VirtualBox

Ticket #19720: VBoxHardening.log

File VBoxHardening.log, 495.4 KB (added by OakBricks, 4 years ago)

Hardening Log

Line 
11498.1004: Log file opened: 6.1.8r137981 g_hStartupLog=0000000000000074 g_uNtVerCombined=0xa047bb00
21498.1004: \SystemRoot\System32\ntdll.dll:
31498.1004: CreationTime: 2020-04-21T22:28:49.105703400Z
41498.1004: LastWriteTime: 2020-04-21T22:28:49.151106600Z
51498.1004: ChangeTime: 2020-06-10T13:29:37.479836800Z
61498.1004: FileAttributes: 0x20
71498.1004: Size: 0x1e8460
81498.1004: NT Headers: 0xd8
91498.1004: Timestamp: 0xb29ecf52
101498.1004: Machine: 0x8664 - amd64
111498.1004: Timestamp: 0xb29ecf52
121498.1004: Image Version: 10.0
131498.1004: SizeOfImage: 0x1f0000 (2031616)
141498.1004: Resource Dir: 0x17f000 LB 0x6f310
151498.1004: [Version info resource found at 0xd8! (ID/Name: 0x1; SubID/SubName: 0x409)]
161498.1004: [Raw version resource data: 0x17f0f0 LB 0x380, codepage 0x0 (reserved 0x0)]
171498.1004: ProductName: Microsoft® Windows® Operating System
181498.1004: ProductVersion: 10.0.18362.815
191498.1004: FileVersion: 10.0.18362.815 (WinBuild.160101.0800)
201498.1004: FileDescription: NT Layer DLL
211498.1004: \SystemRoot\System32\kernel32.dll:
221498.1004: CreationTime: 2020-06-10T13:28:49.989937000Z
231498.1004: LastWriteTime: 2020-06-10T13:28:50.005566500Z
241498.1004: ChangeTime: 2020-06-10T13:32:25.443799800Z
251498.1004: FileAttributes: 0x20
261498.1004: Size: 0xb0498
271498.1004: NT Headers: 0xe8
281498.1004: Timestamp: 0xce6bbd73
291498.1004: Machine: 0x8664 - amd64
301498.1004: Timestamp: 0xce6bbd73
311498.1004: Image Version: 10.0
321498.1004: SizeOfImage: 0xb2000 (729088)
331498.1004: Resource Dir: 0xb0000 LB 0x520
341498.1004: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
351498.1004: [Raw version resource data: 0xb00b0 LB 0x3a4, codepage 0x0 (reserved 0x0)]
361498.1004: ProductName: Microsoft® Windows® Operating System
371498.1004: ProductVersion: 10.0.18362.900
381498.1004: FileVersion: 10.0.18362.900 (WinBuild.160101.0800)
391498.1004: FileDescription: Windows NT BASE API Client DLL
401498.1004: \SystemRoot\System32\KernelBase.dll:
411498.1004: CreationTime: 2020-04-21T22:28:49.748931800Z
421498.1004: LastWriteTime: 2020-04-21T22:28:49.824426800Z
431498.1004: ChangeTime: 2020-06-10T13:29:37.479836800Z
441498.1004: FileAttributes: 0x20
451498.1004: Size: 0x2a4068
461498.1004: NT Headers: 0xf8
471498.1004: Timestamp: 0xb89efff3
481498.1004: Machine: 0x8664 - amd64
491498.1004: Timestamp: 0xb89efff3
501498.1004: Image Version: 10.0
511498.1004: SizeOfImage: 0x2a4000 (2768896)
521498.1004: Resource Dir: 0x27e000 LB 0x548
531498.1004: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
541498.1004: [Raw version resource data: 0x27e0b0 LB 0x3bc, codepage 0x0 (reserved 0x0)]
551498.1004: ProductName: Microsoft® Windows® Operating System
561498.1004: ProductVersion: 10.0.18362.815
571498.1004: FileVersion: 10.0.18362.815 (WinBuild.160101.0800)
581498.1004: FileDescription: Windows NT BASE API Client DLL
591498.1004: \SystemRoot\System32\apisetschema.dll:
601498.1004: CreationTime: 2019-03-19T04:43:54.837151500Z
611498.1004: LastWriteTime: 2019-03-19T04:43:54.837151500Z
621498.1004: ChangeTime: 2020-06-10T13:29:37.229761200Z
631498.1004: FileAttributes: 0x20
641498.1004: Size: 0x1d028
651498.1004: NT Headers: 0xc8
661498.1004: Timestamp: 0xd6ced080
671498.1004: Machine: 0x8664 - amd64
681498.1004: Timestamp: 0xd6ced080
691498.1004: Image Version: 10.0
701498.1004: SizeOfImage: 0x1e000 (122880)
711498.1004: Resource Dir: 0x1d000 LB 0x408
721498.1004: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
731498.1004: [Raw version resource data: 0x1d060 LB 0x3a8, codepage 0x0 (reserved 0x0)]
741498.1004: ProductName: Microsoft® Windows® Operating System
751498.1004: ProductVersion: 10.0.18362.1
761498.1004: FileVersion: 10.0.18362.1 (WinBuild.160101.0800)
771498.1004: FileDescription: ApiSet Schema DLL
781498.1004: NtOpenDirectoryObject failed on \Driver: 0xc0000022
791498.1004: supR3HardenedWinFindAdversaries: 0x0
801498.1004: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox'
811498.1004: Calling main()
821498.1004: SUPR3HardenedMain: pszProgName=VirtualBoxVM fFlags=0x2
831498.1004: supR3HardenedWinInitAppBin(0x2): '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox'
841498.1004: SUPR3HardenedMain: Respawn #1
851498.1004: System32: \Device\HarddiskVolume4\Windows\System32
861498.1004: WinSxS: \Device\HarddiskVolume4\Windows\WinSxS
871498.1004: KnownDllPath: C:\windows\System32
881498.1004: supR3HardenedWinInit: Performing a limited self purification...
891498.1004: supHardNtVpScanVirtualMemory: enmKind=SELF_PURIFICATION
901498.1004: *0000000000000000-0000000000acffff 0x0001/0x0000 0x0000000
911498.1004: *0000000000ad0000-0000000000adffff 0x0004/0x0004 0x0040000
921498.1004: 0000000000ae0000-0000000000aeffff 0x0001/0x0000 0x0000000
931498.1004: *0000000000af0000-0000000000b0afff 0x0002/0x0002 0x0040000
941498.1004: 0000000000b0b000-0000000000b0ffff 0x0001/0x0000 0x0000000
951498.1004: *0000000000b10000-0000000000b13fff 0x0002/0x0002 0x0040000
961498.1004: 0000000000b14000-0000000000b1ffff 0x0001/0x0000 0x0000000
971498.1004: *0000000000b20000-0000000000b21fff 0x0004/0x0004 0x0020000
981498.1004: 0000000000b22000-0000000000b2ffff 0x0001/0x0000 0x0000000
991498.1004: *0000000000b30000-0000000000bf6fff 0x0002/0x0002 0x0040000
1001498.1004: 0000000000bf7000-0000000000bfffff 0x0001/0x0000 0x0000000
1011498.1004: *0000000000c00000-0000000000dc8fff 0x0000/0x0004 0x0020000
1021498.1004: 0000000000dc9000-0000000000dcbfff 0x0004/0x0004 0x0020000
1031498.1004: 0000000000dcc000-0000000000dfffff 0x0000/0x0004 0x0020000
1041498.1004: *0000000000e00000-0000000000eb8fff 0x0000/0x0004 0x0020000
1051498.1004: 0000000000eb9000-0000000000ebbfff 0x0104/0x0004 0x0020000
1061498.1004: 0000000000ebc000-0000000000efffff 0x0004/0x0004 0x0020000
1071498.1004: *0000000000f00000-0000000000f01fff 0x0004/0x0004 0x0020000
1081498.1004: 0000000000f02000-0000000000f31fff 0x0000/0x0004 0x0020000
1091498.1004: 0000000000f32000-0000000000f6ffff 0x0001/0x0000 0x0000000
1101498.1004: *0000000000f70000-0000000000f7efff 0x0004/0x0004 0x0020000
1111498.1004: 0000000000f7f000-0000000000f7ffff 0x0000/0x0004 0x0020000
1121498.1004: 0000000000f80000-0000000000f9ffff 0x0001/0x0000 0x0000000
1131498.1004: *0000000000fa0000-0000000000fa4fff 0x0004/0x0004 0x0020000
1141498.1004: 0000000000fa5000-000000000109ffff 0x0000/0x0004 0x0020000
1151498.1004: *00000000010a0000-00000000010a2fff 0x0000/0x0004 0x0020000
1161498.1004: 00000000010a3000-0000000001293fff 0x0004/0x0004 0x0020000
1171498.1004: 0000000001294000-0000000001294fff 0x0000/0x0004 0x0020000
1181498.1004: 0000000001295000-000000000129ffff 0x0001/0x0000 0x0000000
1191498.1004: *00000000012a0000-00000000012bcfff 0x0004/0x0004 0x0020000
1201498.1004: 00000000012bd000-000000000139ffff 0x0000/0x0004 0x0020000
1211498.1004: 00000000013a0000-000000007ffdffff 0x0001/0x0000 0x0000000
1221498.1004: *000000007ffe0000-000000007ffe0fff 0x0002/0x0002 0x0020000
1231498.1004: 000000007ffe1000-000000007ffe8fff 0x0001/0x0000 0x0000000
1241498.1004: *000000007ffe9000-000000007ffe9fff 0x0002/0x0002 0x0020000
1251498.1004: 000000007ffea000-00007ff4bf54ffff 0x0001/0x0000 0x0000000
1261498.1004: *00007ff4bf550000-00007ff4bf554fff 0x0002/0x0002 0x0040000
1271498.1004: 00007ff4bf555000-00007ff4bf64ffff 0x0000/0x0002 0x0040000
1281498.1004: *00007ff4bf650000-00007ff5bf66ffff 0x0000/0x0004 0x0020000
1291498.1004: *00007ff5bf670000-00007ff5c166ffff 0x0000/0x0004 0x0020000
1301498.1004: 00007ff5c1670000-00007ff5c1670fff 0x0004/0x0004 0x0020000
1311498.1004: 00007ff5c1671000-00007ff5c167ffff 0x0001/0x0000 0x0000000
1321498.1004: *00007ff5c1680000-00007ff5c1680fff 0x0002/0x0002 0x0040000
1331498.1004: 00007ff5c1681000-00007ff5c168ffff 0x0001/0x0000 0x0000000
1341498.1004: *00007ff5c1690000-00007ff5c16b2fff 0x0002/0x0002 0x0040000
1351498.1004: 00007ff5c16b3000-00007ff6aff4ffff 0x0001/0x0000 0x0000000
1361498.1004: *00007ff6aff50000-00007ff6aff50fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
1371498.1004: 00007ff6aff51000-00007ff6affc6fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
1381498.1004: 00007ff6affc7000-00007ff6affc7fff 0x0080/0x0080 0x1000000 \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
1391498.1004: 00007ff6affc8000-00007ff6b000ffff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
1401498.1004: 00007ff6b0010000-00007ff6b0012fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
1411498.1004: 00007ff6b0013000-00007ff6b0015fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
1421498.1004: 00007ff6b0016000-00007ff6b0018fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
1431498.1004: 00007ff6b0019000-00007ff6b0019fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
1441498.1004: 00007ff6b001a000-00007ff6b001bfff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
1451498.1004: 00007ff6b001c000-00007ff6b001cfff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
1461498.1004: 00007ff6b001d000-00007ff6b0065fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
1471498.1004: 00007ff6b0066000-00007ffa1628ffff 0x0001/0x0000 0x0000000
1481498.1004: *00007ffa16290000-00007ffa16290fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\KernelBase.dll
1491498.1004: 00007ffa16291000-00007ffa16395fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\KernelBase.dll
1501498.1004: 00007ffa16396000-00007ffa164f8fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\KernelBase.dll
1511498.1004: 00007ffa164f9000-00007ffa164fcfff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\KernelBase.dll
1521498.1004: 00007ffa164fd000-00007ffa164fdfff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\KernelBase.dll
1531498.1004: 00007ffa164fe000-00007ffa16533fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\KernelBase.dll
1541498.1004: 00007ffa16534000-00007ffa174cffff 0x0001/0x0000 0x0000000
1551498.1004: *00007ffa174d0000-00007ffa174d0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\kernel32.dll
1561498.1004: 00007ffa174d1000-00007ffa17545fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\kernel32.dll
1571498.1004: 00007ffa17546000-00007ffa17577fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\kernel32.dll
1581498.1004: 00007ffa17578000-00007ffa17578fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\kernel32.dll
1591498.1004: 00007ffa17579000-00007ffa17579fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\kernel32.dll
1601498.1004: 00007ffa1757a000-00007ffa17581fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\kernel32.dll
1611498.1004: 00007ffa17582000-00007ffa1869ffff 0x0001/0x0000 0x0000000
1621498.1004: *00007ffa186a0000-00007ffa186a0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll
1631498.1004: 00007ffa186a1000-00007ffa187b7fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll
1641498.1004: 00007ffa187b8000-00007ffa187fefff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll
1651498.1004: 00007ffa187ff000-00007ffa187fffff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll
1661498.1004: 00007ffa18800000-00007ffa18801fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll
1671498.1004: 00007ffa18802000-00007ffa1880afff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll
1681498.1004: 00007ffa1880b000-00007ffa1888ffff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll
1691498.1004: 00007ffa18890000-00007ffffffeffff 0x0001/0x0000 0x0000000
1701498.1004: kernel32.dll: timestamp 0xce6bbd73 (rc=VINF_SUCCESS)
1711498.1004: kernelbase.dll: timestamp 0xb89efff3 (rc=VINF_SUCCESS)
1721498.1004: VirtualBoxVM.exe: timestamp 0x5ebd9c8a (rc=VINF_SUCCESS)
1731498.1004: '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe' has no imports
1741498.1004: '\Device\HarddiskVolume4\Windows\System32\ntdll.dll' has no imports
1751498.1004: supR3HardenedWinInit: SUPHARDNTVPKIND_SELF_PURIFICATION_LIMITED -> VINF_SUCCESS, cFixes=0
1761498.1004: '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe' has no imports
1771498.1004: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe)
1781498.1004: supR3HardNtEnableThreadCreationEx:
1791498.1004: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007ffa18711770 pvNtTerminateThread=00007ffa1873cac0
1801498.1004: supR3HardenedWinDoReSpawn(1): New child 1ca0.3360 [kernel32].
