderR3.dll) WinVerifyTrust
25273d74.392c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbCardReaderR3.dll
25283d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
25293d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
25303d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
25313d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
25323d74.392c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbCardReaderR3.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
25333d74.392c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbCardReaderR3.dll
25343d74.392c: supR3HardenedDllNotificationCallback: load 00007ff8f06b0000 LB 0x00018000 C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbCardReaderR3.DLL [fFlags=0x0]
25353d74.392c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbCardReaderR3.dll
25363d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8f06b0000 'C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbCardReaderR3.DLL'
25373d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
25383d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
25393d74.392c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
25403d74.392c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
25413d74.392c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbWebcamR3.dll) WinVerifyTrust
25423d74.392c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbWebcamR3.dll
25433d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
25443d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
25453d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
25463d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
25473d74.392c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbWebcamR3.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
25483d74.392c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbWebcamR3.dll
25493d74.392c: supR3HardenedDllNotificationCallback: load 00007ff8ec6c0000 LB 0x00019000 C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbWebcamR3.DLL [fFlags=0x0]
25503d74.392c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbWebcamR3.dll
25513d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8ec6c0000 'C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbWebcamR3.DLL'
25523d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
25533d74.624: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
25543d74.624: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
25553d74.624: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxvmm.dll'.
25563d74.624: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxrt.dll'.
25573d74.624: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxSharedFolders.dll) WinVerifyTrust
25583d74.624: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxSharedFolders.dll
25593d74.624: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
25603d74.624: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
25613d74.624: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxvmm.dll'...
25623d74.624: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxvmm.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxvmm.dll' [rcNtRedir=0xc0150008]
25633d74.624: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxVMM.dll
25643d74.624: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
25653d74.624: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
25663d74.624: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxSharedFolders.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
25673d74.624: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxSharedFolders.dll
25683d74.624: supR3HardenedDllNotificationCallback: load 00007ff8d33d0000 LB 0x00014000 C:\Program Files\Oracle\VirtualBox\VBoxSharedFolders.DLL [fFlags=0x0]
25693d74.624: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxSharedFolders.dll
25703d74.624: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8d33d0000 'C:\Program Files\Oracle\VirtualBox\VBoxSharedFolders.DLL'
25713d74.704: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
25723d74.704: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
25733d74.704: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp100.dll'.
25743d74.704: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxvmm.dll'.
25753d74.704: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'vboxrt.dll'.
25763d74.704: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxGuestControlSvc.dll) WinVerifyTrust
25773d74.704: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxGuestControlSvc.dll
25783d74.704: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
25793d74.704: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
25803d74.704: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxvmm.dll'...
25813d74.704: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxvmm.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxvmm.dll' [rcNtRedir=0xc0150008]
25823d74.704: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxVMM.dll
25833d74.704: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
25843d74.704: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
25853d74.704: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
25863d74.704: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
25873d74.704: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxGuestControlSvc.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
25883d74.704: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxGuestControlSvc.dll
25893d74.704: supR3HardenedDllNotificationCallback: load 00007ff8fc640000 LB 0x0000c000 C:\Program Files\Oracle\VirtualBox\VBoxGuestControlSvc.DLL [fFlags=0x0]
25903d74.704: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxGuestControlSvc.dll
25913d74.704: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8fc640000 'C:\Program Files\Oracle\VirtualBox\VBoxGuestControlSvc.DLL'
25923d74.710: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
25933d74.710: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
25943d74.710: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp100.dll'.
25953d74.710: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxrt.dll'.
25963d74.710: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxGuestPropSvc.dll) WinVerifyTrust
25973d74.710: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxGuestPropSvc.dll
25983d74.710: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
25993d74.710: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
26003d74.710: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
26013d74.710: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
26023d74.710: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
26033d74.710: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
26043d74.710: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxGuestPropSvc.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
26053d74.710: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxGuestPropSvc.dll
26063d74.710: supR3HardenedDllNotificationCallback: load 00007ff8fc5c0000 LB 0x0000d000 C:\Program Files\Oracle\VirtualBox\VBoxGuestPropSvc.DLL [fFlags=0x0]
26073d74.710: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\VBoxGuestPropSvc.dll
26083d74.710: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8fc5c0000 'C:\Program Files\Oracle\VirtualBox\VBoxGuestPropSvc.DLL'
26093d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8ad2f0000 'C:\Program Files\Oracle\VirtualBox\VBoxVMM.DLL'
26103d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
26113d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
26123d74.392c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
26133d74.392c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
26143d74.392c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VDPluginCrypt.dll) WinVerifyTrust
26153d74.392c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VDPluginCrypt.dll
26163d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
26173d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
26183d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
26193d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
26203d74.392c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VDPluginCrypt.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
26213d74.392c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VDPluginCrypt.dll
26223d74.392c: supR3HardenedDllNotificationCallback: load 00007ff90ea40000 LB 0x0000a000 C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VDPluginCrypt.DLL [fFlags=0x0]
26233d74.392c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VDPluginCrypt.dll
26243d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90ea40000 'C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VDPluginCrypt.DLL'
26253d74.392c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\IPHLPAPI.DLL
26263d74.392c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\Iphlpapi.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
26273d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff917a70000 'C:\WINDOWS\system32\Iphlpapi.dll'
26283d74.392c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'rpcrt4.dll'.
26293d74.392c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'nsi.dll'.
26303d74.392c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\winnsi.dll)
26313d74.392c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\winnsi.dll
26323d74.392c: supR3HardenedDllNotificationCallback: load 00007ff91aa60000 LB 0x00008000 C:\WINDOWS\System32\NSI.dll [fFlags=0x0]
26333d74.392c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\nsi.dll)
26343d74.392c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\nsi.dll
26353d74.392c: supR3HardenedDllNotificationCallback: load 00007ff912310000 LB 0x0000b000 C:\WINDOWS\SYSTEM32\WINNSI.DLL [fFlags=0x0]
26363d74.392c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winnsi.dll [avoiding WinVerifyTrust]
26373d74.392c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'rpcrt4.dll'.
26383d74.392c: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\dhcpcsvc6.dll)
26393d74.392c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\dhcpcsvc6.dll
26403d74.392c: supR3HardenedDllNotificationCallback: load 00007ff9123d0000 LB 0x00016000 C:\WINDOWS\SYSTEM32\dhcpcsvc6.DLL [fFlags=0x0]
26413d74.392c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\dhcpcsvc6.dll [avoiding WinVerifyTrust]
26423d74.392c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'rpcrt4.dll'.
26433d74.392c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'ws2_32.dll'.
26443d74.392c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'nsi.dll'.
26453d74.392c: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\dhcpcsvc.dll)
26463d74.392c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\dhcpcsvc.dll
26473d74.392c: supR3HardenedDllNotificationCallback: load 00007ff9123b0000 LB 0x0001c000 C:\WINDOWS\SYSTEM32\dhcpcsvc.DLL [fFlags=0x0]
26483d74.392c: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\dhcpcsvc.dll [avoiding WinVerifyTrust]
26493d74.392c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #21 'ws2_32.dll'.
26503d74.392c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #23 'nsi.dll'.
26513d74.392c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\dnsapi.dll)
26523d74.392c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\dnsapi.dll
26533d74.392c: supR3HardenedDllNotificationCallback: load 00007ff917ab0000 LB 0x000ca000 C:\WINDOWS\SYSTEM32\DNSAPI.dll [fFlags=0x0]
26543d74.392c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\dnsapi.dll [avoiding WinVerifyTrust]
26553d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'nsi.dll'...
26563d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: 'nsi.dll' -> '\Device\HarddiskVolume3\Windows\System32\nsi.dll' [rcNtRedir=0xc0150008]
26573d74.392c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\nsi.dll [lacks WinVerifyTrust]
26583d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
26593d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
26603d74.392c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ws2_32.dll
26613d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'nsi.dll'...
26623d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: 'nsi.dll' -> '\Device\HarddiskVolume3\Windows\System32\nsi.dll' [rcNtRedir=0xc0150008]
26633d74.392c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\nsi.dll [lacks WinVerifyTrust]
26643d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
26653d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
26663d74.392c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ws2_32.dll
26673d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
26683d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
26693d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
26703d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
26713d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'nsi.dll'...
26723d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: 'nsi.dll' -> '\Device\HarddiskVolume3\Windows\System32\nsi.dll' [rcNtRedir=0xc0150008]
26733d74.392c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\nsi.dll [lacks WinVerifyTrust]
26743d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
26753d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
26763d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
26773d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9193c0000 'C:\WINDOWS\System32\crypt32.dll'
26783d74.392c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\dnsapi.dll'
26793d74.392c: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000f74 pwszName=\Device\HarddiskVolume3\Windows\System32\dhcpcsvc.dll
26803d74.392c: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000018561f0
26813d74.392c: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000018561f0
26823d74.392c: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=ABBE12EE7925737522BCF905613B49C6CAA0BE8C
26833d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
26843d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9193c0000 'C:\WINDOWS\System32\crypt32.dll'
26853d74.392c: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.18362.356.cat'; file='\Device\HarddiskVolume3\Windows\System32\dhcpcsvc.dll'
26863d74.392c: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
26873d74.392c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\dhcpcsvc.dll'
26883d74.392c: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000ea0 pwszName=\Device\HarddiskVolume3\Windows\System32\dhcpcsvc6.dll
26893d74.392c: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000018561f0
26903d74.392c: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000018561f0
26913d74.392c: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=62657CFC96994F71846A6491CB0A48C51E4DCEBA
26923d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
26933d74.392c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\crypt32.dll
26943d74.392c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\crypt32.dll (Input=crypt32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
26953d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9193c0000 'C:\WINDOWS\System32\crypt32.dll'
26963d74.392c: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.18362.356.cat'; file='\Device\HarddiskVolume3\Windows\System32\dhcpcsvc6.dll'
26973d74.392c: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
26983d74.392c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\dhcpcsvc6.dll'
26993d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
27003d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9193c0000 'C:\WINDOWS\System32\crypt32.dll'
27013d74.392c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\nsi.dll'
27023d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
27033d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9193c0000 'C:\WINDOWS\System32\crypt32.dll'
27043d74.392c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\winnsi.dll'
27053d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
27063d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9193c0000 'C:\WINDOWS\System32\crypt32.dll'
27073d74.392c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcp_win.dll'.
27083d74.392c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #16 'rpcrt4.dll'.
27093d74.392c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #28 'devobj.dll'.
27103d74.392c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\MMDevAPI.dll) WinVerifyTrust
27113d74.392c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\MMDevAPI.dll
27123d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'devobj.dll'...
27133d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: 'devobj.dll' -> '\Device\HarddiskVolume3\Windows\System32\devobj.dll' [rcNtRedir=0xc0150008]
27143d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
27153d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9193c0000 'C:\WINDOWS\System32\crypt32.dll'
27163d74.392c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #17 'cfgmgr32.dll'.
27173d74.392c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\devobj.dll) WinVerifyTrust
27183d74.392c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\devobj.dll
27193d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
27203d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
27213d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
27223d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
27233d74.392c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll [redoing WinVerifyTrust]
27243d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'cfgmgr32.dll'...