1811498.1004: supR3HardNtChildGatherData: PebBaseAddress=00000000011c0000 cbPeb=0x388
1821498.1004: supR3HardNtPuChFindNtdll: uNtDllParentAddr=00007ffa186a0000 uNtDllChildAddr=00007ffa186a0000
1831498.1004: supR3HardenedWinSetupChildInit: uLdrInitThunk=00007ffa18711770
1841498.1004: supR3HardenedWinSetupChildInit: Initial context:
185 rax=0000000000000000 rbx=0000000000000000 rcx=00007ff6aff57900 rdx=00000000011c0000
186 rsi=0000000000000000 rdi=0000000000000000 r8 =0000000000000000 r9 =0000000000000000
187 r10=0000000000000000 r11=0000000000000000 r12=0000000000000000 r13=0000000000000000
188 r14=0000000000000000 r15=0000000000000000 P1=0000000000000000 P2=0000000000000000
189 rip=00007ffa1870ce30 rsp=000000000131ff98 rbp=0000000000000000 ctxflags=0010001b
190 cs=0033 ss=002b ds=0000 es=0000 fs=0000 gs=0000 eflags=00000200 mxcrx=00001f80
191 P3=0000000000000000 P4=0000000000000000 P5=0000000000000000 P6=0000000000000000
192 dr0=0000000000000000 dr1=0000000000000000 dr2=0000000000000000 dr3=0000000000000000
193 dr6=0000000000000000 dr7=0000000000000000 vcr=0000000000000000 dcr=0000000000000000
194 lbt=0000000000000000 lbf=0000000000000000 lxt=0000000000000000 lxf=0000000000000000
1951498.1004: supR3HardenedWinSetupChildInit: Start child.
1961498.1004: supR3HardNtChildWaitFor: Found expected request 0 (PurifyChildAndCloseHandles) after 0 ms.
1971498.1004: supR3HardNtChildPurify: Startup delay kludge #1/0: 266 ms, 16 sleeps
1981498.1004: supHardNtVpScanVirtualMemory: enmKind=CHILD_PURIFICATION
1991498.1004: *0000000000000000-0000000000fcffff 0x0001/0x0000 0x0000000
2001498.1004: *0000000000fd0000-0000000000feffff 0x0004/0x0004 0x0020000
2011498.1004: *0000000000ff0000-0000000000ff3fff 0x0002/0x0002 0x0040000
2021498.1004: 0000000000ff4000-0000000000ffffff 0x0001/0x0000 0x0000000
2031498.1004: *0000000001000000-00000000011bffff 0x0000/0x0004 0x0020000
2041498.1004: 00000000011c0000-00000000011c2fff 0x0004/0x0004 0x0020000
2051498.1004: 00000000011c3000-00000000011fffff 0x0000/0x0004 0x0020000
2061498.1004: *0000000001200000-000000000121afff 0x0002/0x0002 0x0040000
2071498.1004: 000000000121b000-000000000121ffff 0x0001/0x0000 0x0000000
2081498.1004: *0000000001220000-000000000131afff 0x0000/0x0004 0x0020000
2091498.1004: 000000000131b000-000000000131dfff 0x0104/0x0004 0x0020000
2101498.1004: 000000000131e000-000000000131ffff 0x0004/0x0004 0x0020000
2111498.1004: *0000000001320000-0000000001321fff 0x0004/0x0004 0x0020000
2121498.1004: 0000000001322000-000000007ffdffff 0x0001/0x0000 0x0000000
2131498.1004: *000000007ffe0000-000000007ffe0fff 0x0002/0x0002 0x0020000
2141498.1004: 000000007ffe1000-000000007ffe8fff 0x0001/0x0000 0x0000000
2151498.1004: *000000007ffe9000-000000007ffe9fff 0x0002/0x0002 0x0020000
2161498.1004: 000000007ffea000-00007ff53740ffff 0x0001/0x0000 0x0000000
2171498.1004: *00007ff537410000-00007ff537410fff 0x0002/0x0002 0x0040000
2181498.1004: 00007ff537411000-00007ff53741ffff 0x0001/0x0000 0x0000000
2191498.1004: *00007ff537420000-00007ff537442fff 0x0002/0x0002 0x0040000
2201498.1004: 00007ff537443000-00007ff6aff4ffff 0x0001/0x0000 0x0000000
2211498.1004: *00007ff6aff50000-00007ff6aff50fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
2221498.1004: 00007ff6aff51000-00007ff6affc6fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
2231498.1004: 00007ff6affc7000-00007ff6affc7fff 0x0080/0x0080 0x1000000 \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
2241498.1004: 00007ff6affc8000-00007ff6b000ffff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
2251498.1004: 00007ff6b0010000-00007ff6b0010fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
2261498.1004: 00007ff6b0011000-00007ff6b0011fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
2271498.1004: 00007ff6b0012000-00007ff6b0016fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
2281498.1004: 00007ff6b0017000-00007ff6b0017fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
2291498.1004: 00007ff6b0018000-00007ff6b0018fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
2301498.1004: 00007ff6b0019000-00007ff6b001cfff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
2311498.1004: 00007ff6b001d000-00007ff6b0065fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
2321498.1004: 00007ff6b0066000-00007ffa1869ffff 0x0001/0x0000 0x0000000
2331498.1004: *00007ffa186a0000-00007ffa186a0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll
2341498.1004: 00007ffa186a1000-00007ffa187b7fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll
2351498.1004: 00007ffa187b8000-00007ffa187fefff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll
2361498.1004: 00007ffa187ff000-00007ffa1880afff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll
2371498.1004: 00007ffa1880b000-00007ffa18819fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll
2381498.1004: 00007ffa1881a000-00007ffa1881afff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll
2391498.1004: 00007ffa1881b000-00007ffa1881dfff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll
2401498.1004: 00007ffa1881e000-00007ffa1888ffff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll
2411498.1004: 00007ffa18890000-00007ffffffeffff 0x0001/0x0000 0x0000000
2421498.1004: supR3HardNtChildPurify: Done after 271 ms and 0 fixes (loop #0).
2431ca0.3360: Log file opened: 6.1.8r137981 g_hStartupLog=0000000000000004 g_uNtVerCombined=0xa047bb00
2441ca0.3360: supR3HardenedVmProcessInit: uNtDllAddr=00007ffa186a0000 g_uNtVerCombined=0xa047bb00 (stack ~000000000131fa28)
2451ca0.3360: ntdll.dll: timestamp 0xb29ecf52 (rc=VINF_SUCCESS)
2461ca0.3360: New simple heap: #1 0000000001430000 LB 0x400000 (for 2031616 allocation)
2471498.1004: supR3HardNtEnableThreadCreationEx:
2481ca0.3360: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox'
2491ca0.3360: System32: \Device\HarddiskVolume4\Windows\System32
2501ca0.3360: WinSxS: \Device\HarddiskVolume4\Windows\WinSxS
2511ca0.3360: KnownDllPath: C:\windows\System32
2521ca0.3360: supR3HardenedVmProcessInit: Opening vboxdrv stub...
2531ca0.3360: supR3HardenedVmProcessInit: Restoring LdrInitializeThunk...
2541ca0.3360: supR3HardenedVmProcessInit: Returning to LdrInitializeThunk...
2551ca0.3360: Registered Dll notification callback with NTDLL.
2561ca0.3360: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\kernel32.dll)
2571ca0.3360: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\kernel32.dll
2581ca0.3360: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\System32\KERNEL32.DLL (Input=KERNEL32.DLL, rcNtResolve=0xc0150008) *pfFlags=0xffffffff pwszSearchPath=0000000000004001:<flags> [calling]
2591ca0.3360: supR3HardenedDllNotificationCallback: load 00007ffa16290000 LB 0x002a4000 C:\windows\System32\KERNELBASE.dll [fFlags=0x0]
2601ca0.3360: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\KernelBase.dll)
2611ca0.3360: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\KernelBase.dll
2621ca0.3360: supR3HardenedDllNotificationCallback: load 00007ffa174d0000 LB 0x000b2000 C:\windows\System32\KERNEL32.DLL [fFlags=0x0]
2631ca0.3360: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
2641ca0.3360: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa174d0000 'C:\windows\System32\KERNEL32.DLL'
2651ca0.3360: supR3HardenedDllNotificationCallback: load 00007ff6aff50000 LB 0x00116000 D:\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe [fFlags=0x0]
2661ca0.3360: '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe' has no imports
2671ca0.3360: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe)
2681ca0.3360: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
2691ca0.3360: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007ffa18711770 pvNtTerminateThread=00007ffa1873cac0
2701498.1004: supR3HardNtChildWaitFor: Found expected request 1 (CloseEvents) after 93 ms.
2711ca0.3360: \SystemRoot\System32\ntdll.dll:
2721ca0.3360: CreationTime: 2020-04-21T22:28:49.105703400Z
2731ca0.3360: LastWriteTime: 2020-04-21T22:28:49.151106600Z
2741ca0.3360: ChangeTime: 2020-06-10T13:29:37.479836800Z
2751ca0.3360: FileAttributes: 0x20
2761ca0.3360: Size: 0x1e8460
2771ca0.3360: NT Headers: 0xd8
2781ca0.3360: Timestamp: 0xb29ecf52
2791ca0.3360: Machine: 0x8664 - amd64
2801ca0.3360: Timestamp: 0xb29ecf52
2811ca0.3360: Image Version: 10.0
2821ca0.3360: SizeOfImage: 0x1f0000 (2031616)
2831ca0.3360: Resource Dir: 0x17f000 LB 0x6f310
2841ca0.3360: [Version info resource found at 0xd8! (ID/Name: 0x1; SubID/SubName: 0x409)]
2851ca0.3360: [Raw version resource data: 0x17f0f0 LB 0x380, codepage 0x0 (reserved 0x0)]
2861ca0.3360: ProductName: Microsoft® Windows® Operating System
2871ca0.3360: ProductVersion: 10.0.18362.815
2881ca0.3360: FileVersion: 10.0.18362.815 (WinBuild.160101.0800)
2891ca0.3360: FileDescription: NT Layer DLL
2901ca0.3360: \SystemRoot\System32\kernel32.dll:
2911ca0.3360: CreationTime: 2020-06-10T13:28:49.989937000Z
2921ca0.3360: LastWriteTime: 2020-06-10T13:28:50.005566500Z
2931ca0.3360: ChangeTime: 2020-06-10T13:32:25.443799800Z
2941ca0.3360: FileAttributes: 0x20
2951ca0.3360: Size: 0xb0498
2961ca0.3360: NT Headers: 0xe8
2971ca0.3360: Timestamp: 0xce6bbd73
2981ca0.3360: Machine: 0x8664 - amd64
2991ca0.3360: Timestamp: 0xce6bbd73
3001ca0.3360: Image Version: 10.0
3011ca0.3360: SizeOfImage: 0xb2000 (729088)
3021ca0.3360: Resource Dir: 0xb0000 LB 0x520
3031ca0.3360: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
3041ca0.3360: [Raw version resource data: 0xb00b0 LB 0x3a4, codepage 0x0 (reserved 0x0)]
3051ca0.3360: ProductName: Microsoft® Windows® Operating System
3061ca0.3360: ProductVersion: 10.0.18362.900
3071ca0.3360: FileVersion: 10.0.18362.900 (WinBuild.160101.0800)
3081ca0.3360: FileDescription: Windows NT BASE API Client DLL
3091ca0.3360: \SystemRoot\System32\KernelBase.dll:
3101ca0.3360: CreationTime: 2020-04-21T22:28:49.748931800Z
3111ca0.3360: LastWriteTime: 2020-04-21T22:28:49.824426800Z
3121ca0.3360: ChangeTime: 2020-06-10T13:29:37.479836800Z
3131ca0.3360: FileAttributes: 0x20
3141ca0.3360: Size: 0x2a4068
3151ca0.3360: NT Headers: 0xf8
3161ca0.3360: Timestamp: 0xb89efff3
3171ca0.3360: Machine: 0x8664 - amd64
3181ca0.3360: Timestamp: 0xb89efff3
3191ca0.3360: Image Version: 10.0
3201ca0.3360: SizeOfImage: 0x2a4000 (2768896)
3211ca0.3360: Resource Dir: 0x27e000 LB 0x548
3221ca0.3360: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
3231ca0.3360: [Raw version resource data: 0x27e0b0 LB 0x3bc, codepage 0x0 (reserved 0x0)]
3241ca0.3360: ProductName: Microsoft® Windows® Operating System
3251ca0.3360: ProductVersion: 10.0.18362.815
3261ca0.3360: FileVersion: 10.0.18362.815 (WinBuild.160101.0800)
3271ca0.3360: FileDescription: Windows NT BASE API Client DLL
3281ca0.3360: \SystemRoot\System32\apisetschema.dll:
3291ca0.3360: CreationTime: 2019-03-19T04:43:54.837151500Z
3301ca0.3360: LastWriteTime: 2019-03-19T04:43:54.837151500Z
3311ca0.3360: ChangeTime: 2020-06-10T13:29:37.229761200Z
3321ca0.3360: FileAttributes: 0x20
3331ca0.3360: Size: 0x1d028
3341ca0.3360: NT Headers: 0xc8
3351ca0.3360: Timestamp: 0xd6ced080
3361ca0.3360: Machine: 0x8664 - amd64
3371ca0.3360: Timestamp: 0xd6ced080
3381ca0.3360: Image Version: 10.0
3391ca0.3360: SizeOfImage: 0x1e000 (122880)
3401ca0.3360: Resource Dir: 0x1d000 LB 0x408
3411ca0.3360: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
3421ca0.3360: [Raw version resource data: 0x1d060 LB 0x3a8, codepage 0x0 (reserved 0x0)]
3431ca0.3360: ProductName: Microsoft® Windows® Operating System
3441ca0.3360: ProductVersion: 10.0.18362.1
3451ca0.3360: FileVersion: 10.0.18362.1 (WinBuild.160101.0800)
3461ca0.3360: FileDescription: ApiSet Schema DLL
3471ca0.3360: NtOpenDirectoryObject failed on \Driver: 0xc0000022
3481ca0.3360: supR3HardenedWinFindAdversaries: 0x0
3491ca0.3360: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox'
3501ca0.3360: Calling main()
3511ca0.3360: SUPR3HardenedMain: pszProgName=VirtualBoxVM fFlags=0x2
3521ca0.3360: supR3HardenedWinInitAppBin(0x2): '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox'
3531ca0.3360: '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe' has no imports
3541ca0.3360: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe)
3551ca0.3360: SUPR3HardenedMain: Respawn #2
3561ca0.3360: supR3HardNtEnableThreadCreationEx:
3571ca0.3360: supR3HardenedDllNotificationCallback: load 00007ffa18180000 LB 0x00120000 C:\windows\System32\RPCRT4.dll [fFlags=0x0]
3581ca0.3360: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll)
3591ca0.3360: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll
3601ca0.3360: supR3HardenedDllNotificationCallback: load 00007ffa16810000 LB 0x00097000 C:\windows\System32\sechost.dll [fFlags=0x0]
3611ca0.3360: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'rpcrt4.dll'.