27253d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: 'cfgmgr32.dll' -> '\Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll' [rcNtRedir=0xc0150008]
27263d74.392c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\cfgmgr32.dll [lacks WinVerifyTrust]
27273d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
27283d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9193c0000 'C:\WINDOWS\System32\crypt32.dll'
27293d74.392c: supR3HardenedScreenImage/Imports: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll'
27303d74.392c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\MMDevApi.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
27313d74.392c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\MMDevAPI.dll
27323d74.392c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\devobj.dll
27333d74.392c: supR3HardenedDllNotificationCallback: load 00007ff9182f0000 LB 0x0002a000 C:\WINDOWS\System32\DEVOBJ.dll [fFlags=0x0]
27343d74.392c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\devobj.dll
27353d74.392c: supR3HardenedDllNotificationCallback: load 00007ff912880000 LB 0x00078000 C:\WINDOWS\System32\MMDevApi.dll [fFlags=0x0]
27363d74.392c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\MMDevAPI.dll
27373d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff912880000 'C:\WINDOWS\System32\MMDevApi.dll'
27383d74.392c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\MMDevAPI.dll
27393d74.392c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\MMDevAPI.dll (Input=MMDevAPI.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
27403d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff912880000 'C:\WINDOWS\System32\MMDevAPI.dll'
27413d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
27423d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9193c0000 'C:\WINDOWS\System32\crypt32.dll'
27433d74.392c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcp_win.dll'.
27443d74.392c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'rpcrt4.dll'.
27453d74.392c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'oleaut32.dll'.
27463d74.392c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #29 'mmdevapi.dll'.
27473d74.392c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\AudioSes.dll) WinVerifyTrust
27483d74.392c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\AudioSes.dll
27493d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mmdevapi.dll'...
27503d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: 'mmdevapi.dll' -> '\Device\HarddiskVolume3\Windows\System32\mmdevapi.dll' [rcNtRedir=0xc0150008]
27513d74.392c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\MMDevAPI.dll
27523d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
27533d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
27543d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
27553d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
27563d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
27573d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
27583d74.392c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcp_win.dll
27593d74.392c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\AudioSes.dll (Input=AudioSes.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
27603d74.392c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\AudioSes.dll
27613d74.392c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'combase.dll'.
27623d74.392c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #24 'rpcrt4.dll'.
27633d74.392c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #32 'bcryptprimitives.dll'.
27643d74.392c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\WinTypes.dll)
27653d74.392c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\WinTypes.dll
27663d74.392c: supR3HardenedDllNotificationCallback: load 00007ff913530000 LB 0x00153000 C:\WINDOWS\SYSTEM32\wintypes.dll [fFlags=0x0]
27673d74.392c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\WinTypes.dll [avoiding WinVerifyTrust]
27683d74.392c: supR3HardenedDllNotificationCallback: load 00007ff912900000 LB 0x0015d000 C:\WINDOWS\System32\AudioSes.dll [fFlags=0x0]
27693d74.392c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\AudioSes.dll
27703d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff912900000 'C:\WINDOWS\System32\AudioSes.dll'
27713d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcryptprimitives.dll'...
27723d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcryptprimitives.dll' -> '\Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll' [rcNtRedir=0xc0150008]
27733d74.392c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\bcryptprimitives.dll
27743d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
27753d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
27763d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
27773d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
27783d74.392c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\combase.dll
27793d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
27803d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9193c0000 'C:\WINDOWS\System32\crypt32.dll'
27813d74.392c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\WinTypes.dll'
27823d74.392c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\MMDevAPI.dll
27833d74.392c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\MMDevApi.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
27843d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff912880000 'C:\WINDOWS\System32\MMDevApi.dll'
27853d74.392c: \Device\HarddiskVolume3\ProgramData\A-Volute\A-Volute.SonicStudio3\Modules\ScheduledModules\x64\ProductInfo.dll: Owner is administrators group.
27863d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
27873d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9193c0000 'C:\WINDOWS\System32\crypt32.dll'
27883d74.392c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'ole32.dll'.
27893d74.392c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\ProgramData\A-Volute\A-Volute.SonicStudio3\Modules\ScheduledModules\x64\ProductInfo.dll) WinVerifyTrust
27903d74.392c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\ProgramData\A-Volute\A-Volute.SonicStudio3\Modules\ScheduledModules\x64\ProductInfo.dll
27913d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
27923d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
27933d74.392c: supR3HardenedMonitor_LdrLoadDll: pName=C:\ProgramData\A-Volute\A-Volute.SonicStudio3\Modules\ScheduledModules\x64\ProductInfo.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
27943d74.392c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\ProgramData\A-Volute\A-Volute.SonicStudio3\Modules\ScheduledModules\x64\ProductInfo.dll
27953d74.392c: supR3HardenedDllNotificationCallback: load 00007ff8cf3c0000 LB 0x00020000 C:\ProgramData\A-Volute\A-Volute.SonicStudio3\Modules\ScheduledModules\x64\ProductInfo.dll [fFlags=0x0]
27963d74.392c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\ProgramData\A-Volute\A-Volute.SonicStudio3\Modules\ScheduledModules\x64\ProductInfo.dll
27973d74.392c: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-synch-l1-2-0) -> 0x0, fPresent=1
27983d74.392c: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-synch-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
27993d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff918f70000 'api-ms-win-core-synch-l1-2-0'
28003d74.392c: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-fibers-l1-1-1) -> 0x0, fPresent=1
28013d74.392c: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-fibers-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
28023d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff918f70000 'api-ms-win-core-fibers-l1-1-1'
28033d74.392c: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-synch-l1-2-0) -> 0x0, fPresent=1
28043d74.392c: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-synch-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
28053d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff918f70000 'api-ms-win-core-synch-l1-2-0'
28063d74.392c: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-fibers-l1-1-1) -> 0x0, fPresent=1
28073d74.392c: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-fibers-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
28083d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff918f70000 'api-ms-win-core-fibers-l1-1-1'
28093d74.392c: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-localization-l1-2-1) -> 0x0, fPresent=1
28103d74.392c: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-l1-2-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
28113d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff918f70000 'api-ms-win-core-localization-l1-2-1'
28123d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8cf3c0000 'C:\ProgramData\A-Volute\A-Volute.SonicStudio3\Modules\ScheduledModules\x64\ProductInfo.dll'
28133d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
28143d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9193c0000 'C:\WINDOWS\System32\crypt32.dll'
28153d74.392c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #18 'oleaut32.dll'.
28163d74.392c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #33 'rpcrt4.dll'.
28173d74.392c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\propsys.dll) WinVerifyTrust
28183d74.392c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\propsys.dll
28193d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
28203d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
28213d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
28223d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
28233d74.392c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\PropSys.dll (Input=PropSys.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
28243d74.392c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\propsys.dll
28253d74.392c: supR3HardenedDllNotificationCallback: load 00007ff916290000 LB 0x000ef000 C:\WINDOWS\System32\PropSys.dll [fFlags=0x0]
28263d74.392c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\propsys.dll
28273d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff916290000 'C:\WINDOWS\System32\PropSys.dll'
28283d74.392c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\MMDevAPI.dll
28293d74.392c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\MMDEVAPI.DLL (Input=MMDEVAPI.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
28303d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff912880000 'C:\WINDOWS\System32\MMDEVAPI.DLL'
28313d74.392c: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000001080 pwszName=\Device\HarddiskVolume3\Windows\System32\dsound.dll
28323d74.392c: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000018561f0
28333d74.392c: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000018561f0
28343d74.392c: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=8184043CF3F3DF1E3CF96E74DBBF7D0836417373
28353d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
28363d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9193c0000 'C:\WINDOWS\System32\crypt32.dll'
28373d74.392c: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.18362.295.cat'; file='\Device\HarddiskVolume3\Windows\System32\dsound.dll'
28383d74.392c: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
28393d74.392c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
28403d74.392c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #32 'winmm.dll'.
28413d74.392c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\dsound.dll) WinVerifyTrust
28423d74.392c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\dsound.dll
28433d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
28443d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume3\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008]
28453d74.392c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmm.dll
28463d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
28473d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
28483d74.392c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\dsound.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
28493d74.392c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\dsound.dll
28503d74.392c: supR3HardenedDllNotificationCallback: load 00007ff8ac870000 LB 0x00099000 C:\WINDOWS\System32\dsound.dll [fFlags=0x0]
28513d74.392c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\dsound.dll
28523d74.392c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\dsound.dll
28533d74.392c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\dsound.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
28543d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8ac870000 'C:\WINDOWS\System32\dsound.dll'
28553d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8ac870000 'C:\WINDOWS\System32\dsound.dll'
28563d74.392c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\dsound.dll
28573d74.392c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\dsound.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
28583d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8ac870000 'C:\WINDOWS\system32\dsound.dll'
28593d74.934: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\AudioSes.dll
28603d74.934: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\AUDIOSES.DLL (Input=AUDIOSES.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
28613d74.934: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff912900000 'C:\WINDOWS\System32\AUDIOSES.DLL'
28623d74.934: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\AudioSes.dll
28633d74.934: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\AudioSes.dll (Input=AudioSes.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
28643d74.934: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff912900000 'C:\WINDOWS\System32\AudioSes.dll'
28653d74.934: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\AudioSes.dll
28663d74.934: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\AudioSes.dll (Input=AudioSes.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
28673d74.934: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff912900000 'C:\WINDOWS\System32\AudioSes.dll'
28683d74.934: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
28693d74.934: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'rpcrt4.dll'.
28703d74.934: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\ResourcePolicyClient.dll)
28713d74.934: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\ResourcePolicyClient.dll
28723d74.934: supR3HardenedDllNotificationCallback: load 00007ff916780000 LB 0x00014000 C:\WINDOWS\SYSTEM32\resourcepolicyclient.dll [fFlags=0x0]
28733d74.934: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ResourcePolicyClient.dll [avoiding WinVerifyTrust]
28743d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
28753d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
28763d74.392c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rpcrt4.dll
28773d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
28783d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
28793d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
28803d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9193c0000 'C:\WINDOWS\System32\crypt32.dll'
28813d74.392c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\ResourcePolicyClient.dll'
28823d74.392c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmm.dll
28833d74.392c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\winmm.dll (Input=winmm.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
28843d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff915e00000 'C:\WINDOWS\System32\winmm.dll'
28853d74.392c: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000001144 pwszName=\Device\HarddiskVolume3\Windows\System32\wdmaud.drv
28863d74.392c: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000018561f0
28873d74.392c: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000018561f0
28883d74.392c: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=38EA8D6D625C6A0A9075DAE17FD33652FF8FC23A
28893d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
28903d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9193c0000 'C:\WINDOWS\System32\crypt32.dll'
28913d74.392c: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.18362.295.cat'; file='\Device\HarddiskVolume3\Windows\System32\wdmaud.drv'
28923d74.392c: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
28933d74.392c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
28943d74.392c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'mmdevapi.dll'.
28953d74.392c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #27 'ksuser.dll'.
28963d74.392c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #28 'avrt.dll'.
28973d74.392c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\wdmaud.drv) WinVerifyTrust
28983d74.392c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\wdmaud.drv
28993d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'avrt.dll'...