3621ca0.3360: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\sechost.dll)
3631ca0.3360: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\sechost.dll
3641ca0.3360: '\Device\HarddiskVolume4\Windows\System32\ntdll.dll' has no imports
3651ca0.3360: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\ntdll.dll)
3661ca0.3360: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\ntdll.dll
3671ca0.3360: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
3681ca0.3360: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
3691ca0.3360: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
3701ca0.3360: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\System32\ntdll.dll (Input=ntdll.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
3711ca0.3360: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa186a0000 'C:\windows\System32\ntdll.dll'
3721ca0.3360: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007ffa18711770 pvNtTerminateThread=00007ffa1873cac0
3731ca0.3360: supR3HardenedWinDoReSpawn(2): New child 2354.760 [kernel32].
3741ca0.3360: supR3HardenedWinReSpawn: NtSetInformationThread/ThreadHideFromDebugger failed: 0xc0000022 (harmless)
3751ca0.3360: supR3HardNtChildGatherData: PebBaseAddress=00000000003e4000 cbPeb=0x388
3761ca0.3360: supR3HardNtPuChFindNtdll: uNtDllParentAddr=00007ffa186a0000 uNtDllChildAddr=00007ffa186a0000
3771ca0.3360: supR3HardenedWinSetupChildInit: uLdrInitThunk=00007ffa18711770
3781ca0.3360: supR3HardenedWinSetupChildInit: Initial context:
379 rax=0000000000000000 rbx=0000000000000000 rcx=00007ff6aff57900 rdx=00000000003e4000
380 rsi=0000000000000000 rdi=0000000000000000 r8 =0000000000000000 r9 =0000000000000000
381 r10=0000000000000000 r11=0000000000000000 r12=0000000000000000 r13=0000000000000000
382 r14=0000000000000000 r15=0000000000000000 P1=0000000000000000 P2=0000000000000000
383 rip=00007ffa1870ce30 rsp=00000000004ff7f8 rbp=0000000000000000 ctxflags=0010001b
384 cs=0033 ss=002b ds=0000 es=0000 fs=0000 gs=0000 eflags=00000200 mxcrx=00001f80
385 P3=0000000000000000 P4=0000000000000000 P5=0000000000000000 P6=0000000000000000
386 dr0=0000000000000000 dr1=0000000000000000 dr2=0000000000000000 dr3=0000000000000000
387 dr6=0000000000000000 dr7=0000000000000000 vcr=0000000000000000 dcr=0000000000000000
388 lbt=0000000000000000 lbf=0000000000000000 lxt=0000000000000000 lxf=0000000000000000
3891ca0.3360: kernel32.dll: timestamp 0xce6bbd73 (rc=VINF_SUCCESS)
3901ca0.3360: supR3HardenedWinSetupChildInit: Start child.
3911ca0.3360: supR3HardNtChildWaitFor: Found expected request 0 (PurifyChildAndCloseHandles) after 0 ms.
3921ca0.3360: supR3HardNtChildPurify: Startup delay kludge #1/0: 266 ms, 17 sleeps
3931ca0.3360: supHardNtVpScanVirtualMemory: enmKind=CHILD_PURIFICATION
3941ca0.3360: *0000000000000000-00000000000effff 0x0001/0x0000 0x0000000
3951ca0.3360: *00000000000f0000-000000000010ffff 0x0004/0x0004 0x0020000
3961ca0.3360: *0000000000110000-000000000012afff 0x0002/0x0002 0x0040000
3971ca0.3360: 000000000012b000-000000000012ffff 0x0001/0x0000 0x0000000
3981ca0.3360: *0000000000130000-0000000000133fff 0x0002/0x0002 0x0040000
3991ca0.3360: 0000000000134000-000000000013ffff 0x0001/0x0000 0x0000000
4001ca0.3360: *0000000000140000-0000000000141fff 0x0004/0x0004 0x0020000
4011ca0.3360: 0000000000142000-00000000001fffff 0x0001/0x0000 0x0000000
4021ca0.3360: *0000000000200000-00000000003e3fff 0x0000/0x0004 0x0020000
4031ca0.3360: 00000000003e4000-00000000003e6fff 0x0004/0x0004 0x0020000
4041ca0.3360: 00000000003e7000-00000000003fffff 0x0000/0x0004 0x0020000
4051ca0.3360: *0000000000400000-00000000004fafff 0x0000/0x0004 0x0020000
4061ca0.3360: 00000000004fb000-00000000004fdfff 0x0104/0x0004 0x0020000
4071ca0.3360: 00000000004fe000-00000000004fffff 0x0004/0x0004 0x0020000
4081ca0.3360: 0000000000500000-000000007ffdffff 0x0001/0x0000 0x0000000
4091ca0.3360: *000000007ffe0000-000000007ffe0fff 0x0002/0x0002 0x0020000
4101ca0.3360: 000000007ffe1000-000000007ffe8fff 0x0001/0x0000 0x0000000
4111ca0.3360: *000000007ffe9000-000000007ffe9fff 0x0002/0x0002 0x0020000
4121ca0.3360: 000000007ffea000-00007ff559feffff 0x0001/0x0000 0x0000000
4131ca0.3360: *00007ff559ff0000-00007ff559ff0fff 0x0002/0x0002 0x0040000
4141ca0.3360: 00007ff559ff1000-00007ff559ffffff 0x0001/0x0000 0x0000000
4151ca0.3360: *00007ff55a000000-00007ff55a022fff 0x0002/0x0002 0x0040000
4161ca0.3360: 00007ff55a023000-00007ff6aff4ffff 0x0001/0x0000 0x0000000
4171ca0.3360: *00007ff6aff50000-00007ff6aff50fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
4181ca0.3360: 00007ff6aff51000-00007ff6affc6fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
4191ca0.3360: 00007ff6affc7000-00007ff6affc7fff 0x0080/0x0080 0x1000000 \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
4201ca0.3360: 00007ff6affc8000-00007ff6b000ffff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
4211ca0.3360: 00007ff6b0010000-00007ff6b0010fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
4221ca0.3360: 00007ff6b0011000-00007ff6b0011fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
4231ca0.3360: 00007ff6b0012000-00007ff6b0016fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
4241ca0.3360: 00007ff6b0017000-00007ff6b0017fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
4251ca0.3360: 00007ff6b0018000-00007ff6b0018fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
4261ca0.3360: 00007ff6b0019000-00007ff6b001cfff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
4271ca0.3360: 00007ff6b001d000-00007ff6b0065fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
4281ca0.3360: 00007ff6b0066000-00007ffa1869ffff 0x0001/0x0000 0x0000000
4291ca0.3360: *00007ffa186a0000-00007ffa186a0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll
4301ca0.3360: 00007ffa186a1000-00007ffa187b7fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll
4311ca0.3360: 00007ffa187b8000-00007ffa187fefff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll
4321ca0.3360: 00007ffa187ff000-00007ffa1880afff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll
4331ca0.3360: 00007ffa1880b000-00007ffa18819fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll
4341ca0.3360: 00007ffa1881a000-00007ffa1881afff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll
4351ca0.3360: 00007ffa1881b000-00007ffa1881dfff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll
4361ca0.3360: 00007ffa1881e000-00007ffa1888ffff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume4\Windows\System32\ntdll.dll
4371ca0.3360: 00007ffa18890000-00007ffffffeffff 0x0001/0x0000 0x0000000
4381ca0.3360: VirtualBoxVM.exe: timestamp 0x5ebd9c8a (rc=VINF_SUCCESS)
4391ca0.3360: '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe' has no imports
4401ca0.3360: '\Device\HarddiskVolume4\Windows\System32\ntdll.dll' has no imports
4411ca0.3360: supR3HardNtChildPurify: Done after 297 ms and 0 fixes (loop #0).
4421ca0.3360: supR3HardenedEarlyCompact: Removed heap 1 (0x00000001430000 LB 0x400000)
4432354.760: Log file opened: 6.1.8r137981 g_hStartupLog=0000000000000004 g_uNtVerCombined=0xa047bb00
4442354.760: supR3HardenedVmProcessInit: uNtDllAddr=00007ffa186a0000 g_uNtVerCombined=0xa047bb00 (stack ~00000000004ff288)
4451ca0.3360: supR3HardNtEnableThreadCreationEx:
4462354.760: ntdll.dll: timestamp 0xb29ecf52 (rc=VINF_SUCCESS)
4472354.760: New simple heap: #1 0000000000600000 LB 0x400000 (for 2031616 allocation)
4482354.760: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox'
4492354.760: System32: \Device\HarddiskVolume4\Windows\System32
4502354.760: WinSxS: \Device\HarddiskVolume4\Windows\WinSxS
4512354.760: KnownDllPath: C:\windows\System32
4522354.760: supR3HardenedVmProcessInit: Opening vboxdrv...
4532354.760: supR3HardenedVmProcessInit: Restoring LdrInitializeThunk...
4542354.760: supR3HardenedVmProcessInit: Returning to LdrInitializeThunk...
4552354.760: Registered Dll notification callback with NTDLL.
4562354.760: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\kernel32.dll)
4572354.760: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\kernel32.dll
4582354.760: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\System32\KERNEL32.DLL (Input=KERNEL32.DLL, rcNtResolve=0xc0150008) *pfFlags=0xffffffff pwszSearchPath=0000000000004001:<flags> [calling]
4592354.760: supR3HardenedDllNotificationCallback: load 00007ffa16290000 LB 0x002a4000 C:\windows\System32\KERNELBASE.dll [fFlags=0x0]
4602354.760: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\KernelBase.dll)
4612354.760: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\KernelBase.dll
4622354.760: supR3HardenedDllNotificationCallback: load 00007ffa174d0000 LB 0x000b2000 C:\windows\System32\KERNEL32.DLL [fFlags=0x0]
4632354.760: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
4642354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa174d0000 'C:\windows\System32\KERNEL32.DLL'
4652354.760: supR3HardenedDllNotificationCallback: load 00007ff6aff50000 LB 0x00116000 D:\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe [fFlags=0x0]
4662354.760: '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe' has no imports
4672354.760: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe)
4682354.760: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe
4692354.760: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007ffa18711770 pvNtTerminateThread=00007ffa1873cac0
4701ca0.3360: supR3HardNtChildWaitFor: Found expected request 1 (CloseEvents) after 125 ms.
4712354.760: \SystemRoot\System32\ntdll.dll:
4722354.760: CreationTime: 2020-04-21T22:28:49.105703400Z
4732354.760: LastWriteTime: 2020-04-21T22:28:49.151106600Z
4742354.760: ChangeTime: 2020-06-10T13:29:37.479836800Z
4752354.760: FileAttributes: 0x20
4762354.760: Size: 0x1e8460
4772354.760: NT Headers: 0xd8
4782354.760: Timestamp: 0xb29ecf52
4792354.760: Machine: 0x8664 - amd64
4802354.760: Timestamp: 0xb29ecf52
4812354.760: Image Version: 10.0
4822354.760: SizeOfImage: 0x1f0000 (2031616)
4832354.760: Resource Dir: 0x17f000 LB 0x6f310
4842354.760: [Version info resource found at 0xd8! (ID/Name: 0x1; SubID/SubName: 0x409)]
4852354.760: [Raw version resource data: 0x17f0f0 LB 0x380, codepage 0x0 (reserved 0x0)]
4862354.760: ProductName: Microsoft® Windows® Operating System
4872354.760: ProductVersion: 10.0.18362.815
4882354.760: FileVersion: 10.0.18362.815 (WinBuild.160101.0800)
4892354.760: FileDescription: NT Layer DLL
4902354.760: \SystemRoot\System32\kernel32.dll:
4912354.760: CreationTime: 2020-06-10T13:28:49.989937000Z
4922354.760: LastWriteTime: 2020-06-10T13:28:50.005566500Z
4932354.760: ChangeTime: 2020-06-10T13:32:25.443799800Z
4942354.760: FileAttributes: 0x20
4952354.760: Size: 0xb0498
4962354.760: NT Headers: 0xe8
4972354.760: Timestamp: 0xce6bbd73
4982354.760: Machine: 0x8664 - amd64
4992354.760: Timestamp: 0xce6bbd73
5002354.760: Image Version: 10.0
5012354.760: SizeOfImage: 0xb2000 (729088)
5022354.760: Resource Dir: 0xb0000 LB 0x520
5032354.760: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
5042354.760: [Raw version resource data: 0xb00b0 LB 0x3a4, codepage 0x0 (reserved 0x0)]
5052354.760: ProductName: Microsoft® Windows® Operating System
5062354.760: ProductVersion: 10.0.18362.900
5072354.760: FileVersion: 10.0.18362.900 (WinBuild.160101.0800)
5082354.760: FileDescription: Windows NT BASE API Client DLL
5092354.760: \SystemRoot\System32\KernelBase.dll:
5102354.760: CreationTime: 2020-04-21T22:28:49.748931800Z
5112354.760: LastWriteTime: 2020-04-21T22:28:49.824426800Z
5122354.760: ChangeTime: 2020-06-10T13:29:37.479836800Z
5132354.760: FileAttributes: 0x20
5142354.760: Size: 0x2a4068
5152354.760: NT Headers: 0xf8
5162354.760: Timestamp: 0xb89efff3
5172354.760: Machine: 0x8664 - amd64
5182354.760: Timestamp: 0xb89efff3
5192354.760: Image Version: 10.0
5202354.760: SizeOfImage: 0x2a4000 (2768896)
5212354.760: Resource Dir: 0x27e000 LB 0x548
5222354.760: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
5232354.760: [Raw version resource data: 0x27e0b0 LB 0x3bc, codepage 0x0 (reserved 0x0)]
5242354.760: ProductName: Microsoft® Windows® Operating System
5252354.760: ProductVersion: 10.0.18362.815
5262354.760: FileVersion: 10.0.18362.815 (WinBuild.160101.0800)
5272354.760: FileDescription: Windows NT BASE API Client DLL
5282354.760: \SystemRoot\System32\apisetschema.dll:
5292354.760: CreationTime: 2019-03-19T04:43:54.837151500Z
5302354.760: LastWriteTime: 2019-03-19T04:43:54.837151500Z
5312354.760: ChangeTime: 2020-06-10T13:29:37.229761200Z
5322354.760: FileAttributes: 0x20
5332354.760: Size: 0x1d028
5342354.760: NT Headers: 0xc8
5352354.760: Timestamp: 0xd6ced080
5362354.760: Machine: 0x8664 - amd64
5372354.760: Timestamp: 0xd6ced080
5382354.760: Image Version: 10.0
5392354.760: SizeOfImage: 0x1e000 (122880)
5402354.760: Resource Dir: 0x1d000 LB 0x408
5412354.760: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
5422354.760: [Raw version resource data: 0x1d060 LB 0x3a8, codepage 0x0 (reserved 0x0)]
5432354.760: ProductName: Microsoft® Windows® Operating System
5442354.760: ProductVersion: 10.0.18362.1
5452354.760: FileVersion: 10.0.18362.1 (WinBuild.160101.0800)
5462354.760: FileDescription: ApiSet Schema DLL
5472354.760: NtOpenDirectoryObject failed on \Driver: 0xc0000022
5482354.760: supR3HardenedWinFindAdversaries: 0x0
5492354.760: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox'
5502354.760: Calling main()
5512354.760: SUPR3HardenedMain: pszProgName=VirtualBoxVM fFlags=0x2
5522354.760: supR3HardenedWinInitAppBin(0x2): '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox'
5532354.760: '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe' has no imports
5542354.760: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe)
5552354.760: SUPR3HardenedMain: Final process, opening VBoxDrv...
5562354.760: supR3HardenedEarlyCompact: Removed heap 1 (0x00000000600000 LB 0x400000)
5572354.760: supR3HardNtEnableThreadCreationEx:
5582354.760: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VBoxSupLib.dll)
5592354.760: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VBoxSupLib.dll
5602354.760: supR3HardenedMonitor_LdrLoadDll: pName=D:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
5612354.760: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VBoxSupLib.dll [lacks WinVerifyTrust]
5622354.760: supR3HardenedDllNotificationCallback: load 00007ffa11ec0000 LB 0x00005000 D:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL [fFlags=0x0]
5632354.760: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VBoxSupLib.dll [lacks WinVerifyTrust]
5642354.760: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VBoxSupLib.dll [lacks WinVerifyTrust]
5652354.760: supR3HardenedMonitor_LdrLoadDll: pName=D:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
5662354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa11ec0000 'D:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL'
5672354.760: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VBoxSupLib.dll [lacks WinVerifyTrust]
5682354.760: supR3HardenedMonitor_LdrLoadDll: pName=D:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
5692354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa11ec0000 'D:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL'
5702354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa11ec0000 'D:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL'
5712354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
5722354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msasn1.dll'.
5732354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'crypt32.dll'.
5742354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #27 'rpcrt4.dll'.
5752354.760: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\wintrust.dll)
5762354.760: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\wintrust.dll
5772354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
5782354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
5792354.760: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll)
5802354.760: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll
5812354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'crypt32.dll'...
5822354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'crypt32.dll' -> '\Device\HarddiskVolume4\Windows\System32\crypt32.dll' [rcNtRedir=0xc0150008]
5832354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #32 'msasn1.dll'.
5842354.760: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\crypt32.dll)
5852354.760: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\crypt32.dll
5862354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msasn1.dll'...
5872354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'msasn1.dll' -> '\Device\HarddiskVolume4\Windows\System32\msasn1.dll' [rcNtRedir=0xc0150008]
5882354.760: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\msasn1.dll)
5892354.760: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\msasn1.dll
5902354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
5912354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
5922354.760: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\msvcrt.dll)
5932354.760: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\msvcrt.dll
5942354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msasn1.dll'...
5952354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'msasn1.dll' -> '\Device\HarddiskVolume4\Windows\System32\msasn1.dll' [rcNtRedir=0xc0150008]
5962354.760: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msasn1.dll [lacks WinVerifyTrust]
5972354.760: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\system32\Wintrust.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
5982354.760: supR3HardenedDllNotificationCallback: load 00007ffa180e0000 LB 0x0009e000 C:\windows\System32\msvcrt.dll [fFlags=0x0]
5992354.760: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
6002354.760: supR3HardenedDllNotificationCallback: load 00007ffa15610000 LB 0x00012000 C:\windows\System32\MSASN1.dll [fFlags=0x0]
6012354.760: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msasn1.dll [lacks WinVerifyTrust]
6022354.760: supR3HardenedDllNotificationCallback: load 00007ffa16040000 LB 0x000fa000 C:\windows\System32\ucrtbase.dll [fFlags=0x0]
6032354.760: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\ucrtbase.dll)
6042354.760: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\ucrtbase.dll
6052354.760: supR3HardenedDllNotificationCallback: load 00007ffa16140000 LB 0x00149000 C:\windows\System32\CRYPT32.dll [fFlags=0x0]
6062354.760: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\crypt32.dll [lacks WinVerifyTrust]
6072354.760: supR3HardenedDllNotificationCallback: load 00007ffa18180000 LB 0x00120000 C:\windows\System32\RPCRT4.dll [fFlags=0x0]
6082354.760: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
6092354.760: supR3HardenedDllNotificationCallback: load 00007ffa16620000 LB 0x0005c000 C:\windows\System32\Wintrust.dll [fFlags=0x0]
6102354.760: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
6112354.760: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-synch-l1-2-0) -> 0x0, fPresent=1
6122354.760: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-synch-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
6132354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16290000 'api-ms-win-core-synch-l1-2-0'
6142354.760: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-fibers-l1-1-1) -> 0x0, fPresent=1
6152354.760: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-fibers-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
6162354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16290000 'api-ms-win-core-fibers-l1-1-1'
6172354.760: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-fibers-l1-1-1) -> 0x0, fPresent=1
6182354.760: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-fibers-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
6192354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16290000 'api-ms-win-core-fibers-l1-1-1'
6202354.760: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-synch-l1-2-0) -> 0x0, fPresent=1
6212354.760: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-synch-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
6222354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16290000 'api-ms-win-core-synch-l1-2-0'
6232354.760: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-localization-l1-2-1) -> 0x0, fPresent=1
6242354.760: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-l1-2-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
6252354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16290000 'api-ms-win-core-localization-l1-2-1'
6262354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16620000 'C:\windows\system32\Wintrust.dll'
6272354.760: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\bcrypt.dll)
6282354.760: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\bcrypt.dll
6292354.760: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\system32\bcrypt.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
6302354.760: supR3HardenedDllNotificationCallback: load 00007ffa16680000 LB 0x00026000 C:\windows\System32\bcrypt.dll [fFlags=0x0]
6312354.760: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\bcrypt.dll [lacks WinVerifyTrust]
6322354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16680000 'C:\windows\system32\bcrypt.dll'
6332354.760: bcrypt.dll loaded at 00007ffa16680000, BCryptOpenAlgorithmProvider at 00007ffa16684c70, preloading providers:
6342354.760: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\bcryptprimitives.dll)
6352354.760: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\bcryptprimitives.dll
6362354.760: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\system32\bcryptprimitives.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
6372354.760: supR3HardenedDllNotificationCallback: load 00007ffa15dd0000 LB 0x00080000 C:\windows\System32\bcryptprimitives.dll [fFlags=0x0]
6382354.760: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\bcryptprimitives.dll [lacks WinVerifyTrust]
6392354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa15dd0000 'C:\windows\system32\bcryptprimitives.dll'
6402354.760: BCryptOpenAlgorithmProvider(,'MD2',0,0) -> 0x0 (hAlgo=0000000000bce420)
6412354.760: BCryptOpenAlgorithmProvider(,'MD4',0,0) -> 0x0 (hAlgo=0000000000bcf180)
6422354.760: BCryptOpenAlgorithmProvider(,'MD5',0,0) -> 0x0 (hAlgo=0000000000bcf480)
6432354.760: BCryptOpenAlgorithmProvider(,'SHA1',0,0) -> 0x0 (hAlgo=0000000000bcf780)
6442354.760: BCryptOpenAlgorithmProvider(,'SHA256',0,0) -> 0x0 (hAlgo=0000000000bcfa80)
6452354.760: BCryptOpenAlgorithmProvider(,'SHA512',0,0) -> 0x0 (hAlgo=0000000000bcfd80)
6462354.760: BCryptOpenAlgorithmProvider(,'RSA',0,0) -> 0x0 (hAlgo=0000000000bd0080)
6472354.760: BCryptOpenAlgorithmProvider(,'DSA',0,0) -> 0x0 (hAlgo=0000000000bd0790)
6482354.760: supR3HardenedDllNotificationCallback: load 00007ffa15630000 LB 0x00017000 C:\windows\System32\CRYPTSP.dll [fFlags=0x0]
6492354.760: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\cryptsp.dll)
6502354.760: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\cryptsp.dll
6512354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #18 'bcrypt.dll'.
6522354.760: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\rsaenh.dll)
6532354.760: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\rsaenh.dll
6542354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcrypt.dll'...
6552354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcrypt.dll' -> '\Device\HarddiskVolume4\Windows\System32\bcrypt.dll' [rcNtRedir=0xc0150008]
6562354.760: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\bcrypt.dll [lacks WinVerifyTrust]
6572354.760: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
6582354.760: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
6592354.760: supR3HardenedDllNotificationCallback: load 00007ffa148e0000 LB 0x00033000 C:\windows\system32\rsaenh.dll [fFlags=0x0]
6602354.760: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
6612354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
6622354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'bcryptprimitives.dll'.
6632354.760: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\cryptbase.dll)
6642354.760: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\cryptbase.dll
6652354.760: supR3HardenedDllNotificationCallback: load 00007ffa14f40000 LB 0x0000c000 C:\windows\SYSTEM32\CRYPTBASE.dll [fFlags=0x0]
6662354.760: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\cryptbase.dll [lacks WinVerifyTrust]
6672354.760: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
6682354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcryptprimitives.dll'...
6692354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcryptprimitives.dll' -> '\Device\HarddiskVolume4\Windows\System32\bcryptprimitives.dll' [rcNtRedir=0xc0150008]
6702354.760: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\bcryptprimitives.dll [lacks WinVerifyTrust]
6712354.760: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\System32\kernel32.dll (Input=kernel32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
6722354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa174d0000 'C:\windows\System32\kernel32.dll'
6732354.760: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
6742354.760: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\System32\WINTRUST.DLL (Input=WINTRUST.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
6752354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16620000 'C:\windows\System32\WINTRUST.DLL'
6762354.760: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\crypt32.dll [lacks WinVerifyTrust]
6772354.760: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\System32\CRYPT32.dll (rcNtResolve=0xc0150008) *pfFlags=0x2 pwszSearchPath=0000000000000001:<flags> [calling]
6782354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16140000 'C:\windows\System32\CRYPT32.dll'
6792354.760: supR3HardenedDllNotificationCallback: load 00007ffa16750000 LB 0x0001d000 C:\windows\System32\imagehlp.dll [fFlags=0x0]
6802354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #20 'rpcrt4.dll'.
6812354.760: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\imagehlp.dll)
6822354.760: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\imagehlp.dll
6832354.760: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
6842354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
6852354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
6862354.760: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
6872354.760: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
6882354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
6892354.760: supR3HardenedDllNotificationCallback: load 00007ffa16810000 LB 0x00097000 C:\windows\System32\sechost.dll [fFlags=0x0]
6902354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'rpcrt4.dll'.
6912354.760: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\sechost.dll)
6922354.760: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\sechost.dll
6932354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
6942354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'rpcrt4.dll'.
6952354.760: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\gpapi.dll)
6962354.760: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\gpapi.dll
6972354.760: supR3HardenedDllNotificationCallback: load 00007ffa14160000 LB 0x00022000 C:\windows\SYSTEM32\gpapi.dll [fFlags=0x0]
6982354.760: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\gpapi.dll [lacks WinVerifyTrust]
6992354.760: supR3HardenedDllNotificationCallback: load 00007ffa155e0000 LB 0x00023000 C:\windows\System32\profapi.dll [fFlags=0x0]
7002354.760: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\profapi.dll)
7012354.760: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\profapi.dll
7022354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
7032354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'crypt32.dll'.
7042354.760: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume4\Windows\System32\cryptnet.dll)
7052354.760: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\cryptnet.dll
7062354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'crypt32.dll'...
7072354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'crypt32.dll' -> '\Device\HarddiskVolume4\Windows\System32\crypt32.dll' [rcNtRedir=0xc0150008]
7082354.760: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\crypt32.dll [lacks WinVerifyTrust]
7092354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
7102354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
7112354.760: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
7122354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
7132354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
7142354.760: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
7152354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
7162354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
7172354.760: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
7182354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
7192354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
7202354.760: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
7212354.760: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\System32\cryptnet.dll (Input=cryptnet.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
7222354.760: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
7232354.760: supR3HardenedDllNotificationCallback: load 00007ffa07b60000 LB 0x0002f000 C:\windows\System32\cryptnet.dll [fFlags=0x0]
7242354.760: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
7252354.760: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
7262354.760: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\System32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x2 pwszSearchPath=0000000000000001:<flags> [calling]
7272354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa07b60000 'C:\windows\System32\cryptnet.dll'
7282354.760: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
7292354.760: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\System32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x2 pwszSearchPath=0000000000000001:<flags> [calling]
7302354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa07b60000 'C:\windows\System32\cryptnet.dll'
7312354.760: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
7322354.760: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\System32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x2 pwszSearchPath=0000000000000001:<flags> [calling]
7332354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa07b60000 'C:\windows\System32\cryptnet.dll'
7342354.760: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
7352354.760: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\System32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x2 pwszSearchPath=0000000000000001:<flags> [calling]
7362354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa07b60000 'C:\windows\System32\cryptnet.dll'
7372354.760: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
7382354.760: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\System32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x2 pwszSearchPath=0000000000000001:<flags> [calling]
7392354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa07b60000 'C:\windows\System32\cryptnet.dll'
7402354.760: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
7412354.760: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\System32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x2 pwszSearchPath=0000000000000001:<flags> [calling]
7422354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa07b60000 'C:\windows\System32\cryptnet.dll'
7432354.760: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
7442354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa07b60000 'C:\windows\System32\cryptnet.dll'
7452354.760: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
7462354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa07b60000 'C:\windows\System32\cryptnet.dll'
7472354.760: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
7482354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa07b60000 'C:\windows\System32\cryptnet.dll'
7492354.760: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
7502354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa07b60000 'C:\windows\System32\cryptnet.dll'
7512354.760: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
7522354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa07b60000 'C:\windows\System32\cryptnet.dll'
7532354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa07b60000 'C:\windows\System32\cryptnet.dll'
7542354.760: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
7552354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa07b60000 'C:\Windows\System32\cryptnet.dll'
7562354.760: supR3HardenedDllNotificationCallback: load 00007ffa16970000 LB 0x000a3000 C:\windows\System32\advapi32.dll [fFlags=0x0]
7572354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
7582354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'sechost.dll'.