29003d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: 'avrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\avrt.dll' [rcNtRedir=0xc0150008]
29013d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
29023d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9193c0000 'C:\WINDOWS\System32\crypt32.dll'
29033d74.392c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\avrt.dll) WinVerifyTrust
29043d74.392c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\avrt.dll
29053d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ksuser.dll'...
29063d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: 'ksuser.dll' -> '\Device\HarddiskVolume3\Windows\System32\ksuser.dll' [rcNtRedir=0xc0150008]
29073d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
29083d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9193c0000 'C:\WINDOWS\System32\crypt32.dll'
29093d74.392c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
29103d74.392c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\ksuser.dll) WinVerifyTrust
29113d74.392c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\ksuser.dll
29123d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mmdevapi.dll'...
29133d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: 'mmdevapi.dll' -> '\Device\HarddiskVolume3\Windows\System32\mmdevapi.dll' [rcNtRedir=0xc0150008]
29143d74.392c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\MMDevAPI.dll
29153d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
29163d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
29173d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
29183d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
29193d74.392c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
29203d74.392c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wdmaud.drv
29213d74.392c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ksuser.dll
29223d74.392c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\avrt.dll
29233d74.392c: supR3HardenedDllNotificationCallback: load 00007ff8fc940000 LB 0x00009000 C:\WINDOWS\SYSTEM32\ksuser.dll [fFlags=0x0]
29243d74.392c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ksuser.dll
29253d74.392c: supR3HardenedDllNotificationCallback: load 00007ff913a00000 LB 0x0000a000 C:\WINDOWS\SYSTEM32\AVRT.dll [fFlags=0x0]
29263d74.392c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\avrt.dll
29273d74.392c: supR3HardenedDllNotificationCallback: load 00007ff8e9080000 LB 0x00044000 C:\WINDOWS\System32\wdmaud.drv [fFlags=0x0]
29283d74.392c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wdmaud.drv
29293d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8e9080000 'C:\WINDOWS\System32\wdmaud.drv'
29303d74.392c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wdmaud.drv
29313d74.392c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
29323d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8e9080000 'C:\WINDOWS\System32\wdmaud.drv'
29333d74.392c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wdmaud.drv
29343d74.392c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
29353d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8e9080000 'C:\WINDOWS\System32\wdmaud.drv'
29363d74.392c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wdmaud.drv
29373d74.392c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
29383d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8e9080000 'C:\WINDOWS\System32\wdmaud.drv'
29393d74.392c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wdmaud.drv
29403d74.392c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
29413d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8e9080000 'C:\WINDOWS\System32\wdmaud.drv'
29423d74.392c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wdmaud.drv
29433d74.392c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
29443d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8e9080000 'C:\WINDOWS\System32\wdmaud.drv'
29453d74.392c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wdmaud.drv
29463d74.392c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
29473d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8e9080000 'C:\WINDOWS\System32\wdmaud.drv'
29483d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8e9080000 'C:\WINDOWS\System32\wdmaud.drv'
29493d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8e9080000 'C:\WINDOWS\System32\wdmaud.drv'
29503d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8e9080000 'C:\WINDOWS\System32\wdmaud.drv'
29513d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8e9080000 'C:\WINDOWS\System32\wdmaud.drv'
29523d74.392c: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000001194 pwszName=\Device\HarddiskVolume3\Windows\System32\msacm32.drv
29533d74.392c: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000018561f0
29543d74.392c: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000018561f0
29553d74.392c: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=763C5E89A8DA653902990733D245B99CC7C40BEA
29563d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
29573d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9193c0000 'C:\WINDOWS\System32\crypt32.dll'
29583d74.392c: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.18362.295.cat'; file='\Device\HarddiskVolume3\Windows\System32\msacm32.drv'
29593d74.392c: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
29603d74.392c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
29613d74.392c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'mmdevapi.dll'.
29623d74.392c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #13 'msacm32.dll'.
29633d74.392c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #14 'winmmbase.dll'.
29643d74.392c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\msacm32.drv) WinVerifyTrust
29653d74.392c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\msacm32.drv
29663d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmmbase.dll'...
29673d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmmbase.dll' -> '\Device\HarddiskVolume3\Windows\System32\winmmbase.dll' [rcNtRedir=0xc0150008]
29683d74.392c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmmbase.dll [redoing WinVerifyTrust]
29693d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
29703d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9193c0000 'C:\WINDOWS\System32\crypt32.dll'
29713d74.392c: supR3HardenedScreenImage/Imports: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\winmmbase.dll'
29723d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msacm32.dll'...
29733d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msacm32.dll' -> '\Device\HarddiskVolume3\Windows\System32\msacm32.dll' [rcNtRedir=0xc0150008]
29743d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
29753d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9193c0000 'C:\WINDOWS\System32\crypt32.dll'
29763d74.392c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
29773d74.392c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\msacm32.dll) WinVerifyTrust
29783d74.392c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\msacm32.dll
29793d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mmdevapi.dll'...
29803d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: 'mmdevapi.dll' -> '\Device\HarddiskVolume3\Windows\System32\mmdevapi.dll' [rcNtRedir=0xc0150008]
29813d74.392c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\MMDevAPI.dll
29823d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
29833d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
29843d74.392c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msvcrt.dll
29853d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
29863d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
29873d74.392c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
29883d74.392c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msacm32.drv
29893d74.392c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msacm32.dll
29903d74.392c: supR3HardenedDllNotificationCallback: load 00007ff8eab30000 LB 0x0001c000 C:\WINDOWS\SYSTEM32\MSACM32.dll [fFlags=0x0]
29913d74.392c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msacm32.dll
29923d74.392c: supR3HardenedDllNotificationCallback: load 00007ff8fc750000 LB 0x0000d000 C:\WINDOWS\System32\msacm32.drv [fFlags=0x0]
29933d74.392c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msacm32.drv
29943d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8fc750000 'C:\WINDOWS\System32\msacm32.drv'
29953d74.392c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msacm32.drv
29963d74.392c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
29973d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8fc750000 'C:\WINDOWS\System32\msacm32.drv'
29983d74.392c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msacm32.drv
29993d74.392c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
30003d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8fc750000 'C:\WINDOWS\System32\msacm32.drv'
30013d74.392c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msacm32.drv
30023d74.392c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
30033d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8fc750000 'C:\WINDOWS\System32\msacm32.drv'
30043d74.392c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msacm32.drv
30053d74.392c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
30063d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8fc750000 'C:\WINDOWS\System32\msacm32.drv'
30073d74.392c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msacm32.drv
30083d74.392c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
30093d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8fc750000 'C:\WINDOWS\System32\msacm32.drv'
30103d74.392c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msacm32.drv
30113d74.392c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
30123d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8fc750000 'C:\WINDOWS\System32\msacm32.drv'
30133d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8fc750000 'C:\WINDOWS\System32\msacm32.drv'
30143d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8fc750000 'C:\WINDOWS\System32\msacm32.drv'
30153d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8fc750000 'C:\WINDOWS\System32\msacm32.drv'
30163d74.392c: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000000000011e4 pwszName=\Device\HarddiskVolume3\Windows\System32\midimap.dll
30173d74.392c: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 00000000018561f0
30183d74.392c: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=00000000018561f0
30193d74.392c: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=EB34EC166C3F780657AB67E557E6C2E60C398D10
30203d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
30213d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9193c0000 'C:\WINDOWS\System32\crypt32.dll'
30223d74.392c: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.18362.295.cat'; file='\Device\HarddiskVolume3\Windows\System32\midimap.dll'
30233d74.392c: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
30243d74.392c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
30253d74.392c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'winmm.dll'.
30263d74.392c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\midimap.dll) WinVerifyTrust
30273d74.392c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\midimap.dll
30283d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
30293d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume3\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008]
30303d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
30313d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
30323d74.392c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\midimap.dll (Input=midimap.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
30333d74.392c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\midimap.dll
30343d74.392c: supR3HardenedDllNotificationCallback: load 00007ff8fc440000 LB 0x0000a000 C:\WINDOWS\System32\midimap.dll [fFlags=0x0]
30353d74.392c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\midimap.dll
30363d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8fc440000 'C:\WINDOWS\System32\midimap.dll'
30373d74.392c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\midimap.dll
30383d74.392c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\midimap.dll (Input=midimap.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
30393d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8fc440000 'C:\WINDOWS\System32\midimap.dll'
30403d74.392c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\midimap.dll
30413d74.392c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\midimap.dll (Input=midimap.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
30423d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8fc440000 'C:\WINDOWS\System32\midimap.dll'
30433d74.392c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\midimap.dll
30443d74.392c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\midimap.dll (Input=midimap.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
30453d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8fc440000 'C:\WINDOWS\System32\midimap.dll'
30463d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff915e00000 'C:\WINDOWS\System32\winmm.dll'
30473d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff915e00000 'C:\WINDOWS\System32\winmm.dll'
30483d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff915e00000 'C:\WINDOWS\System32\winmm.dll'
30493d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff915e00000 'C:\WINDOWS\System32\winmm.dll'
30503d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff915e00000 'C:\WINDOWS\System32\winmm.dll'
30513d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff915e00000 'C:\WINDOWS\System32\winmm.dll'
30523d74.392c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmm.dll
30533d74.392c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\winmm.dll (Input=winmm.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
30543d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff915e00000 'C:\WINDOWS\System32\winmm.dll'
30553d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff915e00000 'C:\WINDOWS\System32\winmm.dll'
30563d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff915e00000 'C:\WINDOWS\System32\winmm.dll'
30573d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff915e00000 'C:\WINDOWS\System32\winmm.dll'
30583d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff915e00000 'C:\WINDOWS\System32\winmm.dll'
30593d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff915e00000 'C:\WINDOWS\System32\winmm.dll'
30603d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff915e00000 'C:\WINDOWS\System32\winmm.dll'
30613d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff915e00000 'C:\WINDOWS\System32\winmm.dll'
30623d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff915e00000 'C:\WINDOWS\System32\winmm.dll'
30633d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff915e00000 'C:\WINDOWS\System32\winmm.dll'
30643d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff915e00000 'C:\WINDOWS\System32\winmm.dll'
30653d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff915e00000 'C:\WINDOWS\System32\winmm.dll'
30663d74.392c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\dsound.dll
30673d74.392c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\dsound.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
30683d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8ac870000 'C:\WINDOWS\system32\dsound.dll'
30693d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff915e00000 'C:\WINDOWS\System32\winmm.dll'
30703d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff915e00000 'C:\WINDOWS\System32\winmm.dll'
30713d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff915e00000 'C:\WINDOWS\System32\winmm.dll'
30723d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff915e00000 'C:\WINDOWS\System32\winmm.dll'
30733d74.392c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\winmm.dll
30743d74.392c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\winmm.dll (Input=winmm.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
30753d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff915e00000 'C:\WINDOWS\System32\winmm.dll'
30763d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff915e00000 'C:\WINDOWS\System32\winmm.dll'
30773d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff915e00000 'C:\WINDOWS\System32\winmm.dll'
30783d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff915e00000 'C:\WINDOWS\System32\winmm.dll'
30793d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8ad2f0000 'C:\Program Files\Oracle\VirtualBox\VBoxVMM.DLL'
30803d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
30813d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9193c0000 'C:\WINDOWS\System32\crypt32.dll'
30823d74.392c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
30833d74.392c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'user32.dll'.