7592354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #27 'rpcrt4.dll'.
7602354.760: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\advapi32.dll)
7612354.760: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\advapi32.dll
7622354.760: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
7632354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
7642354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
7652354.760: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
7662354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'sechost.dll'...
7672354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'sechost.dll' -> '\Device\HarddiskVolume4\Windows\System32\sechost.dll' [rcNtRedir=0xc0150008]
7682354.760: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\sechost.dll [lacks WinVerifyTrust]
7692354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
7702354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
7712354.760: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
7722354.760: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
7732354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
7742354.760: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\crypt32.dll [lacks WinVerifyTrust]
7752354.760: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\System32\crypt32.dll (Input=crypt32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
7762354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16140000 'C:\windows\System32\crypt32.dll'
7772354.760: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000000 pwszName=\SystemRoot\System32\ntdll.dll
7782354.760: supR3HardNtViCallWinVerifyTrustCatFile: New context 0000000000bf3cb0
7792354.760: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000bf3cb0
7802354.760: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=2F110B40CF67FEF4EFA84C23431B3B42233E381F
7812354.760: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
7822354.760: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\System32\rpcrt4.dll (Input=rpcrt4.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
7832354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa18180000 'C:\windows\System32\rpcrt4.dll'
7842354.760: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
7852354.760: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
7862354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
7872354.760: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\crypt32.dll [lacks WinVerifyTrust]
7882354.760: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\System32\crypt32.dll (Input=crypt32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
7892354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16140000 'C:\windows\System32\crypt32.dll'
7902354.760: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.18362.900.cat'; file='\SystemRoot\System32\ntdll.dll'
7912354.760: g_pfnWinVerifyTrust=00007ffa166261f0
7922354.760: supR3HardenedScreenImage/preload: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\crypt32.dll [redoing WinVerifyTrust]
7932354.760: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
7942354.760: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
7952354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
7962354.760: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\crypt32.dll [lacks WinVerifyTrust]
7972354.760: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\System32\crypt32.dll (Input=crypt32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
7982354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16140000 'C:\windows\System32\crypt32.dll'
7992354.760: supR3HardenedScreenImage/preload: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Windows\System32\crypt32.dll'
8002354.760: supR3HardenedScreenImage/preload: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\wintrust.dll [redoing WinVerifyTrust]
8012354.760: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
8022354.760: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
8032354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
8042354.760: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\crypt32.dll
8052354.760: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\System32\crypt32.dll (Input=crypt32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
8062354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16140000 'C:\windows\System32\crypt32.dll'
8072354.760: supR3HardenedScreenImage/preload: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Windows\System32\wintrust.dll'
8082354.760: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
8092354.760: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
8102354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
8112354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16140000 'C:\windows\System32\crypt32.dll'
8122354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Windows\System32\advapi32.dll'
8132354.760: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000384 pwszName=\Device\HarddiskVolume4\Windows\System32\cryptnet.dll
8142354.760: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000000bf3cb0
8152354.760: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000bf3cb0
8162354.760: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=09032EBC3D9D9BDDC0EE4A6463C043296B79FF20
8172354.760: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
8182354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
8192354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16140000 'C:\windows\System32\crypt32.dll'
8202354.760: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.18362.900.cat'; file='\Device\HarddiskVolume4\Windows\System32\cryptnet.dll'
8212354.760: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
8222354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Windows\System32\cryptnet.dll'
8232354.760: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
8242354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
8252354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16140000 'C:\windows\System32\crypt32.dll'
8262354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Windows\System32\profapi.dll'
8272354.760: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
8282354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
8292354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16140000 'C:\windows\System32\crypt32.dll'
8302354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Windows\System32\gpapi.dll'
8312354.760: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
8322354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
8332354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16140000 'C:\windows\System32\crypt32.dll'
8342354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Windows\System32\sechost.dll'
8352354.760: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
8362354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
8372354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16140000 'C:\windows\System32\crypt32.dll'
8382354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Windows\System32\imagehlp.dll'
8392354.760: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
8402354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
8412354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16140000 'C:\windows\System32\crypt32.dll'
8422354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Windows\System32\cryptbase.dll'
8432354.760: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
8442354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
8452354.760: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\crypt32.dll
8462354.760: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\System32\crypt32.dll (Input=crypt32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
8472354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16140000 'C:\windows\System32\crypt32.dll'
8482354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Windows\System32\rsaenh.dll'
8492354.760: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rsaenh.dll
8502354.760: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
8512354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
8522354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16140000 'C:\windows\System32\crypt32.dll'
8532354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Windows\System32\cryptsp.dll'
8542354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
8552354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16140000 'C:\windows\System32\crypt32.dll'
8562354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Windows\System32\bcryptprimitives.dll'
8572354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
8582354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16140000 'C:\windows\System32\crypt32.dll'
8592354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Windows\System32\bcrypt.dll'
8602354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
8612354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16140000 'C:\windows\System32\crypt32.dll'
8622354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Windows\System32\ucrtbase.dll'
8632354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
8642354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16140000 'C:\windows\System32\crypt32.dll'
8652354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll'
8662354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
8672354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16140000 'C:\windows\System32\crypt32.dll'
8682354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Windows\System32\msasn1.dll'
8692354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
8702354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16140000 'C:\windows\System32\crypt32.dll'
8712354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll'
8722354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
8732354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 24202) fWinVerifyTrust=1 for '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VBoxSupLib.dll'
8742354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
8752354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 24202) fWinVerifyTrust=1 for '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VirtualBoxVM.exe'
8762354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
8772354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16140000 'C:\windows\System32\crypt32.dll'
8782354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Windows\System32\KernelBase.dll'
8792354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
8802354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16140000 'C:\windows\System32\crypt32.dll'
8812354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Windows\System32\kernel32.dll'
8822354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16140000 'C:\windows\system32\crypt32.dll'
8832354.760: supR3HardenedWinIsDesiredRootCA: Adding 0xba02d0ab12c5ed00 CN=XBL Client IPsec Issuing CA
8842354.760: supR3HardenedWinIsDesiredRootCA: Adding 0x3d98ab22bb04a300 C=IE, O=Baltimore, OU=CyberTrust, CN=Baltimore CyberTrust Root
8852354.760: supR3HardenedWinIsDesiredRootCA: Adding 0x5ad46780fa5df300 DC=com, DC=microsoft, CN=Microsoft Root Certificate Authority
8862354.760: supR3HardenedWinIsDesiredRootCA: Adding 0xea5386456178582b C=ZA, ST=Western Cape, L=Durbanville, O=Thawte, OU=Thawte Certification, CN=Thawte Timestamping CA
8872354.760: supR3HardenedWinIsDesiredRootCA: Adding 0x62e562aabc48cf00 C=DE, Email=info@win-unattended.de, CN=Win-Unattended
8882354.760: supR3HardenedWinIsDesiredRootCA: Adding 0x560ad29254e89100 C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO RSA Certification Authority
8892354.760: supR3HardenedWinIsDesiredRootCA: Adding 0x6114ed891be9b600 CN=ESET SSL Filter CA, O=ESET, spol. s r. o., C=SK
8902354.760: supR3HardenedWinIsDesiredRootCA: Adding 0x3be670c1bd02a900 OU=Copyright (c) 1997 Microsoft Corp., OU=Microsoft Corporation, CN=Microsoft Root Authority
8912354.760: supR3HardenedWinIsDesiredRootCA: Adding 0x1724d07c049ec200 CN=Libretro
8922354.760: supR3HardenedWinIsDesiredRootCA: Adding 0xa234d834c5d83f20 CN=LAPTOP-BSBQAQR9
8932354.760: supR3HardenedWinIsDesiredRootCA: Adding 0xe991ee72b03db500 C=US, O=Symantec Corporation, CN=Symantec Enterprise Mobile Root for Microsoft
8942354.760: supR3HardenedWinIsDesiredRootCA: Adding 0x4d3835aa4180b200 C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Root Certificate Authority 2011
8952354.760: supR3HardenedWinIsDesiredRootCA: Adding 0x646e3fe3ba08df00 C=US, O=MSFT, CN=Microsoft Authenticode(tm) Root Authority
8962354.760: supR3HardenedWinIsDesiredRootCA: Adding 0x9546d06a8d70b800 CN=XBL Server IPsec Issuing CA
8972354.760: supR3HardenedWinIsDesiredRootCA: Adding 0xd4fbe673e5ccc600 C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert High Assurance EV Root CA
8982354.760: supR3HardenedWinIsDesiredRootCA: Adding 0x440ac49e21aab600 C=US, ST=California, L=Irvine, O=Blizzard Entertainment, OU=Battle.net, CN=Blizzard Battle.net Local Cert
8992354.760: supR3HardenedWinIsDesiredRootCA: Adding 0xece4e4289e08b900 C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Root Certificate Authority 2010
9002354.760: supR3HardenedWinIsDesiredRootCA: Adding 0xf3bb4d7e894b420 C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft ECC TS Root Certificate Authority 2018
9012354.760: supR3HardenedWinIsDesiredRootCA: Adding 0x43a9cc371ff5385a O=Microsoft Trust Network, OU=Microsoft Corporation, OU=Microsoft Time Stamping Service Root, OU=Copyright (c) 1997 Microsoft Corp.
9022354.760: supR3HardenedWinIsDesiredRootCA: Adding 0x2e2d2c7c68f0202e O=VeriSign Trust Network, OU=VeriSign, Inc., OU=VeriSign Time Stamping Service Root, OU=NO LIABILITY ACCEPTED, (c)97 VeriSign, Inc.