30843d74.392c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'win32u.dll'.
30853d74.392c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'gdi32.dll'.
30863d74.392c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'dwmapi.dll'.
30873d74.392c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\d3d9.dll) WinVerifyTrust
30883d74.392c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\d3d9.dll
30893d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'dwmapi.dll'...
30903d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: 'dwmapi.dll' -> '\Device\HarddiskVolume3\Windows\System32\dwmapi.dll' [rcNtRedir=0xc0150008]
30913d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
30923d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9193c0000 'C:\WINDOWS\System32\crypt32.dll'
30933d74.392c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
30943d74.392c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #21 'win32u.dll'.
30953d74.392c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #22 'user32.dll'.
30963d74.392c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #23 'gdi32.dll'.
30973d74.392c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\dwmapi.dll) WinVerifyTrust
30983d74.392c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\dwmapi.dll
30993d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
31003d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
31013d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
31023d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
31033d74.392c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\win32u.dll [redoing WinVerifyTrust]
31043d74.392c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\rsaenh.dll
31053d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
31063d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
31073d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
31083d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
31093d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
31103d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
31113d74.392c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\win32u.dll [lacks WinVerifyTrust]
31123d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
31133d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
31143d74.392c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
31153d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
31163d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9193c0000 'C:\WINDOWS\System32\crypt32.dll'
31173d74.392c: supR3HardenedScreenImage/Imports: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\win32u.dll'
31183d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
31193d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
31203d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
31213d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
31223d74.392c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\d3d9.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
31233d74.392c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\d3d9.dll
31243d74.392c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\dwmapi.dll
31253d74.392c: supR3HardenedDllNotificationCallback: load 00007ff916900000 LB 0x0002d000 C:\WINDOWS\SYSTEM32\dwmapi.dll [fFlags=0x0]
31263d74.392c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\dwmapi.dll
31273d74.392c: supR3HardenedDllNotificationCallback: load 00007ff9105a0000 LB 0x001c7000 C:\WINDOWS\system32\d3d9.dll [fFlags=0x0]
31283d74.392c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\d3d9.dll
31293d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9105a0000 'C:\WINDOWS\system32\d3d9.dll'
31303d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
31313d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9193c0000 'C:\WINDOWS\System32\crypt32.dll'
31323d74.392c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'advapi32.dll'.
31333d74.392c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'user32.dll'.
31343d74.392c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_8dc03618ea16fa9b\igdumdim64.dll) WinVerifyTrust
31353d74.392c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_8dc03618ea16fa9b\igdumdim64.dll
31363d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
31373d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
31383d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
31393d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
31403d74.392c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_8dc03618ea16fa9b\igdumdim64.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
31413d74.392c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_8dc03618ea16fa9b\igdumdim64.dll
31423d74.392c: supR3HardenedDllNotificationCallback: load 00007ff8ac6a0000 LB 0x001cd000 C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_8dc03618ea16fa9b\igdumdim64.dll [fFlags=0x0]
31433d74.392c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_8dc03618ea16fa9b\igdumdim64.dll
31443d74.392c: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-synch-l1-2-0) -> 0x0, fPresent=1
31453d74.392c: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-synch-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
31463d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff918f70000 'api-ms-win-core-synch-l1-2-0'
31473d74.392c: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-fibers-l1-1-1) -> 0x0, fPresent=1
31483d74.392c: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-fibers-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
31493d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff918f70000 'api-ms-win-core-fibers-l1-1-1'
31503d74.392c: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-synch-l1-2-0) -> 0x0, fPresent=1
31513d74.392c: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-synch-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
31523d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff918f70000 'api-ms-win-core-synch-l1-2-0'
31533d74.392c: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-fibers-l1-1-1) -> 0x0, fPresent=1
31543d74.392c: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-fibers-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
31553d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff918f70000 'api-ms-win-core-fibers-l1-1-1'
31563d74.392c: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-localization-l1-2-1) -> 0x0, fPresent=1
31573d74.392c: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-l1-2-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
31583d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff918f70000 'api-ms-win-core-localization-l1-2-1'
31593d74.392c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\kernel32.dll
31603d74.392c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\kernel32.dll (Input=kernel32, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
31613d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff91a9a0000 'C:\WINDOWS\System32\kernel32.dll'
31623d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8ac6a0000 'C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_8dc03618ea16fa9b\igdumdim64.dll'
31633d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
31643d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9193c0000 'C:\WINDOWS\System32\crypt32.dll'
31653d74.392c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'igdgmm64.dll'.
31663d74.392c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'advapi32.dll'.
31673d74.392c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'ole32.dll'.
31683d74.392c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'oleaut32.dll'.
31693d74.392c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_8dc03618ea16fa9b\igd9dxva64.dll) WinVerifyTrust
31703d74.392c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_8dc03618ea16fa9b\igd9dxva64.dll
31713d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
31723d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume3\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
31733d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
31743d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
31753d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
31763d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
31773d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'igdgmm64.dll'...
31783d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: 'igdgmm64.dll' -> '\Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_8dc03618ea16fa9b\igdgmm64.dll' [rcNtRedir=0xc0150008]
31793d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
31803d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9193c0000 'C:\WINDOWS\System32\crypt32.dll'
31813d74.392c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_8dc03618ea16fa9b\igdgmm64.dll) WinVerifyTrust
31823d74.392c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_8dc03618ea16fa9b\igdgmm64.dll
31833d74.392c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_8dc03618ea16fa9b\igd9dxva64.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
31843d74.392c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_8dc03618ea16fa9b\igd9dxva64.dll
31853d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0xc0000135 'C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_8dc03618ea16fa9b\igd9dxva64.dll'
31863d74.392c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_8dc03618ea16fa9b\igdgmm64.dll
31873d74.392c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_8dc03618ea16fa9b\igdgmm64.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
31883d74.392c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_8dc03618ea16fa9b\igdgmm64.dll
31893d74.392c: supR3HardenedDllNotificationCallback: load 00007ff90e5d0000 LB 0x00120000 C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_8dc03618ea16fa9b\igdgmm64.dll [fFlags=0x0]
31903d74.392c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_8dc03618ea16fa9b\igdgmm64.dll
31913d74.392c: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-synch-l1-2-0) -> 0x0, fPresent=1
31923d74.392c: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-synch-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
31933d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff918f70000 'api-ms-win-core-synch-l1-2-0'
31943d74.392c: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-fibers-l1-1-1) -> 0x0, fPresent=1
31953d74.392c: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-fibers-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
31963d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff918f70000 'api-ms-win-core-fibers-l1-1-1'
31973d74.392c: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-localization-l1-2-1) -> 0x0, fPresent=1
31983d74.392c: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-l1-2-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
31993d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff918f70000 'api-ms-win-core-localization-l1-2-1'
32003d74.392c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\kernel32.dll
32013d74.392c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\kernel32.dll (Input=kernel32, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
32023d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff91a9a0000 'C:\WINDOWS\System32\kernel32.dll'
32033d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90e5d0000 'C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_8dc03618ea16fa9b\igdgmm64.dll'
32043d74.392c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_8dc03618ea16fa9b\igd9dxva64.dll
32053d74.392c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_8dc03618ea16fa9b\igd9dxva64.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
32063d74.392c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_8dc03618ea16fa9b\igd9dxva64.dll
32073d74.392c: supR3HardenedDllNotificationCallback: load 00007ff8a7bc0000 LB 0x03c11000 C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_8dc03618ea16fa9b\igd9dxva64.dll [fFlags=0x0]
32083d74.392c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_8dc03618ea16fa9b\igd9dxva64.dll
32093d74.392c: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-synch-l1-2-0) -> 0x0, fPresent=1
32103d74.392c: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-synch-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
32113d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff918f70000 'api-ms-win-core-synch-l1-2-0'
32123d74.392c: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-fibers-l1-1-1) -> 0x0, fPresent=1
32133d74.392c: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-fibers-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
32143d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff918f70000 'api-ms-win-core-fibers-l1-1-1'
32153d74.392c: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-synch-l1-2-0) -> 0x0, fPresent=1
32163d74.392c: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-synch-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
32173d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff918f70000 'api-ms-win-core-synch-l1-2-0'
32183d74.392c: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-fibers-l1-1-1) -> 0x0, fPresent=1
32193d74.392c: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-fibers-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
32203d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff918f70000 'api-ms-win-core-fibers-l1-1-1'
32213d74.392c: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-localization-l1-2-1) -> 0x0, fPresent=1
32223d74.392c: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-l1-2-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
32233d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff918f70000 'api-ms-win-core-localization-l1-2-1'
32243d74.392c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\kernel32.dll
32253d74.392c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\kernel32.dll (Input=kernel32, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
32263d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff91a9a0000 'C:\WINDOWS\System32\kernel32.dll'
32273d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8a7bc0000 'C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_8dc03618ea16fa9b\igd9dxva64.dll'
32283d74.392c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_8dc03618ea16fa9b\igdgmm64.dll
32293d74.392c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_8dc03618ea16fa9b\igdgmm64.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
32303d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90e5d0000 'C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_8dc03618ea16fa9b\igdgmm64.dll'
32313d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff91b530000 'C:\WINDOWS\System32\gdi32.dll'
32323d74.392c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ntdll.dll
32333d74.392c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\ntdll.dll (Input=ntdll.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
32343d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff91b620000 'C:\WINDOWS\System32\ntdll.dll'
32353d74.392c: \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\nvami.inf_amd64_ca82942d5c881493\nvdlistx.dll: Owner is administrators group.
32363d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
32373d74.392c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'version.dll'.
32383d74.392c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'advapi32.dll'.
32393d74.392c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
32403d74.392c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\nvami.inf_amd64_ca82942d5c881493\nvdlistx.dll) WinVerifyTrust
32413d74.392c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\nvami.inf_amd64_ca82942d5c881493\nvdlistx.dll
32423d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
32433d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
32443d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
32453d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
32463d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'version.dll'...
32473d74.392c: supR3HardenedWinVerifyCacheProcessImportTodos: 'version.dll' -> '\Device\HarddiskVolume3\Windows\System32\version.dll' [rcNtRedir=0xc0150008]
32483d74.392c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\version.dll [redoing WinVerifyTrust]
32493d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
32503d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9193c0000 'C:\WINDOWS\System32\crypt32.dll'
32513d74.392c: supR3HardenedScreenImage/Imports: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\version.dll'
32523d74.392c: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\DriverStore\FileRepository\nvami.inf_amd64_ca82942d5c881493\nvdlistx.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
32533d74.392c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\nvami.inf_amd64_ca82942d5c881493\nvdlistx.dll
32543d74.392c: supR3HardenedDllNotificationCallback: load 00007ff8d3390000 LB 0x00032000 C:\WINDOWS\System32\DriverStore\FileRepository\nvami.inf_amd64_ca82942d5c881493\nvdlistx.dll [fFlags=0x0]
32553d74.392c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\nvami.inf_amd64_ca82942d5c881493\nvdlistx.dll
32563d74.392c: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-synch-l1-2-0) -> 0x0, fPresent=1
32573d74.392c: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-synch-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
32583d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff918f70000 'api-ms-win-core-synch-l1-2-0'
32593d74.392c: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-fibers-l1-1-1) -> 0x0, fPresent=1
32603d74.392c: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-fibers-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
32613d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff918f70000 'api-ms-win-core-fibers-l1-1-1'
32623d74.392c: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-synch-l1-2-0) -> 0x0, fPresent=1
32633d74.392c: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-synch-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
32643d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff918f70000 'api-ms-win-core-synch-l1-2-0'
32653d74.392c: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-fibers-l1-1-1) -> 0x0, fPresent=1
32663d74.392c: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-fibers-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
32673d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff918f70000 'api-ms-win-core-fibers-l1-1-1'
32683d74.392c: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-localization-l1-2-1) -> 0x0, fPresent=1
32693d74.392c: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-l1-2-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
32703d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff918f70000 'api-ms-win-core-localization-l1-2-1'
32713d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8d3390000 'C:\WINDOWS\System32\DriverStore\FileRepository\nvami.inf_amd64_ca82942d5c881493\nvdlistx.dll'
32723d74.392c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
32733d74.12b8: supR3HardenedDllNotificationCallback: Unload 00007ff8d3390000 LB 0x00032000 C:\WINDOWS\System32\DriverStore\FileRepository\nvami.inf_amd64_ca82942d5c881493\nvdlistx.dll [flags=0x0]
32743d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\dwmapi.dll
32753d74.2dbc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\dwmapi.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
32763d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff916900000 'C:\WINDOWS\system32\dwmapi.dll'
32773d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\opengl32.dll
32783d74.2dbc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\opengl32.dll (Input=opengl32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
32793d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8e2e60000 'C:\WINDOWS\System32\opengl32.dll'
32803d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\opengl32.dll
32813d74.2dbc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\OPENGL32.dll (Input=OPENGL32, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
32823d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8e2e60000 'C:\WINDOWS\System32\OPENGL32.dll'
32833d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff91b530000 'C:\WINDOWS\System32\gdi32.dll'
32843d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\nvami.inf_amd64_ca82942d5c881493\nvdlistx.dll
32853d74.2dbc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\DriverStore\FileRepository\nvami.inf_amd64_ca82942d5c881493\nvdlistx.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
32863d74.2dbc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\nvami.inf_amd64_ca82942d5c881493\nvdlistx.dll
32873d74.2dbc: supR3HardenedDllNotificationCallback: load 00007ff8a0a90000 LB 0x00032000 C:\WINDOWS\System32\DriverStore\FileRepository\nvami.inf_amd64_ca82942d5c881493\nvdlistx.dll [fFlags=0x0]
32883d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\nvami.inf_amd64_ca82942d5c881493\nvdlistx.dll
32893d74.2dbc: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-synch-l1-2-0) -> 0x0, fPresent=1
32903d74.2dbc: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-synch-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
32913d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff918f70000 'api-ms-win-core-synch-l1-2-0'
32923d74.2dbc: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-fibers-l1-1-1) -> 0x0, fPresent=1
32933d74.2dbc: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-fibers-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
32943d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff918f70000 'api-ms-win-core-fibers-l1-1-1'
32953d74.2dbc: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-synch-l1-2-0) -> 0x0, fPresent=1
32963d74.2dbc: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-synch-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
32973d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff918f70000 'api-ms-win-core-synch-l1-2-0'
32983d74.2dbc: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-fibers-l1-1-1) -> 0x0, fPresent=1
32993d74.2dbc: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-fibers-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
33003d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff918f70000 'api-ms-win-core-fibers-l1-1-1'
33013d74.2dbc: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-localization-l1-2-1) -> 0x0, fPresent=1
33023d74.2dbc: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-l1-2-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
33033d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff918f70000 'api-ms-win-core-localization-l1-2-1'
33043d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8a0a90000 'C:\WINDOWS\System32\DriverStore\FileRepository\nvami.inf_amd64_ca82942d5c881493\nvdlistx.dll'
33053d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff91b530000 'C:\WINDOWS\System32\gdi32.dll'
33063d74.14c0: supR3HardenedDllNotificationCallback: Unload 00007ff8a0a90000 LB 0x00032000 C:\WINDOWS\System32\DriverStore\FileRepository\nvami.inf_amd64_ca82942d5c881493\nvdlistx.dll [flags=0x0]
33073d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
33083d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wintrust.dll
33093d74.2dbc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\WINTRUST.DLL (Input=WINTRUST.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
33103d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9185b0000 'C:\WINDOWS\System32\WINTRUST.DLL'
33113d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9193c0000 'C:\WINDOWS\System32\CRYPT32.dll'
33123d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9193c0000 'C:\WINDOWS\System32\crypt32.dll'
33133d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'gdi32.dll'.
33143d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'advapi32.dll'.
33153d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
33163d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'shell32.dll'.
33173d74.2dbc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_8dc03618ea16fa9b\ig9icd64.dll) WinVerifyTrust
33183d74.2dbc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_8dc03618ea16fa9b\ig9icd64.dll
33193d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
33203d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume3\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
33213d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
33223d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
33233d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
33243d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
33253d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
33263d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
33273d74.2dbc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_8dc03618ea16fa9b\ig9icd64.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
33283d74.2dbc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_8dc03618ea16fa9b\ig9icd64.dll
33293d74.2dbc: supR3HardenedDllNotificationCallback: load 00007ff89f5b0000 LB 0x01004000 C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_8dc03618ea16fa9b\ig9icd64.dll [fFlags=0x0]
33303d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_8dc03618ea16fa9b\ig9icd64.dll
33313d74.2dbc: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-synch-l1-2-0) -> 0x0, fPresent=1
33323d74.2dbc: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-synch-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
33333d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff918f70000 'api-ms-win-core-synch-l1-2-0'
33343d74.2dbc: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-fibers-l1-1-1) -> 0x0, fPresent=1
33353d74.2dbc: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-fibers-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
33363d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff918f70000 'api-ms-win-core-fibers-l1-1-1'
33373d74.2dbc: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-synch-l1-2-0) -> 0x0, fPresent=1
33383d74.2dbc: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-synch-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
33393d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff918f70000 'api-ms-win-core-synch-l1-2-0'
33403d74.2dbc: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-fibers-l1-1-1) -> 0x0, fPresent=1
33413d74.2dbc: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-fibers-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
33423d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff918f70000 'api-ms-win-core-fibers-l1-1-1'
33433d74.2dbc: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-localization-l1-2-1) -> 0x0, fPresent=1
33443d74.2dbc: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-l1-2-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
33453d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff918f70000 'api-ms-win-core-localization-l1-2-1'
33463d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\kernel32.dll
33473d74.2dbc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\kernel32.dll (Input=kernel32, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
33483d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff91a9a0000 'C:\WINDOWS\System32\kernel32.dll'
33493d74.2dbc: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-string-l1-1-0) -> 0x0, fPresent=1
33503d74.2dbc: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-string-l1-1-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
33513d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff918f70000 'api-ms-win-core-string-l1-1-0'
33523d74.2dbc: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-datetime-l1-1-1) -> 0x0, fPresent=1
33533d74.2dbc: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-datetime-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
33543d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff918f70000 'api-ms-win-core-datetime-l1-1-1'
33553d74.2dbc: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-localization-obsolete-l1-2-0) -> 0x0, fPresent=1
33563d74.2dbc: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-obsolete-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
33573d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff918f70000 'api-ms-win-core-localization-obsolete-l1-2-0'
33583d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\opengl32.dll
33593d74.2dbc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\OpenGL32.dll (Input=OpenGL32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
33603d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8e2e60000 'C:\WINDOWS\System32\OpenGL32.dll'
33613d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff91b390000 'C:\WINDOWS\System32\User32.dll'
33623d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\dwmapi.dll
33633d74.2dbc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\dwmapi.dll (Input=dwmapi.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
33643d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff916900000 'C:\WINDOWS\System32\dwmapi.dll'
33653d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff91b530000 'C:\WINDOWS\System32\Gdi32.dll'
33663d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\dxgi.dll [redoing WinVerifyTrust]
33673d74.2dbc: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume3\Windows\System32\dxgi.dll'.
33683d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume3\Windows\System32\dxgi.dll
33693d74.2dbc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\dxgi.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
33703d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9171f0000 'C:\WINDOWS\system32\dxgi.dll'
33713d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff89f5b0000 'C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_8dc03618ea16fa9b\ig9icd64.dll'
33723d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff91b530000 'C:\WINDOWS\System32\gdi32.dll'
33733d74.2dbc: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(ext-ms-win-core-resourcepolicy-l1-1-0.dll) -> 0x0, fPresent=1
33743d74.2dbc: supR3HardenedMonitor_LdrLoadDll: pName=ext-ms-win-core-resourcepolicy-l1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
33753d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff916780000 'ext-ms-win-core-resourcepolicy-l1-1-0.dll'
33763d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff91b530000 'C:\WINDOWS\System32\gdi32.dll'
33773d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\nvami.inf_amd64_ca82942d5c881493\nvdlistx.dll
33783d74.2dbc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\DriverStore\FileRepository\nvami.inf_amd64_ca82942d5c881493\nvdlistx.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
33793d74.2dbc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\nvami.inf_amd64_ca82942d5c881493\nvdlistx.dll
33803d74.2dbc: supR3HardenedDllNotificationCallback: load 00007ff8a0a90000 LB 0x00032000 C:\WINDOWS\System32\DriverStore\FileRepository\nvami.inf_amd64_ca82942d5c881493\nvdlistx.dll [fFlags=0x0]
33813d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\nvami.inf_amd64_ca82942d5c881493\nvdlistx.dll
33823d74.2dbc: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-synch-l1-2-0) -> 0x0, fPresent=1
33833d74.2dbc: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-synch-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
33843d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff918f70000 'api-ms-win-core-synch-l1-2-0'
33853d74.2dbc: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-fibers-l1-1-1) -> 0x0, fPresent=1
33863d74.2dbc: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-fibers-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
33873d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff918f70000 'api-ms-win-core-fibers-l1-1-1'
33883d74.2dbc: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-synch-l1-2-0) -> 0x0, fPresent=1
33893d74.2dbc: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-synch-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
33903d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff918f70000 'api-ms-win-core-synch-l1-2-0'
33913d74.2dbc: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-fibers-l1-1-1) -> 0x0, fPresent=1
33923d74.2dbc: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-fibers-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
33933d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff918f70000 'api-ms-win-core-fibers-l1-1-1'
33943d74.2dbc: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-localization-l1-2-1) -> 0x0, fPresent=1
33953d74.2dbc: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-l1-2-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
33963d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff918f70000 'api-ms-win-core-localization-l1-2-1'
33973d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8a0a90000 'C:\WINDOWS\System32\DriverStore\FileRepository\nvami.inf_amd64_ca82942d5c881493\nvdlistx.dll'
33983d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff91b530000 'C:\WINDOWS\System32\gdi32.dll'
33993d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\opengl32.dll
34003d74.2dbc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\OPENGL32.dll (Input=OPENGL32, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
34013d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8e2e60000 'C:\WINDOWS\System32\OPENGL32.dll'
34023d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8e2e60000 'C:\WINDOWS\System32\OPENGL32.dll'
34033d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8e2e60000 'C:\WINDOWS\System32\OPENGL32.dll'
34043d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8e2e60000 'C:\WINDOWS\System32\OPENGL32.dll'
34053d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8e2e60000 'C:\WINDOWS\System32\OPENGL32.dll'
34063d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\version.dll
34073d74.2dbc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\version.dll (Input=version.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
34083d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff913520000 'C:\WINDOWS\System32\version.dll'
34093d74.1bd0: supR3HardenedDllNotificationCallback: Unload 00007ff8a0a90000 LB 0x00032000 C:\WINDOWS\System32\DriverStore\FileRepository\nvami.inf_amd64_ca82942d5c881493\nvdlistx.dll [flags=0x0]
34103d74.2dbc: supR3HardenedMonitor_LdrLoadDll: error opening 'C:\Program Files\Oracle\VirtualBox\igc64.dll': 0 (NtPath=\??\C:\Program Files\Oracle\VirtualBox\igc64.dll; Input=C:\Program Files\Oracle\VirtualBox\igc64.dll; rcNtGetDll=0x0
34113d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0xc0000034 'C:\Program Files\Oracle\VirtualBox\igc64.dll'
34123d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
34133d74.9dc: '\Device\HarddiskVolume3\Windows\System32\tzres.dll' has no imports
34143d74.9dc: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume3\Windows\System32\tzres.dll)
34153d74.9dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\tzres.dll
34163d74.9dc: supR3HardenedMonitor_NtCreateSection: NtMapViewOfSection failed on 00000000000013e4 (hFile=00000000000013e8) with 0xc0000022 -> STATUS_TRUST_FAILURE
34173d74.9dc: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume3\Windows\System32\tzres.dll [avoiding WinVerifyTrust]
34183d74.9dc: supR3HardenedMonitor_NtCreateSection: NtMapViewOfSection failed on 00000000000013e8 (hFile=00000000000013e4) with 0xc0000022 -> STATUS_TRUST_FAILURE
34193d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9193c0000 'C:\WINDOWS\System32\crypt32.dll'
34203d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'shell32.dll'.