9032354.760: supR3HardenedWinIsDesiredRootCA: Adding 0xcec3d46562b9be8e C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft ECC Product Root Certificate Authority 2018
9042354.760: supR3HardenedWinIsDesiredRootCA: Adding 0xca58a05dd401ae00 C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Time Stamp Root Certificate Authority 2014
9052354.760: supR3HardenedWinIsDesiredRootCA: Adding 0xa12b07674f1bf600 C=US, O=AffirmTrust, CN=AffirmTrust Commercial
9062354.760: supR3HardenedWinIsDesiredRootCA: Adding 0x2ca429a5c4c6a700 C=IT, L=Milan, O=Actalis S.p.A./03358520967, CN=Actalis Authentication Root CA
9072354.760: supR3HardenedWinIsDesiredRootCA: Adding 0xd8dbfb2c27bfb200 C=US, O=thawte, Inc., OU=Certification Services Division, OU=(c) 2008 thawte, Inc. - For authorized use only, CN=thawte Primary Root CA - G3
9082354.760: supR3HardenedWinIsDesiredRootCA: Adding 0x61a3a33f81aace00 C=US, ST=UT, L=Salt Lake City, O=The USERTRUST Network, OU=http://www.usertrust.com, CN=UTN-USERFirst-Object
9092354.760: supR3HardenedWinIsDesiredRootCA: Adding 0x50bb81640c01cb00 C=TW, O=TAIWAN-CA, OU=Root CA, CN=TWCA Root Certification Authority
9102354.760: supR3HardenedWinIsDesiredRootCA: Adding 0x6b7bdc34cd37bb00 C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root G2
9112354.760: supR3HardenedWinIsDesiredRootCA: Adding 0xf4fd306318ccda00 C=US, O=GeoTrust Inc., CN=GeoTrust Global CA
9122354.760: supR3HardenedWinIsDesiredRootCA: Adding 0x83085097e9afdf00 O=Digital Signature Trust Co., CN=DST Root CA X3
9132354.760: supR3HardenedWinIsDesiredRootCA: Adding 0x780679907625cc00 OU=GlobalSign Root CA - R3, O=GlobalSign, CN=GlobalSign
9142354.760: supR3HardenedWinIsDesiredRootCA: Adding 0x3d98ab22bb04a300 C=IE, O=Baltimore, OU=CyberTrust, CN=Baltimore CyberTrust Root
9152354.760: supR3HardenedWinIsDesiredRootCA: Adding 0xeae16ef49d40be00 C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services
9162354.760: supR3HardenedWinIsDesiredRootCA: Adding 0xc6536f24d57ae723 C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust ECC Certification Authority
9172354.760: supR3HardenedWinIsDesiredRootCA: Adding 0x9403a4b8727eb000 C=TW, O=TAIWAN-CA, OU=Root CA, CN=TWCA Root Certification Authority
9182354.760: supR3HardenedWinIsDesiredRootCA: Adding 0xcb7d2ba3dd0ff900 C=US, ST=Texas, L=Houston, O=SSL Corporation, CN=SSL.com Root Certification Authority RSA
9192354.760: supR3HardenedWinIsDesiredRootCA: Adding 0x8ff6fc03c1edbd00 C=US, ST=Arizona, L=Scottsdale, O=Starfield Technologies, Inc., CN=Starfield Root Certificate Authority - G2
9202354.760: supR3HardenedWinIsDesiredRootCA: Adding 0xc6fa4243b695b600 C=US, O=Entrust, Inc., OU=www.entrust.net/CPS is incorporated by reference, OU=(c) 2006 Entrust, Inc., CN=Entrust Root Certification Authority
9212354.760: supR3HardenedWinIsDesiredRootCA: Adding 0xa3ce8d99e60eda00 C=BE, O=GlobalSign nv-sa, OU=Root CA, CN=GlobalSign Root CA
9222354.760: supR3HardenedWinIsDesiredRootCA: Adding 0xa671e9fec832b700 C=US, O=Starfield Technologies, Inc., OU=Starfield Class 2 Certification Authority
9232354.760: supR3HardenedWinIsDesiredRootCA: Adding 0xa8de7211e13be200 C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root CA
9242354.760: supR3HardenedWinIsDesiredRootCA: Adding 0xd45980fbf0a0ac00 C=US, O=thawte, Inc., OU=Certification Services Division, OU=(c) 2006 thawte, Inc. - For authorized use only, CN=thawte Primary Root CA
9252354.760: supR3HardenedWinIsDesiredRootCA: Adding 0xef62113787ebace5 C=US, O=GeoTrust Inc., OU=(c) 2007 GeoTrust Inc. - For authorized use only, CN=GeoTrust Primary Certification Authority - G2
9262354.760: supR3HardenedWinIsDesiredRootCA: Adding 0xc9edb72b684ba00 C=US, O=Entrust, Inc., OU=See www.entrust.net/legal-terms, OU=(c) 2009 Entrust, Inc. - for authorized use only, CN=Entrust Root Certification Authority - G2
9272354.760: supR3HardenedWinIsDesiredRootCA: Adding 0xf5cd95e581a4ab00 C=US, O=SecureTrust Corporation, CN=SecureTrust CA
9282354.760: supR3HardenedWinIsDesiredRootCA: Adding 0xbebef0d2217f0bfb C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root G3
9292354.760: supR3HardenedWinIsDesiredRootCA: Adding 0x6f2ebe0e24cfa600 OU=GlobalSign Root CA - R2, O=GlobalSign, CN=GlobalSign
9302354.760: supR3HardenedWinIsDesiredRootCA: Adding 0x14018a1bf29e595c C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification Authority
9312354.760: supR3HardenedWinIsDesiredRootCA: Adding 0x9e5bc2d78b6a3636 C=ZA, ST=Western Cape, L=Cape Town, O=Thawte Consulting cc, OU=Certification Services Division, CN=Thawte Premium Server CA, Email=premium-server@thawte.com
9322354.760: supR3HardenedWinIsDesiredRootCA: Adding 0x7c4fd32ec1b1ce00 C=PL, O=Unizeto Sp. z o.o., CN=Certum CA
9332354.760: supR3HardenedWinIsDesiredRootCA: Adding 0xd4fbe673e5ccc600 C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert High Assurance EV Root CA
9342354.760: supR3HardenedWinIsDesiredRootCA: Adding 0x16e64d2a56ccf200 C=US, ST=Arizona, L=Scottsdale, O=Starfield Technologies, Inc., OU=http://certificates.starfieldtech.com/repository/, CN=Starfield Services Root Certificate Authority
9352354.760: supR3HardenedWinIsDesiredRootCA: Adding 0xef477acf4ab2d300 C=DE, O=D-Trust GmbH, CN=D-TRUST Root Class 3 CA 2 2009
9362354.760: supR3HardenedWinIsDesiredRootCA: Adding 0x1b8578514b74ac00 C=US, O=WFA Hotspot 2.0, CN=Hotspot 2.0 Trust Root CA - 03
9372354.760: supR3HardenedWinIsDesiredRootCA: Adding 0xb28612a94b4dad00 O=Entrust.net, OU=www.entrust.net/CPS_2048 incorp. by ref. (limits liab.), OU=(c) 1999 Entrust.net Limited, CN=Entrust.net Certification Authority (2048)
9382354.760: supR3HardenedWinIsDesiredRootCA: Adding 0x357a29080824af00 C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. - For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority - G5
9392354.760: supR3HardenedWinIsDesiredRootCA: Adding 0x59faf1086271bf00 C=US, ST=Arizona, L=Scottsdale, O=GoDaddy.com, Inc., CN=Go Daddy Root Certificate Authority - G2
9402354.760: supR3HardenedWinIsDesiredRootCA: Adding 0xb16dd37ffeb3b300 C=JP, O=SECOM Trust.net, OU=Security Communication RootCA1
9412354.760: supR3HardenedWinIsDesiredRootCA: Adding 0x3401b15e3761c700 C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2008 VeriSign, Inc. - For authorized use only, CN=VeriSign Universal Root Certification Authority
9422354.760: supR3HardenedWinIsDesiredRootCA: Adding 0xc30e361765128000 C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority
9432354.760: supR3HardenedWinIsDesiredRootCA: Adding 0x491857ead79dde00 C=US, O=The Go Daddy Group, Inc., OU=Go Daddy Class 2 Certification Authority
9442354.760: supR3HardenedWinIsDesiredRootCA: Adding 0xb9ff821d139e9bf OU=GlobalSign ECC Root CA - R5, O=GlobalSign, CN=GlobalSign
9452354.760: supR3HardenedWinIsDesiredRootCA: Adding 0x1f78fc529cbacb00 C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 1999 VeriSign, Inc. - For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority - G3
9462354.760: supR3HardenedWinIsDesiredRootCA: Adding 0xc2ba72a37dfbe300 C=PL, O=Unizeto Technologies S.A., OU=Certum Certification Authority, CN=Certum Trusted Network CA
9472354.760: supR3HardenedWinIsDesiredRootCA: Adding 0x8043e4ce150ead00 C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Assured ID Root CA
9482354.760: supR3HardenedWinIsDesiredRootCA: Adding 0xf2e6331af7b700 C=SE, O=AddTrust AB, OU=AddTrust External TTP Network, CN=AddTrust External CA Root
9492354.760: supR3HardenedWinRetrieveTrustedRootCAs: cAdded=66
9502354.760: SUPR3HardenedMain: Load Runtime...
9512354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
9522354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
9532354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp100.dll'.
9542354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'rpcrt4.dll'.
9552354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'ws2_32.dll'.
9562354.760: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VBoxRT.dll) WinVerifyTrust
9572354.760: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VBoxRT.dll
9582354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
9592354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume4\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
9602354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
9612354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16140000 'C:\windows\System32\crypt32.dll'
9622354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #26 'rpcrt4.dll'.
9632354.760: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\ws2_32.dll) WinVerifyTrust
9642354.760: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\ws2_32.dll
9652354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
9662354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
9672354.760: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll
9682354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
9692354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
9702354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
9712354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
9722354.760: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll
9732354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
9742354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
9752354.760: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcp100.dll) WinVerifyTrust
9762354.760: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcp100.dll
9772354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
9782354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
9792354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
9802354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
9812354.760: Detected WinVerifyTrust recursion: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll'.
9822354.760: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll)
9832354.760: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll
9842354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
9852354.760: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll) WinVerifyTrust
9862354.760: supR3HardenedMonitor_LdrLoadDll: pName=D:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000a01:<flags> [calling]
9872354.760: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VBoxRT.dll
9882354.760: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll [avoiding WinVerifyTrust]
9892354.760: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcp100.dll
9902354.760: supR3HardenedDllNotificationCallback: load 0000000065370000 LB 0x000d2000 D:\Program Files\Oracle\VirtualBox\MSVCR100.dll [fFlags=0x0]
9912354.760: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll [avoiding WinVerifyTrust]
9922354.760: supR3HardenedDllNotificationCallback: load 00000000647f0000 LB 0x00098000 D:\Program Files\Oracle\VirtualBox\MSVCP100.dll [fFlags=0x0]
9932354.760: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcp100.dll
9942354.760: supR3HardenedDllNotificationCallback: load 00007ffa17450000 LB 0x0006f000 C:\windows\System32\WS2_32.dll [fFlags=0x0]
9952354.760: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\ws2_32.dll
9962354.760: supR3HardenedDllNotificationCallback: load 00007ff9e3f20000 LB 0x005d6000 D:\Program Files\Oracle\VirtualBox\VBoxRT.dll [fFlags=0x0]
9972354.760: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VBoxRT.dll
9982354.760: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll'.
9992354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10002354.760: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VBoxRT.dll
10012354.760: supR3HardenedMonitor_LdrLoadDll: pName=D:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
10022354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e3f20000 'D:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10032354.760: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10042354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10052354.760: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10062354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10072354.760: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VBoxRT.dll
10082354.760: supR3HardenedMonitor_LdrLoadDll: pName=D:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
10092354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e3f20000 'D:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10102354.760: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10112354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10122354.760: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10132354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10142354.760: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VBoxRT.dll
10152354.760: supR3HardenedMonitor_LdrLoadDll: pName=D:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
10162354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e3f20000 'D:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10172354.760: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10182354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10192354.760: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10202354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10212354.760: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VBoxRT.dll
10222354.760: supR3HardenedMonitor_LdrLoadDll: pName=D:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
10232354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e3f20000 'D:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10242354.760: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10252354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10262354.760: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10272354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10282354.760: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VBoxRT.dll
10292354.760: supR3HardenedMonitor_LdrLoadDll: pName=D:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
10302354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e3f20000 'D:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10312354.760: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10322354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10332354.760: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10342354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10352354.760: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VBoxRT.dll
10362354.760: supR3HardenedMonitor_LdrLoadDll: pName=D:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
10372354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e3f20000 'D:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10382354.760: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10392354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10402354.760: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10412354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10422354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e3f20000 'D:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10432354.760: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10442354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10452354.760: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10462354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10472354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e3f20000 'D:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10482354.760: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10492354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10502354.760: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10512354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10522354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e3f20000 'D:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10532354.760: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10542354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10552354.760: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10562354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10572354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e3f20000 'D:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10582354.760: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10592354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10602354.760: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10612354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10622354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e3f20000 'D:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10632354.760: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10642354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10652354.760: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10662354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10672354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e3f20000 'D:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10682354.760: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10692354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10702354.760: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10712354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10722354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e3f20000 'D:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10732354.760: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10742354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10752354.760: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10762354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10772354.760: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VBoxRT.dll
10782354.760: supR3HardenedMonitor_LdrLoadDll: pName=D:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
10792354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e3f20000 'D:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10802354.760: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10812354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10822354.760: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10832354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10842354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e3f20000 'D:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10852354.760: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10862354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10872354.760: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10882354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10892354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e3f20000 'D:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10902354.760: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10912354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10922354.760: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10932354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10942354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e3f20000 'D:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
10952354.760: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10962354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10972354.760: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll'.
10982354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
10992354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e3f20000 'D:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11002354.760: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11012354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11022354.760: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11032354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11042354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e3f20000 'D:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11052354.760: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11062354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11072354.760: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11082354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11092354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e3f20000 'D:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11102354.760: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11112354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11122354.760: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11132354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11142354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e3f20000 'D:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11152354.760: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11162354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11172354.760: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11182354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11192354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e3f20000 'D:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11202354.760: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11212354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11222354.760: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11232354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11242354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e3f20000 'D:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11252354.760: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11262354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11272354.760: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11282354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11292354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e3f20000 'D:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11302354.760: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11312354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11322354.760: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11332354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11342354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e3f20000 'D:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11352354.760: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11362354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11372354.760: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11382354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11392354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e3f20000 'D:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11402354.760: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11412354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11422354.760: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11432354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11442354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e3f20000 'D:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11452354.760: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11462354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11472354.760: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11482354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11492354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e3f20000 'D:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11502354.760: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11512354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11522354.760: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11532354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11542354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e3f20000 'D:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11552354.760: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11562354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11572354.760: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11582354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11592354.760: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VBoxRT.dll
11602354.760: supR3HardenedMonitor_LdrLoadDll: pName=D:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
11612354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e3f20000 'D:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11622354.760: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11632354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11642354.760: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11652354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11662354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e3f20000 'D:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11672354.760: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11682354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11692354.760: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11702354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11712354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e3f20000 'D:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11722354.760: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll'.
11732354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
11742354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e3f20000 'D:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
11752354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
11762354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 24202) fWinVerifyTrust=1 for '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll'
11772354.760: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\wintrust.dll
11782354.760: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\system32\Wintrust.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
11792354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16620000 'C:\windows\system32\Wintrust.dll'
11802354.760: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rsaenh.dll
11812354.760: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
11822354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
11832354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16140000 'C:\windows\System32\crypt32.dll'
11842354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
11852354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16140000 'C:\windows\System32\crypt32.dll'
11862354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16140000 'C:\windows\system32\crypt32.dll'
11872354.760: SUPR3HardenedMain: Load TrustedMain...
11882354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
11892354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'opengl32.dll'.
11902354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'uicommon.dll'.
11912354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxrt.dll'.
11922354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'msvcp100.dll'.
11932354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'msvcr100.dll'.
11942354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'qt5corevbox.dll'.
11952354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'qt5guivbox.dll'.
11962354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'qt5widgetsvbox.dll'.
11972354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'qt5openglvbox.dll'.
11982354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'user32.dll'.
11992354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'ole32.dll'.
12002354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'oleaut32.dll'.
12012354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #13 'winmm.dll'.
12022354.760: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll) WinVerifyTrust
12032354.760: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll
12042354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
12052354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume4\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008]
12062354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
12072354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16140000 'C:\windows\System32\crypt32.dll'
12082354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'winmmbase.dll'.
12092354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'msvcrt.dll'.
12102354.760: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\winmm.dll) WinVerifyTrust
12112354.760: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\winmm.dll
12122354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
12132354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume4\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
12142354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
12152354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
12162354.760: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll
12172354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmmbase.dll'...
12182354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmmbase.dll' -> '\Device\HarddiskVolume4\Windows\System32\winmmbase.dll' [rcNtRedir=0xc0150008]
12192354.760: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\winmmbase.dll'.
12202354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
12212354.760: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\winmmbase.dll)
12222354.760: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\winmmbase.dll
12232354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
12242354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
12252354.760: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll
12262354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
12272354.760: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\crypt32.dll
12282354.760: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\System32\crypt32.dll (Input=crypt32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
12292354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16140000 'C:\windows\System32\crypt32.dll'
12302354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcp_win.dll'.
12312354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'combase.dll'.
12322354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #23 'rpcrt4.dll'.
12332354.760: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\oleaut32.dll) WinVerifyTrust
12342354.760: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\oleaut32.dll
12352354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
12362354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume4\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
12372354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
12382354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
12392354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
12402354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume4\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
12412354.760: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\combase.dll'.
12422354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'rpcrt4.dll'.
12432354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #45 'bcryptprimitives.dll'.
12442354.760: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\combase.dll)
12452354.760: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\combase.dll
12462354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
12472354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
12482354.760: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\msvcp_win.dll'.
12492354.760: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\msvcp_win.dll)
12502354.760: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\msvcp_win.dll
12512354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcryptprimitives.dll'...