34213d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'ole32.dll'.
34223d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'advapi32.dll'.
34233d74.2dbc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_8dc03618ea16fa9b\igc64.dll) WinVerifyTrust
34243d74.2dbc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_8dc03618ea16fa9b\igc64.dll
34253d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
34263d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
34273d74.2dbc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\advapi32.dll
34283d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
34293d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
34303d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
34313d74.2dbc: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume3\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
34323d74.2dbc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_8dc03618ea16fa9b\igc64.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
34333d74.2dbc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_8dc03618ea16fa9b\igc64.dll
34343d74.2dbc: supR3HardenedDllNotificationCallback: load 00007ff90bd40000 LB 0x02360000 C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_8dc03618ea16fa9b\igc64.dll [fFlags=0x0]
34353d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_8dc03618ea16fa9b\igc64.dll
34363d74.2dbc: Detected loader lock ownership: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume3\Windows\System32\tzres.dll'.
34373d74.2dbc: supR3HardenedWinVerifyCacheProcessWvtTodos: 22900 (was 22900) fWinVerifyTrust=0 for '\Device\HarddiskVolume3\Windows\System32\tzres.dll' [rescheduled]
34383d74.2dbc: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-synch-l1-2-0) -> 0x0, fPresent=1
34393d74.2dbc: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-synch-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
34403d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff918f70000 'api-ms-win-core-synch-l1-2-0'
34413d74.2dbc: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-fibers-l1-1-1) -> 0x0, fPresent=1
34423d74.2dbc: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-fibers-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
34433d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff918f70000 'api-ms-win-core-fibers-l1-1-1'
34443d74.2dbc: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-localization-l1-2-1) -> 0x0, fPresent=1
34453d74.2dbc: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-l1-2-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
34463d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff918f70000 'api-ms-win-core-localization-l1-2-1'
34473d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff91a9a0000 'C:\WINDOWS\System32\kernel32.dll'
34483d74.2dbc: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-string-l1-1-0) -> 0x0, fPresent=1
34493d74.2dbc: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-string-l1-1-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
34503d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff918f70000 'api-ms-win-core-string-l1-1-0'
34513d74.2dbc: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-datetime-l1-1-1) -> 0x0, fPresent=1
34523d74.2dbc: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-datetime-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
34533d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff918f70000 'api-ms-win-core-datetime-l1-1-1'
34543d74.2dbc: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-localization-obsolete-l1-2-0) -> 0x0, fPresent=1
34553d74.2dbc: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-obsolete-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
34563d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff918f70000 'api-ms-win-core-localization-obsolete-l1-2-0'
34573d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90bd40000 'C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_8dc03618ea16fa9b\igc64.dll'
34583d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8e2e60000 'C:\WINDOWS\System32\OPENGL32.dll'
34593d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_8dc03618ea16fa9b\ig9icd64.dll
34603d74.2dbc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_8dc03618ea16fa9b\ig9icd64.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
34613d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff89f5b0000 'C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_8dc03618ea16fa9b\ig9icd64.dll'
34623d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8e2e60000 'C:\WINDOWS\System32\OPENGL32.dll'
34633d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8e2e60000 'C:\WINDOWS\System32\OPENGL32.dll'
34643d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\opengl32.dll
34653d74.2dbc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\OPENGL32.dll (Input=OPENGL32, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
34663d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8e2e60000 'C:\WINDOWS\System32\OPENGL32.dll'
34673d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8e2e60000 'C:\WINDOWS\System32\OPENGL32.dll'
34683d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8e2e60000 'C:\WINDOWS\System32\OPENGL32.dll'
34693d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8e2e60000 'C:\WINDOWS\System32\OPENGL32.dll'
34703d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8e2e60000 'C:\WINDOWS\System32\OPENGL32.dll'
34713d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8e2e60000 'C:\WINDOWS\System32\OPENGL32.dll'
34723d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8e2e60000 'C:\WINDOWS\System32\OPENGL32.dll'
34733d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8e2e60000 'C:\WINDOWS\System32\OPENGL32.dll'
34743d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8e2e60000 'C:\WINDOWS\System32\OPENGL32.dll'
34753d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8e2e60000 'C:\WINDOWS\System32\OPENGL32.dll'
34763d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8e2e60000 'C:\WINDOWS\System32\OPENGL32.dll'
34773d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8e2e60000 'C:\WINDOWS\System32\OPENGL32.dll'
34783d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8e2e60000 'C:\WINDOWS\System32\OPENGL32.dll'
34793d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8e2e60000 'C:\WINDOWS\System32\OPENGL32.dll'
34803d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8e2e60000 'C:\WINDOWS\System32\OPENGL32.dll'
34813d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8e2e60000 'C:\WINDOWS\System32\OPENGL32.dll'
34823d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\opengl32.dll
34833d74.2dbc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\OPENGL32.dll (Input=OPENGL32, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
34843d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8e2e60000 'C:\WINDOWS\System32\OPENGL32.dll'
34853d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8e2e60000 'C:\WINDOWS\System32\OPENGL32.dll'
34863d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8e2e60000 'C:\WINDOWS\System32\OPENGL32.dll'
34873d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8e2e60000 'C:\WINDOWS\System32\OPENGL32.dll'
34883d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8e2e60000 'C:\WINDOWS\System32\OPENGL32.dll'
34893d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8e2e60000 'C:\WINDOWS\System32\OPENGL32.dll'
34903d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8e2e60000 'C:\WINDOWS\System32\OPENGL32.dll'
34913d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8e2e60000 'C:\WINDOWS\System32\OPENGL32.dll'
34923d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8e2e60000 'C:\WINDOWS\System32\OPENGL32.dll'
34933d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8e2e60000 'C:\WINDOWS\System32\OPENGL32.dll'
34943d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8e2e60000 'C:\WINDOWS\System32\OPENGL32.dll'
34953d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8e2e60000 'C:\WINDOWS\System32\OPENGL32.dll'
34963d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8e2e60000 'C:\WINDOWS\System32\OPENGL32.dll'
34973d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8e2e60000 'C:\WINDOWS\System32\OPENGL32.dll'
34983d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8e2e60000 'C:\WINDOWS\System32\OPENGL32.dll'
34993d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8e2e60000 'C:\WINDOWS\System32\OPENGL32.dll'
35003d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8e2e60000 'C:\WINDOWS\System32\OPENGL32.dll'
35013d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8e2e60000 'C:\WINDOWS\System32\OPENGL32.dll'
35023d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8e2e60000 'C:\WINDOWS\System32\OPENGL32.dll'
35033d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8e2e60000 'C:\WINDOWS\System32\OPENGL32.dll'
35043d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8e2e60000 'C:\WINDOWS\System32\OPENGL32.dll'
35053d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8e2e60000 'C:\WINDOWS\System32\OPENGL32.dll'
35063d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8e2e60000 'C:\WINDOWS\System32\OPENGL32.dll'
35073d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8e2e60000 'C:\WINDOWS\System32\OPENGL32.dll'
35083d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8e2e60000 'C:\WINDOWS\System32\OPENGL32.dll'
35093d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8e2e60000 'C:\WINDOWS\System32\OPENGL32.dll'
35103d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8e2e60000 'C:\WINDOWS\System32\OPENGL32.dll'
35113d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8e2e60000 'C:\WINDOWS\System32\OPENGL32.dll'
35123d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8e2e60000 'C:\WINDOWS\System32\OPENGL32.dll'
35133d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8e2e60000 'C:\WINDOWS\System32\OPENGL32.dll'
35143d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8e2e60000 'C:\WINDOWS\System32\OPENGL32.dll'
35153d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8e2e60000 'C:\WINDOWS\System32\OPENGL32.dll'
35163d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\opengl32.dll
35173d74.2dbc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\OPENGL32.dll (Input=OPENGL32, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
35183d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8e2e60000 'C:\WINDOWS\System32\OPENGL32.dll'
35193d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8e2e60000 'C:\WINDOWS\System32\OPENGL32.dll'
35203d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8e2e60000 'C:\WINDOWS\System32\OPENGL32.dll'
35213d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8e2e60000 'C:\WINDOWS\System32\OPENGL32.dll'
35223d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8e2e60000 'C:\WINDOWS\System32\OPENGL32.dll'
35233d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8e2e60000 'C:\WINDOWS\System32\OPENGL32.dll'
35243d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8e2e60000 'C:\WINDOWS\System32\OPENGL32.dll'
35253d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8e2e60000 'C:\WINDOWS\System32\OPENGL32.dll'
35263d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8e2e60000 'C:\WINDOWS\System32\OPENGL32.dll'
35273d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8e2e60000 'C:\WINDOWS\System32\OPENGL32.dll'
35283d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8e2e60000 'C:\WINDOWS\System32\OPENGL32.dll'
35293d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8e2e60000 'C:\WINDOWS\System32\OPENGL32.dll'
35303d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8e2e60000 'C:\WINDOWS\System32\OPENGL32.dll'
35313d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8e2e60000 'C:\WINDOWS\System32\OPENGL32.dll'
35323d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8e2e60000 'C:\WINDOWS\System32\OPENGL32.dll'
35333d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8e2e60000 'C:\WINDOWS\System32\OPENGL32.dll'
35343d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8e2e60000 'C:\WINDOWS\System32\OPENGL32.dll'
35353d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8e2e60000 'C:\WINDOWS\System32\OPENGL32.dll'
35363d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8e2e60000 'C:\WINDOWS\System32\OPENGL32.dll'
35373d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8e2e60000 'C:\WINDOWS\System32\OPENGL32.dll'
35383d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8e2e60000 'C:\WINDOWS\System32\OPENGL32.dll'
35393d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8e2e60000 'C:\WINDOWS\System32\OPENGL32.dll'
35403d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8e2e60000 'C:\WINDOWS\System32\OPENGL32.dll'
35413d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8e2e60000 'C:\WINDOWS\System32\OPENGL32.dll'
35423d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8e2e60000 'C:\WINDOWS\System32\OPENGL32.dll'
35433d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8e2e60000 'C:\WINDOWS\System32\OPENGL32.dll'
35443d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8e2e60000 'C:\WINDOWS\System32\OPENGL32.dll'
35453d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8e2e60000 'C:\WINDOWS\System32\OPENGL32.dll'
35463d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8e2e60000 'C:\WINDOWS\System32\OPENGL32.dll'
35473d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8e2e60000 'C:\WINDOWS\System32\OPENGL32.dll'
35483d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8e2e60000 'C:\WINDOWS\System32\OPENGL32.dll'
35493d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8e2e60000 'C:\WINDOWS\System32\OPENGL32.dll'
35503d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\msctf.dll
35513d74.2dbc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\MSCTF.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
35523d74.2dbc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff91ab40000 'C:\WINDOWS\System32\MSCTF.dll'
35533d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
35543d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #15 'rpcrt4.dll'.