12522354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcryptprimitives.dll' -> '\Device\HarddiskVolume4\Windows\System32\bcryptprimitives.dll' [rcNtRedir=0xc0150008]
12532354.760: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\bcryptprimitives.dll
12542354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
12552354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
12562354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
12572354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16140000 'C:\windows\System32\crypt32.dll'
12582354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #22 'rpcrt4.dll'.
12592354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #56 'gdi32.dll'.
12602354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #57 'user32.dll'.
12612354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #58 'combase.dll'.
12622354.760: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\ole32.dll) WinVerifyTrust
12632354.760: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\ole32.dll
12642354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
12652354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
12662354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
12672354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume4\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
12682354.760: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\combase.dll [lacks WinVerifyTrust]
12692354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
12702354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
12712354.760: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\user32.dll'.
12722354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'win32u.dll'.
12732354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #34 'gdi32.dll'.
12742354.760: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\user32.dll)
12752354.760: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\user32.dll
12762354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
12772354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
12782354.760: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\gdi32.dll'.
12792354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'win32u.dll'.
12802354.760: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\gdi32.dll)
12812354.760: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\gdi32.dll
12822354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
12832354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
12842354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
12852354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume4\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
12862354.760: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\win32u.dll'.
12872354.760: '\Device\HarddiskVolume4\Windows\System32\win32u.dll' has no imports
12882354.760: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\win32u.dll)
12892354.760: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\win32u.dll
12902354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
12912354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
12922354.760: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
12932354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
12942354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume4\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
12952354.760: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\win32u.dll [lacks WinVerifyTrust]
12962354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
12972354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16140000 'C:\windows\System32\crypt32.dll'
12982354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'win32u.dll'.
12992354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #34 'gdi32.dll'.
13002354.760: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\user32.dll) WinVerifyTrust
13012354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5openglvbox.dll'...
13022354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5openglvbox.dll' -> '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\qt5openglvbox.dll' [rcNtRedir=0xc0150008]
13032354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
13042354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
13052354.760: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
13062354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
13072354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume4\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
13082354.760: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\win32u.dll [lacks WinVerifyTrust]
13092354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
13102354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'qt5widgetsvbox.dll'.
13112354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'qt5guivbox.dll'.
13122354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5corevbox.dll'.
13132354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'msvcr100.dll'.
13142354.760: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll) WinVerifyTrust
13152354.760: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll
13162354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5widgetsvbox.dll'...
13172354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll' -> '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\qt5widgetsvbox.dll' [rcNtRedir=0xc0150008]
13182354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
13192354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
13202354.760: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll
13212354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
13222354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
13232354.760: Detected WinVerifyTrust recursion: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll'.
13242354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'.
13252354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'shell32.dll'.
13262354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'ole32.dll'.
13272354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'advapi32.dll'.
13282354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'ws2_32.dll'.
13292354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'mpr.dll'.
13302354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'msvcp100.dll'.
13312354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'msvcr100.dll'.
13322354.760: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll)
13332354.760: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll
13342354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
13352354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
13362354.760: Detected WinVerifyTrust recursion: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll'.
13372354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'ole32.dll'.
13382354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'opengl32.dll'.
13392354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'gdi32.dll'.
13402354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
13412354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'qt5corevbox.dll'.
13422354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'msvcp100.dll'.
13432354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msvcr100.dll'.
13442354.760: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll)
13452354.760: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll
13462354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5widgetsvbox.dll'...
13472354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll' -> '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\qt5widgetsvbox.dll' [rcNtRedir=0xc0150008]
13482354.760: Detected WinVerifyTrust recursion: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'.
13492354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'gdi32.dll'.
13502354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'.
13512354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5guivbox.dll'.
13522354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'qt5corevbox.dll'.
13532354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'shell32.dll'.
13542354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'msvcp100.dll'.
13552354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msvcr100.dll'.
13562354.760: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll)
13572354.760: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll
13582354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
13592354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
13602354.760: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll
13612354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
13622354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
13632354.760: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcp100.dll
13642354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
13652354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume4\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
13662354.760: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\shell32.dll'.
13672354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #77 'user32.dll'.
13682354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #79 'gdi32.dll'.
13692354.760: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\shell32.dll)
13702354.760: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\shell32.dll
13712354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
13722354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
13732354.760: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
13742354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
13752354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
13762354.760: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
13772354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
13782354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
13792354.760: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust]
13802354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
13812354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
13822354.760: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
13832354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
13842354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
13852354.760: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll
13862354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
13872354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
13882354.760: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcp100.dll
13892354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
13902354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
13912354.760: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
13922354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
13932354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
13942354.760: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust]
13952354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
13962354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
13972354.760: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
13982354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
13992354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume4\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008]
14002354.760: Detected WinVerifyTrust recursion: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume4\Windows\System32\opengl32.dll'.
14012354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
14022354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'advapi32.dll'.
14032354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
14042354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'gdi32.dll'.
14052354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'glu32.dll'.
14062354.760: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume4\Windows\System32\opengl32.dll)
14072354.760: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\opengl32.dll
14082354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
14092354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume4\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
14102354.760: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\ole32.dll
14112354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
14122354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
14132354.760: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll
14142354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
14152354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
14162354.760: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcp100.dll
14172354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mpr.dll'...
14182354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'mpr.dll' -> '\Device\HarddiskVolume4\Windows\System32\mpr.dll' [rcNtRedir=0xc0150008]
14192354.760: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\mpr.dll'.
14202354.760: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\mpr.dll)
14212354.760: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\mpr.dll
14222354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
14232354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume4\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
14242354.760: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\ws2_32.dll
14252354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
14262354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
14272354.760: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\advapi32.dll
14282354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
14292354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume4\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
14302354.760: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\ole32.dll
14312354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
14322354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume4\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
14332354.760: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\shell32.dll [lacks WinVerifyTrust]
14342354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
14352354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
14362354.760: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust]
14372354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'glu32.dll'...
14382354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'glu32.dll' -> '\Device\HarddiskVolume4\Windows\System32\glu32.dll' [rcNtRedir=0xc0150008]
14392354.760: Detected WinVerifyTrust recursion: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume4\Windows\System32\glu32.dll'.
14402354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
14412354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'user32.dll'.
14422354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'opengl32.dll'.
14432354.760: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume4\Windows\System32\glu32.dll)
14442354.760: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\glu32.dll
14452354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
14462354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
14472354.760: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
14482354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
14492354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
14502354.760: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust]
14512354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
14522354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
14532354.760: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\advapi32.dll
14542354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
14552354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
14562354.760: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll
14572354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
14582354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
14592354.760: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
14602354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
14612354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
14622354.760: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust]
14632354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
14642354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume4\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008]
14652354.760: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\opengl32.dll [lacks WinVerifyTrust]
14662354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
14672354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
14682354.760: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust]
14692354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
14702354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
14712354.760: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll
14722354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
14732354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'gdi32.dll'.
14742354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'.
14752354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5guivbox.dll'.
14762354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'qt5corevbox.dll'.
14772354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'shell32.dll'.
14782354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'msvcp100.dll'.
14792354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msvcr100.dll'.
14802354.760: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll) WinVerifyTrust
14812354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
14822354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
14832354.760: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [redoing WinVerifyTrust]
14842354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
14852354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
14862354.760: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll
14872354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
14882354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
14892354.760: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcp100.dll
14902354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
14912354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume4\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
14922354.760: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\shell32.dll [lacks WinVerifyTrust]
14932354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
14942354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
14952354.760: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [lacks WinVerifyTrust]
14962354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
14972354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
14982354.760: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [lacks WinVerifyTrust]
14992354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
15002354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
15012354.760: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust]
15022354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
15032354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
15042354.760: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
15052354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
15062354.760: supR3HardenedScreenImage/Imports: 0 (was 24202) fWinVerifyTrust=1 for '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll'
15072354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
15082354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
15092354.760: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [redoing WinVerifyTrust]
15102354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
15112354.760: supR3HardenedScreenImage/Imports: 0 (was 24202) fWinVerifyTrust=1 for '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll'
15122354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
15132354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
15142354.760: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll
15152354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
15162354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
15172354.760: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcp100.dll
15182354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
15192354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
15202354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'uicommon.dll'...
15212354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'uicommon.dll' -> '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\uicommon.dll' [rcNtRedir=0xc0150008]
15222354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
15232354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'vboxrt.dll'.
15242354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcr100.dll'.
15252354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5corevbox.dll'.
15262354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'qt5guivbox.dll'.
15272354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'qt5widgetsvbox.dll'.
15282354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'user32.dll'.
15292354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'advapi32.dll'.
15302354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'ole32.dll'.
15312354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'oleaut32.dll'.
15322354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'rpcrt4.dll'.
15332354.760: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\UICommon.dll) WinVerifyTrust
15342354.760: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\UICommon.dll
15352354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
15362354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume4\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008]
15372354.760: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\opengl32.dll [redoing WinVerifyTrust]
15382354.760: supR3HardNtViCallWinVerifyTrustCatFile: hFile=000000000000046c pwszName=\Device\HarddiskVolume4\Windows\System32\opengl32.dll
15392354.760: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000000bf3cb0
15402354.760: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000bf3cb0
15412354.760: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=0837440FAE05EB650168FFA2D15E73182F6A3A26
15422354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
15432354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
15442354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
15452354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume4\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
15462354.760: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\oleaut32.dll
15472354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
15482354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume4\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
15492354.760: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\ole32.dll
15502354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
15512354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
15522354.760: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\advapi32.dll
15532354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
15542354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
15552354.760: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\user32.dll [lacks WinVerifyTrust]
15562354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5widgetsvbox.dll'...
15572354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll' -> '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\qt5widgetsvbox.dll' [rcNtRedir=0xc0150008]
15582354.760: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [lacks WinVerifyTrust]
15592354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
15602354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
15612354.760: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll
15622354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
15632354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
15642354.760: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll
15652354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
15662354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
15672354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
15682354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
15692354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
15702354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16140000 'C:\windows\System32\crypt32.dll'
15712354.760: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0212~31bf3856ad364e35~amd64~~10.0.18362.900.cat'; file='\Device\HarddiskVolume4\Windows\System32\opengl32.dll'
15722354.760: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
15732354.760: supR3HardenedScreenImage/Imports: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Windows\System32\opengl32.dll'
15742354.760: supR3HardenedMonitor_LdrLoadDll: pName=D:\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000a01:<flags> [calling]
15752354.760: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll
15762354.760: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\opengl32.dll
15772354.760: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\UICommon.dll
15782354.760: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll
15792354.760: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll
15802354.760: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [avoiding WinVerifyTrust]
15812354.760: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll
15822354.760: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\winmm.dll
15832354.760: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\glu32.dll [avoiding WinVerifyTrust]
15842354.760: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\mpr.dll [avoiding WinVerifyTrust]
15852354.760: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\winmmbase.dll [avoiding WinVerifyTrust]
15862354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcp_win.dll'.
15872354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #22 'win32u.dll'.
15882354.760: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\DXCore.dll)
15892354.760: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\DXCore.dll
15902354.760: supR3HardenedDllNotificationCallback: load 00007ffa165f0000 LB 0x00021000 C:\windows\System32\win32u.dll [fFlags=0x0]
15912354.760: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\win32u.dll [avoiding WinVerifyTrust]
15922354.760: supR3HardenedDllNotificationCallback: load 00007ffa166b0000 LB 0x0009e000 C:\windows\System32\msvcp_win.dll [fFlags=0x0]
15932354.760: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcp_win.dll [avoiding WinVerifyTrust]
15942354.760: supR3HardenedDllNotificationCallback: load 00007ffa15ea0000 LB 0x00195000 C:\windows\System32\gdi32full.dll [fFlags=0x0]
15952354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcp_win.dll'.
15962354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #33 'gdi32.dll'.
15972354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #35 'user32.dll'.
15982354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #36 'win32u.dll'.
15992354.760: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\gdi32full.dll)
16002354.760: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\gdi32full.dll
16012354.760: supR3HardenedDllNotificationCallback: load 00007ffa16770000 LB 0x00026000 C:\windows\System32\GDI32.dll [fFlags=0x0]
16022354.760: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\gdi32.dll [avoiding WinVerifyTrust]
16032354.760: supR3HardenedDllNotificationCallback: load 00007ffa17f40000 LB 0x00194000 C:\windows\System32\USER32.dll [fFlags=0x0]
16042354.760: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\user32.dll [avoiding WinVerifyTrust]
16052354.760: supR3HardenedDllNotificationCallback: load 00007ffa17110000 LB 0x00335000 C:\windows\System32\combase.dll [fFlags=0x0]
16062354.760: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\combase.dll [avoiding WinVerifyTrust]
16072354.760: supR3HardenedDllNotificationCallback: load 00007ffa15e50000 LB 0x0004a000 C:\windows\System32\cfgmgr32.dll [fFlags=0x0]
16082354.760: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\cfgmgr32.dll)
16092354.760: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\cfgmgr32.dll
16102354.760: supR3HardenedDllNotificationCallback: load 00007ffa141b0000 LB 0x00020000 C:\windows\SYSTEM32\dxcore.dll [fFlags=0x0]
16112354.760: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\DXCore.dll [avoiding WinVerifyTrust]
16122354.760: supR3HardenedDllNotificationCallback: load 00007ffa0f580000 LB 0x0002c000 C:\windows\SYSTEM32\GLU32.dll [fFlags=0x0]
16132354.760: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\glu32.dll [avoiding WinVerifyTrust]
16142354.760: supR3HardenedDllNotificationCallback: load 00007ffa10950000 LB 0x00156000 C:\windows\SYSTEM32\OPENGL32.dll [fFlags=0x0]
16152354.760: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\opengl32.dll
16162354.760: supR3HardenedDllNotificationCallback: load 00007ffa17a00000 LB 0x000a9000 C:\windows\System32\shcore.dll [fFlags=0x0]
16172354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
16182354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #36 'rpcrt4.dll'.
16192354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #43 'combase.dll'.
16202354.760: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\SHCore.dll)
16212354.760: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\SHCore.dll
16222354.760: supR3HardenedDllNotificationCallback: load 00007ffa15560000 LB 0x00010000 C:\windows\System32\UMPDC.dll [fFlags=0x0]
16232354.760: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\umpdc.dll)
16242354.760: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\umpdc.dll
16252354.760: supR3HardenedDllNotificationCallback: load 00007ffa15590000 LB 0x0004a000 C:\windows\System32\powrprof.dll [fFlags=0x0]
16262354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'rpcrt4.dll'.