35553d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #19 'coreuicomponents.dll'.
35563d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #20 'coremessaging.dll'.
35573d74.2dbc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\TextInputFramework.dll)
35583d74.2dbc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\TextInputFramework.dll
35593d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
35603d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #35 'coremessaging.dll'.
35613d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #47 'shcore.dll'.
35623d74.2dbc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\CoreUIComponents.dll)
35633d74.2dbc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\CoreUIComponents.dll
35643d74.2dbc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
35653d74.2dbc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\CoreMessaging.dll)
35663d74.2dbc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\CoreMessaging.dll
35673d74.2dbc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\ntmarta.dll)
35683d74.2dbc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\ntmarta.dll
35693d74.2dbc: supR3HardenedDllNotificationCallback: load 00007ff917660000 LB 0x00031000 C:\WINDOWS\SYSTEM32\ntmarta.dll [fFlags=0x0]
35703d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\ntmarta.dll [avoiding WinVerifyTrust]
35713d74.2dbc: supR3HardenedDllNotificationCallback: load 00007ff915bc0000 LB 0x000d4000 C:\WINDOWS\System32\CoreMessaging.dll [fFlags=0x0]
35723d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\CoreMessaging.dll [avoiding WinVerifyTrust]
35733d74.2dbc: supR3HardenedDllNotificationCallback: load 00007ff912cd0000 LB 0x0032a000 C:\WINDOWS\System32\CoreUIComponents.dll [fFlags=0x0]
35743d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\CoreUIComponents.dll [avoiding WinVerifyTrust]
35753d74.2dbc: supR3HardenedDllNotificationCallback: load 00007ff910b40000 LB 0x0009e000 C:\WINDOWS\System32\TextInputFramework.dll [fFlags=0x0]
35763d74.2dbc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\TextInputFramework.dll [avoiding WinVerifyTrust]
35773d74.3dd8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
35783d74.3dd8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
35793d74.3dd8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shcore.dll'...
35803d74.3dd8: supR3HardenedWinVerifyCacheProcessImportTodos: 'shcore.dll' -> '\Device\HarddiskVolume3\Windows\System32\shcore.dll' [rcNtRedir=0xc0150008]
35813d74.3dd8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\SHCore.dll
35823d74.3dd8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'coremessaging.dll'...
35833d74.3dd8: supR3HardenedWinVerifyCacheProcessImportTodos: 'coremessaging.dll' -> '\Device\HarddiskVolume3\Windows\System32\coremessaging.dll' [rcNtRedir=0xc0150008]
35843d74.3dd8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\CoreMessaging.dll [lacks WinVerifyTrust]
35853d74.3dd8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
35863d74.3dd8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
35873d74.3dd8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'coremessaging.dll'...
35883d74.3dd8: supR3HardenedWinVerifyCacheProcessImportTodos: 'coremessaging.dll' -> '\Device\HarddiskVolume3\Windows\System32\coremessaging.dll' [rcNtRedir=0xc0150008]
35893d74.3dd8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\CoreMessaging.dll [lacks WinVerifyTrust]
35903d74.3dd8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'coreuicomponents.dll'...
35913d74.3dd8: supR3HardenedWinVerifyCacheProcessImportTodos: 'coreuicomponents.dll' -> '\Device\HarddiskVolume3\Windows\System32\coreuicomponents.dll' [rcNtRedir=0xc0150008]
35923d74.3dd8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\CoreUIComponents.dll [lacks WinVerifyTrust]
35933d74.3dd8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
35943d74.3dd8: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
35953d74.3dd8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
35963d74.3dd8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
35973d74.3dd8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
35983d74.3dd8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9193c0000 'C:\WINDOWS\System32\crypt32.dll'
35993d74.3dd8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\ntmarta.dll'
36003d74.3dd8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
36013d74.3dd8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9193c0000 'C:\WINDOWS\System32\crypt32.dll'
36023d74.3dd8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\CoreMessaging.dll'
36033d74.3dd8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
36043d74.3dd8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9193c0000 'C:\WINDOWS\System32\crypt32.dll'
36053d74.3dd8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\CoreUIComponents.dll'
36063d74.3dd8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
36073d74.3dd8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9193c0000 'C:\WINDOWS\System32\crypt32.dll'
36083d74.3dd8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume3\Windows\System32\TextInputFramework.dll'
36093d74.3dd8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\dsound.dll
36103d74.3dd8: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\dsound.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
36113d74.3dd8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8ac870000 'C:\WINDOWS\system32\dsound.dll'
36123d74.3dd8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff915e00000 'C:\WINDOWS\System32\winmm.dll'
36133d74.3dd8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff915e00000 'C:\WINDOWS\System32\winmm.dll'
36143d74.3dd8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff915e00000 'C:\WINDOWS\System32\winmm.dll'
36153d74.3dd8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff915e00000 'C:\WINDOWS\System32\winmm.dll'
36163d74.3dd8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff915e00000 'C:\WINDOWS\System32\winmm.dll'
36173d74.3dd8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff915e00000 'C:\WINDOWS\System32\winmm.dll'
36183d74.3dd8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff915e00000 'C:\WINDOWS\System32\winmm.dll'
36193d74.3dd8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff915e00000 'C:\WINDOWS\System32\winmm.dll'
36203d74.2d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
36213d74.2d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9193c0000 'C:\WINDOWS\System32\crypt32.dll'
36223d74.2d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
36233d74.2d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'rpcrt4.dll'.
36243d74.2d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #18 'combase.dll'.
36253d74.2d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #21 'shcore.dll'.
36263d74.2d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #22 'textinputframework.dll'.
36273d74.2d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #23 'inputhost.dll'.
36283d74.2d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #42 'user32.dll'.
36293d74.2d4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\Windows.UI.dll) WinVerifyTrust
36303d74.2d4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\Windows.UI.dll
36313d74.2d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
36323d74.2d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume3\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
36333d74.2d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'inputhost.dll'...
36343d74.2d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'inputhost.dll' -> '\Device\HarddiskVolume3\Windows\System32\inputhost.dll' [rcNtRedir=0xc0150008]
36353d74.2d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
36363d74.2d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9193c0000 'C:\WINDOWS\System32\crypt32.dll'
36373d74.2d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcp_win.dll'.
36383d74.2d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'coremessaging.dll'.
36393d74.2d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #40 'coreuicomponents.dll'.
36403d74.2d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #44 'propsys.dll'.
36413d74.2d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #46 'shcore.dll'.
36423d74.2d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #47 'win32u.dll'.
36433d74.2d4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #50 'combase.dll'.
36443d74.2d4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\InputHost.dll) WinVerifyTrust
36453d74.2d4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\InputHost.dll
36463d74.2d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'textinputframework.dll'...
36473d74.2d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'textinputframework.dll' -> '\Device\HarddiskVolume3\Windows\System32\textinputframework.dll' [rcNtRedir=0xc0150008]
36483d74.2d4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\TextInputFramework.dll
36493d74.2d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shcore.dll'...
36503d74.2d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'shcore.dll' -> '\Device\HarddiskVolume3\Windows\System32\shcore.dll' [rcNtRedir=0xc0150008]
36513d74.2d4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\SHCore.dll
36523d74.2d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
36533d74.2d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
36543d74.2d4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\combase.dll
36553d74.2d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
36563d74.2d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
36573d74.2d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
36583d74.2d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
36593d74.2d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
36603d74.2d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume3\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
36613d74.2d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
36623d74.2d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume3\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
36633d74.2d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shcore.dll'...
36643d74.2d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'shcore.dll' -> '\Device\HarddiskVolume3\Windows\System32\shcore.dll' [rcNtRedir=0xc0150008]
36653d74.2d4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\SHCore.dll
36663d74.2d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'propsys.dll'...
36673d74.2d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'propsys.dll' -> '\Device\HarddiskVolume3\Windows\System32\propsys.dll' [rcNtRedir=0xc0150008]
36683d74.2d4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\propsys.dll
36693d74.2d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'coreuicomponents.dll'...
36703d74.2d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'coreuicomponents.dll' -> '\Device\HarddiskVolume3\Windows\System32\coreuicomponents.dll' [rcNtRedir=0xc0150008]
36713d74.2d4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\CoreUIComponents.dll
36723d74.2d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'coremessaging.dll'...
36733d74.2d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'coremessaging.dll' -> '\Device\HarddiskVolume3\Windows\System32\coremessaging.dll' [rcNtRedir=0xc0150008]
36743d74.2d4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\CoreMessaging.dll
36753d74.2d4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
36763d74.2d4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume3\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
36773d74.2d4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\Windows.UI.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
36783d74.2d4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\Windows.UI.dll
36793d74.2d4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\InputHost.dll
36803d74.2d4: supR3HardenedDllNotificationCallback: load 00007ff90e190000 LB 0x00102000 C:\Windows\System32\InputHost.dll [fFlags=0x0]
36813d74.2d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\InputHost.dll
36823d74.2d4: supR3HardenedDllNotificationCallback: load 00007ff90e470000 LB 0x00151000 C:\Windows\System32\Windows.UI.dll [fFlags=0x0]
36833d74.2d4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\Windows.UI.dll
36843d74.2d4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90e470000 'C:\Windows\System32\Windows.UI.dll'
36853d74.28e0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\avrt.dll
36863d74.28e0: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\avrt.dll (Input=avrt.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
36873d74.28e0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff913a00000 'C:\WINDOWS\System32\avrt.dll'
36883d74.9dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
36893d74.9dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9193c0000 'C:\WINDOWS\System32\crypt32.dll'
36903d74.9dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'ws2_32.dll'.
36913d74.9dc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #22 'rpcrt4.dll'.
36923d74.9dc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\mswsock.dll) WinVerifyTrust
36933d74.9dc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\mswsock.dll
36943d74.9dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
36953d74.9dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume3\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
36963d74.9dc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
36973d74.9dc: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume3\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
36983d74.9dc: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\mswsock.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
36993d74.9dc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\mswsock.dll
37003d74.9dc: supR3HardenedDllNotificationCallback: load 00007ff917d60000 LB 0x00067000 C:\WINDOWS\system32\mswsock.dll [fFlags=0x0]
37013d74.9dc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\mswsock.dll
37023d74.9dc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff917d60000 'C:\WINDOWS\system32\mswsock.dll'
37033d74.730: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_8dc03618ea16fa9b\igdumdim64.dll
37043d74.730: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_8dc03618ea16fa9b\igdumdim64.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
37053d74.730: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8ac6a0000 'C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_8dc03618ea16fa9b\igdumdim64.dll'
37063d74.730: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_8dc03618ea16fa9b\igd9dxva64.dll
37073d74.730: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_8dc03618ea16fa9b\igd9dxva64.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
37083d74.730: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8a7bc0000 'C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_8dc03618ea16fa9b\igd9dxva64.dll'
37093d74.730: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_8dc03618ea16fa9b\igdgmm64.dll
37103d74.730: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_8dc03618ea16fa9b\igdgmm64.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
37113d74.730: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90e5d0000 'C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_8dc03618ea16fa9b\igdgmm64.dll'
37123d74.730: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_8dc03618ea16fa9b\igd9dxva64.dll
37133d74.730: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_8dc03618ea16fa9b\igd9dxva64.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
37143d74.730: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8a7bc0000 'C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_8dc03618ea16fa9b\igd9dxva64.dll'
37153d74.730: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_8dc03618ea16fa9b\igdgmm64.dll
37163d74.730: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_8dc03618ea16fa9b\igdgmm64.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
37173d74.730: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90e5d0000 'C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_8dc03618ea16fa9b\igdgmm64.dll'
37183d74.730: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(ext-ms-win-core-resourcepolicy-l1-1-0.dll) -> 0x0, fPresent=1
37193d74.730: supR3HardenedMonitor_LdrLoadDll: pName=ext-ms-win-core-resourcepolicy-l1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
37203d74.730: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff916780000 'ext-ms-win-core-resourcepolicy-l1-1-0.dll'
37213d74.730: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_8dc03618ea16fa9b\igdumdim64.dll
37223d74.730: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_8dc03618ea16fa9b\igdumdim64.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
37233d74.730: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8ac6a0000 'C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_8dc03618ea16fa9b\igdumdim64.dll'
37243d74.730: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_8dc03618ea16fa9b\igd9dxva64.dll
37253d74.730: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_8dc03618ea16fa9b\igd9dxva64.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
37263d74.730: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8a7bc0000 'C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_8dc03618ea16fa9b\igd9dxva64.dll'
37273d74.730: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_8dc03618ea16fa9b\igdgmm64.dll
37283d74.730: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_8dc03618ea16fa9b\igdgmm64.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
37293d74.730: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90e5d0000 'C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_8dc03618ea16fa9b\igdgmm64.dll'
37303d74.730: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_8dc03618ea16fa9b\igd9dxva64.dll
37313d74.730: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_8dc03618ea16fa9b\igd9dxva64.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
37323d74.730: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8a7bc0000 'C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_8dc03618ea16fa9b\igd9dxva64.dll'
37333d74.730: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_8dc03618ea16fa9b\igdgmm64.dll
37343d74.730: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_8dc03618ea16fa9b\igdgmm64.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
37353d74.730: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90e5d0000 'C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_8dc03618ea16fa9b\igdgmm64.dll'
37363d74.730: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9178d0000 'C:\WINDOWS\system32\rsaenh.dll'
37373d74.730: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\wintrust.dll
37383d74.730: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\WINTRUST.DLL (Input=WINTRUST.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
37393d74.730: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9185b0000 'C:\WINDOWS\System32\WINTRUST.DLL'
37403d74.730: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9193c0000 'C:\WINDOWS\System32\CRYPT32.dll'
37413d74.730: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9193c0000 'C:\WINDOWS\System32\crypt32.dll'
37423d74.730: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'advapi32.dll'.
37433d74.730: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_8dc03618ea16fa9b\igdinfo64.dll) WinVerifyTrust
37443d74.730: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_8dc03618ea16fa9b\igdinfo64.dll
37453d74.730: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
37463d74.730: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume3\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
37473d74.730: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_8dc03618ea16fa9b\igdinfo64.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
37483d74.730: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_8dc03618ea16fa9b\igdinfo64.dll
37493d74.730: supR3HardenedDllNotificationCallback: load 00007ff8fca20000 LB 0x00021000 C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_8dc03618ea16fa9b\igdinfo64.dll [fFlags=0x0]
37503d74.730: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_8dc03618ea16fa9b\igdinfo64.dll
37513d74.730: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-synch-l1-2-0) -> 0x0, fPresent=1
37523d74.730: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-synch-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
37533d74.730: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff918f70000 'api-ms-win-core-synch-l1-2-0'
37543d74.730: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-fibers-l1-1-1) -> 0x0, fPresent=1
37553d74.730: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-fibers-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
37563d74.730: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff918f70000 'api-ms-win-core-fibers-l1-1-1'
37573d74.730: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-localization-l1-2-1) -> 0x0, fPresent=1
37583d74.730: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-l1-2-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
37593d74.730: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff918f70000 'api-ms-win-core-localization-l1-2-1'
37603d74.730: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff91a9a0000 'C:\WINDOWS\System32\kernel32.dll'
37613d74.730: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8fca20000 'C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_8dc03618ea16fa9b\igdinfo64.dll'
37623d74.730: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_8dc03618ea16fa9b\igc64.dll
37633d74.730: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_8dc03618ea16fa9b\igc64.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
37643d74.730: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90bd40000 'C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_8dc03618ea16fa9b\igc64.dll'
37653d74.730: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\d3d9.dll
37663d74.730: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\d3d9.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
37673d74.730: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9105a0000 'C:\WINDOWS\system32\d3d9.dll'
37683d74.730: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_8dc03618ea16fa9b\igdumdim64.dll
37693d74.730: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_8dc03618ea16fa9b\igdumdim64.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
37703d74.730: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8ac6a0000 'C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_8dc03618ea16fa9b\igdumdim64.dll'
37713d74.730: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8a7bc0000 'C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_8dc03618ea16fa9b\igd9dxva64.dll'
37723d74.730: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90e5d0000 'C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_8dc03618ea16fa9b\igdgmm64.dll'
37733d74.730: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8a7bc0000 'C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_8dc03618ea16fa9b\igd9dxva64.dll'
37743d74.730: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90e5d0000 'C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_8dc03618ea16fa9b\igdgmm64.dll'
37753d74.730: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_8dc03618ea16fa9b\igdumdim64.dll
37763d74.730: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_8dc03618ea16fa9b\igdumdim64.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
37773d74.730: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8ac6a0000 'C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_8dc03618ea16fa9b\igdumdim64.dll'
37783d74.730: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8a7bc0000 'C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_8dc03618ea16fa9b\igd9dxva64.dll'
37793d74.730: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90e5d0000 'C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_8dc03618ea16fa9b\igdgmm64.dll'
37803d74.730: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8a7bc0000 'C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_8dc03618ea16fa9b\igd9dxva64.dll'
37813d74.730: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90e5d0000 'C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_8dc03618ea16fa9b\igdgmm64.dll'
37823d74.730: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_8dc03618ea16fa9b\igc64.dll
37833d74.730: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_8dc03618ea16fa9b\igc64.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
37843d74.730: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90bd40000 'C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_8dc03618ea16fa9b\igc64.dll'
37853d74.730: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\d3d9.dll
37863d74.730: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\d3d9.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
37873d74.730: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9105a0000 'C:\WINDOWS\system32\d3d9.dll'
37883d74.730: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_8dc03618ea16fa9b\igdumdim64.dll
37893d74.730: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_8dc03618ea16fa9b\igdumdim64.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
37903d74.730: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8ac6a0000 'C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_8dc03618ea16fa9b\igdumdim64.dll'
37913d74.730: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8a7bc0000 'C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_8dc03618ea16fa9b\igd9dxva64.dll'
37923d74.730: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90e5d0000 'C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_8dc03618ea16fa9b\igdgmm64.dll'
37933d74.730: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8a7bc0000 'C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_8dc03618ea16fa9b\igd9dxva64.dll'
37943d74.730: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90e5d0000 'C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_8dc03618ea16fa9b\igdgmm64.dll'
37953d74.730: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_8dc03618ea16fa9b\igdumdim64.dll
37963d74.730: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_8dc03618ea16fa9b\igdumdim64.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
37973d74.730: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8ac6a0000 'C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_8dc03618ea16fa9b\igdumdim64.dll'
37983d74.730: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8a7bc0000 'C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_8dc03618ea16fa9b\igd9dxva64.dll'
37993d74.730: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90e5d0000 'C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_8dc03618ea16fa9b\igdgmm64.dll'
38003d74.730: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_8dc03618ea16fa9b\igd9dxva64.dll
38013d74.730: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_8dc03618ea16fa9b\igd9dxva64.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
38023d74.730: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff8a7bc0000 'C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_8dc03618ea16fa9b\igd9dxva64.dll'
38033d74.730: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_8dc03618ea16fa9b\igdgmm64.dll
38043d74.730: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_8dc03618ea16fa9b\igdgmm64.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
38053d74.730: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90e5d0000 'C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_8dc03618ea16fa9b\igdgmm64.dll'
38063d74.730: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_8dc03618ea16fa9b\igc64.dll
38073d74.730: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_8dc03618ea16fa9b\igc64.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
38083d74.730: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff90bd40000 'C:\WINDOWS\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_8dc03618ea16fa9b\igc64.dll'
38093d74.730: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume3\Windows\System32\d3d9.dll
38103d74.730: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\d3d9.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
38113d74.730: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9105a0000 'C:\WINDOWS\system32\d3d9.dll'
38123d74.730: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(ext-ms-win-kernel32-errorhandling-l1-1-0.dll) -> 0x0, fPresent=1
38133d74.730: supR3HardenedMonitor_LdrLoadDll: pName=ext-ms-win-kernel32-errorhandling-l1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
38143d74.730: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff91a9a0000 'ext-ms-win-kernel32-errorhandling-l1-1-0.dll'
3815314c.27b8: supR3HardNtChildWaitFor[2]: Quitting: ExitCode=0xc000001d (rcNtWait=0x0, rcNt1=0x0, rcNt2=0x103, rcNt3=0x103, 204853 ms, the end);
38162540.210c: supR3HardNtChildWaitFor[1]: Quitting: ExitCode=0xc000001d (rcNtWait=0x0, rcNt1=0x0, rcNt2=0x103, rcNt3=0x103, 205298 ms, the end);

© 2024 Oracle Support Privacy / Do Not Sell My Info Terms of Use Trademark Policy Automated Access Etiquette