16272354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #19 'umpdc.dll'.
16282354.760: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\powrprof.dll)
16292354.760: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\powrprof.dll
16302354.760: supR3HardenedDllNotificationCallback: load 00007ffa16910000 LB 0x00052000 C:\windows\System32\shlwapi.dll [fFlags=0x0]
16312354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcrt.dll'.
16322354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #44 'gdi32.dll'.
16332354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #45 'user32.dll'.
16342354.760: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\shlwapi.dll)
16352354.760: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\shlwapi.dll
16362354.760: supR3HardenedDllNotificationCallback: load 00007ffa15570000 LB 0x00011000 C:\windows\System32\kernel.appcore.dll [fFlags=0x0]
16372354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'msvcrt.dll'.
16382354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'rpcrt4.dll'.
16392354.760: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\kernel.appcore.dll)
16402354.760: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\kernel.appcore.dll
16412354.760: supR3HardenedDllNotificationCallback: load 00007ffa15650000 LB 0x00780000 C:\windows\System32\windows.storage.dll [fFlags=0x0]
16422354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #31 'combase.dll'.
16432354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #32 'msvcp_win.dll'.
16442354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #39 'rpcrt4.dll'.
16452354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #56 'profapi.dll'.
16462354.760: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\windows.storage.dll)
16472354.760: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\windows.storage.dll
16482354.760: supR3HardenedDllNotificationCallback: load 00007ffa16a20000 LB 0x006e6000 C:\windows\System32\SHELL32.dll [fFlags=0x0]
16492354.760: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\shell32.dll [avoiding WinVerifyTrust]
16502354.760: supR3HardenedDllNotificationCallback: load 00007ffa17ab0000 LB 0x00157000 C:\windows\System32\ole32.dll [fFlags=0x0]
16512354.760: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\ole32.dll
16522354.760: supR3HardenedDllNotificationCallback: load 00007ff9f8ed0000 LB 0x0001b000 C:\windows\SYSTEM32\MPR.dll [fFlags=0x0]
16532354.760: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\mpr.dll [avoiding WinVerifyTrust]
16542354.760: supR3HardenedDllNotificationCallback: load 0000000064890000 LB 0x00565000 D:\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [fFlags=0x0]
16552354.760: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll
16562354.760: supR3HardenedDllNotificationCallback: load 00007ff9e3920000 LB 0x005f7000 D:\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [fFlags=0x0]
16572354.760: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll
16582354.760: supR3HardenedDllNotificationCallback: load 0000000064e00000 LB 0x00561000 D:\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [fFlags=0x0]
16592354.760: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [avoiding WinVerifyTrust]
16602354.760: supR3HardenedDllNotificationCallback: load 00007ffa17e70000 LB 0x000c5000 C:\windows\System32\OLEAUT32.dll [fFlags=0x0]
16612354.760: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\oleaut32.dll
16622354.760: supR3HardenedDllNotificationCallback: load 00007ff9ba3e0000 LB 0x02314000 D:\Program Files\Oracle\VirtualBox\UICommon.dll [fFlags=0x0]
16632354.760: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\UICommon.dll
16642354.760: supR3HardenedDllNotificationCallback: load 00000000645b0000 LB 0x00054000 D:\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll [fFlags=0x0]
16652354.760: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll
16662354.760: supR3HardenedDllNotificationCallback: load 00007ffa12e40000 LB 0x0002d000 C:\windows\SYSTEM32\WINMMBASE.dll [fFlags=0x0]
16672354.760: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\winmmbase.dll [avoiding WinVerifyTrust]
16682354.760: supR3HardenedDllNotificationCallback: load 00007ffa13050000 LB 0x00024000 C:\windows\SYSTEM32\WINMM.dll [fFlags=0x0]
16692354.760: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\winmm.dll
16702354.760: supR3HardenedDllNotificationCallback: load 00007ff9fef80000 LB 0x001c8000 D:\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll [fFlags=0x0]
16712354.760: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll
16722354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\windows.storage.dll'.
16732354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\windows.storage.dll' [rescheduled]
16742354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\kernel.appcore.dll'.
16752354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\kernel.appcore.dll' [rescheduled]
16762354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\shlwapi.dll'.
16772354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\shlwapi.dll' [rescheduled]
16782354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\powrprof.dll'.
16792354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\powrprof.dll' [rescheduled]
16802354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\umpdc.dll'.
16812354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\umpdc.dll' [rescheduled]
16822354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\SHCore.dll'.
16832354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\SHCore.dll' [rescheduled]
16842354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\cfgmgr32.dll'.
16852354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\cfgmgr32.dll' [rescheduled]
16862354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\gdi32full.dll'.
16872354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\gdi32full.dll' [rescheduled]
16882354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\DXCore.dll'.
16892354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\DXCore.dll' [rescheduled]
16902354.760: Detected loader lock ownership: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume4\Windows\System32\glu32.dll'.
16912354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 22900 (was 22900) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\glu32.dll' [rescheduled]
16922354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\mpr.dll'.
16932354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\mpr.dll' [rescheduled]
16942354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\shell32.dll'.
16952354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\shell32.dll' [rescheduled]
16962354.760: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'.
16972354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll' [rescheduled]
16982354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\win32u.dll'.
16992354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\win32u.dll' [rescheduled]
17002354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\gdi32.dll'.
17012354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rescheduled]
17022354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\user32.dll'.
17032354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rescheduled]
17042354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\msvcp_win.dll'.
17052354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\msvcp_win.dll' [rescheduled]
17062354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\combase.dll'.
17072354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\combase.dll' [rescheduled]
17082354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\winmmbase.dll'.
17092354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\winmmbase.dll' [rescheduled]
17102354.760: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\kernel32.dll
17112354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'profapi.dll'...
17122354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'profapi.dll' -> '\Device\HarddiskVolume4\Windows\System32\profapi.dll' [rcNtRedir=0xc0150008]
17132354.760: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\profapi.dll
17142354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
17152354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
17162354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
17172354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
17182354.760: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcp_win.dll [redoing WinVerifyTrust]
17192354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\msvcp_win.dll'.
17202354.760: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume4\Windows\System32\msvcp_win.dll
17212354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
17222354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume4\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
17232354.760: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\combase.dll [redoing WinVerifyTrust]
17242354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\combase.dll'.
17252354.760: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume4\Windows\System32\combase.dll
17262354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
17272354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
17282354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
17292354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
17302354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
17312354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
17322354.760: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\user32.dll [redoing WinVerifyTrust]
17332354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\user32.dll'.
17342354.760: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume4\Windows\System32\user32.dll
17352354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
17362354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
17372354.760: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\gdi32.dll [redoing WinVerifyTrust]
17382354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\gdi32.dll'.
17392354.760: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume4\Windows\System32\gdi32.dll
17402354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
17412354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
17422354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'umpdc.dll'...
17432354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'umpdc.dll' -> '\Device\HarddiskVolume4\Windows\System32\umpdc.dll' [rcNtRedir=0xc0150008]
17442354.760: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\umpdc.dll [redoing WinVerifyTrust]
17452354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\umpdc.dll'.
17462354.760: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume4\Windows\System32\umpdc.dll
17472354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
17482354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
17492354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
17502354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume4\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
17512354.760: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\combase.dll [redoing WinVerifyTrust]
17522354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\combase.dll'.
17532354.760: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume4\Windows\System32\combase.dll
17542354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
17552354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
17562354.760: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll
17572354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
17582354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
17592354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
17602354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume4\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
17612354.760: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\win32u.dll [redoing WinVerifyTrust]
17622354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\win32u.dll'.
17632354.760: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume4\Windows\System32\win32u.dll
17642354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
17652354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
17662354.760: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\user32.dll [redoing WinVerifyTrust]
17672354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\user32.dll'.
17682354.760: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume4\Windows\System32\user32.dll
17692354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
17702354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
17712354.760: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\gdi32.dll [redoing WinVerifyTrust]
17722354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\gdi32.dll'.
17732354.760: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume4\Windows\System32\gdi32.dll
17742354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
17752354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
17762354.760: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcp_win.dll [redoing WinVerifyTrust]
17772354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\msvcp_win.dll'.
17782354.760: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume4\Windows\System32\msvcp_win.dll
17792354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
17802354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume4\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
17812354.760: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\win32u.dll [redoing WinVerifyTrust]
17822354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\win32u.dll'.
17832354.760: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume4\Windows\System32\win32u.dll
17842354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
17852354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
17862354.760: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcp_win.dll [redoing WinVerifyTrust]
17872354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\msvcp_win.dll'.
17882354.760: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume4\Windows\System32\msvcp_win.dll
17892354.760: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\System32\kernel32.dll (Input=kernel32, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
17902354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa174d0000 'C:\windows\System32\kernel32.dll'
17912354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\windows.storage.dll'.
17922354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\windows.storage.dll' [rescheduled]
17932354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\kernel.appcore.dll'.
17942354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\kernel.appcore.dll' [rescheduled]
17952354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\shlwapi.dll'.
17962354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\shlwapi.dll' [rescheduled]
17972354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\powrprof.dll'.
17982354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\powrprof.dll' [rescheduled]
17992354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\umpdc.dll'.
18002354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\umpdc.dll' [rescheduled]
18012354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\SHCore.dll'.
18022354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\SHCore.dll' [rescheduled]
18032354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\cfgmgr32.dll'.
18042354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\cfgmgr32.dll' [rescheduled]
18052354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\gdi32full.dll'.
18062354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\gdi32full.dll' [rescheduled]
18072354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\DXCore.dll'.
18082354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\DXCore.dll' [rescheduled]
18092354.760: Detected loader lock ownership: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume4\Windows\System32\glu32.dll'.
18102354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 22900 (was 22900) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\glu32.dll' [rescheduled]
18112354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\mpr.dll'.
18122354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\mpr.dll' [rescheduled]
18132354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\shell32.dll'.
18142354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\shell32.dll' [rescheduled]
18152354.760: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'.
18162354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll' [rescheduled]
18172354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\win32u.dll'.
18182354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\win32u.dll' [rescheduled]
18192354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\gdi32.dll'.
18202354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rescheduled]
18212354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\user32.dll'.
18222354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rescheduled]
18232354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\msvcp_win.dll'.
18242354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\msvcp_win.dll' [rescheduled]
18252354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\combase.dll'.
18262354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\combase.dll' [rescheduled]
18272354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\winmmbase.dll'.
18282354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\winmmbase.dll' [rescheduled]
18292354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\windows.storage.dll'.
18302354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\windows.storage.dll' [rescheduled]
18312354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\kernel.appcore.dll'.
18322354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\kernel.appcore.dll' [rescheduled]
18332354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\shlwapi.dll'.
18342354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\shlwapi.dll' [rescheduled]
18352354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\powrprof.dll'.
18362354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\powrprof.dll' [rescheduled]
18372354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\umpdc.dll'.
18382354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\umpdc.dll' [rescheduled]
18392354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\SHCore.dll'.
18402354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\SHCore.dll' [rescheduled]
18412354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\cfgmgr32.dll'.
18422354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\cfgmgr32.dll' [rescheduled]
18432354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\gdi32full.dll'.
18442354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\gdi32full.dll' [rescheduled]
18452354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\DXCore.dll'.
18462354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\DXCore.dll' [rescheduled]
18472354.760: Detected loader lock ownership: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume4\Windows\System32\glu32.dll'.
18482354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 22900 (was 22900) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\glu32.dll' [rescheduled]
18492354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\mpr.dll'.
18502354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\mpr.dll' [rescheduled]
18512354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\shell32.dll'.
18522354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\shell32.dll' [rescheduled]
18532354.760: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'.
18542354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll' [rescheduled]
18552354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\win32u.dll'.
18562354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\win32u.dll' [rescheduled]
18572354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\gdi32.dll'.
18582354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rescheduled]
18592354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\user32.dll'.
18602354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rescheduled]
18612354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\msvcp_win.dll'.
18622354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\msvcp_win.dll' [rescheduled]
18632354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\combase.dll'.
18642354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\combase.dll' [rescheduled]
18652354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\winmmbase.dll'.
18662354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\winmmbase.dll' [rescheduled]
18672354.760: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-string-l1-1-0) -> 0x0, fPresent=1
18682354.760: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-string-l1-1-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
18692354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16290000 'api-ms-win-core-string-l1-1-0'
18702354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\windows.storage.dll'.
18712354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\windows.storage.dll' [rescheduled]
18722354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\kernel.appcore.dll'.
18732354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\kernel.appcore.dll' [rescheduled]
18742354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\shlwapi.dll'.
18752354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\shlwapi.dll' [rescheduled]
18762354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\powrprof.dll'.
18772354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\powrprof.dll' [rescheduled]
18782354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\umpdc.dll'.
18792354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\umpdc.dll' [rescheduled]
18802354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\SHCore.dll'.
18812354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\SHCore.dll' [rescheduled]
18822354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\cfgmgr32.dll'.
18832354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\cfgmgr32.dll' [rescheduled]
18842354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\gdi32full.dll'.
18852354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\gdi32full.dll' [rescheduled]
18862354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\DXCore.dll'.
18872354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\DXCore.dll' [rescheduled]
18882354.760: Detected loader lock ownership: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume4\Windows\System32\glu32.dll'.
18892354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 22900 (was 22900) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\glu32.dll' [rescheduled]
18902354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\mpr.dll'.
18912354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\mpr.dll' [rescheduled]
18922354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\shell32.dll'.
18932354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\shell32.dll' [rescheduled]
18942354.760: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'.
18952354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll' [rescheduled]
18962354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\win32u.dll'.
18972354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\win32u.dll' [rescheduled]
18982354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\gdi32.dll'.
18992354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rescheduled]
19002354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\user32.dll'.
19012354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rescheduled]
19022354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\msvcp_win.dll'.
19032354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\msvcp_win.dll' [rescheduled]
19042354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\combase.dll'.
19052354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\combase.dll' [rescheduled]
19062354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\winmmbase.dll'.
19072354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\winmmbase.dll' [rescheduled]
19082354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\windows.storage.dll'.
19092354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\windows.storage.dll' [rescheduled]
19102354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\kernel.appcore.dll'.
19112354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\kernel.appcore.dll' [rescheduled]
19122354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\shlwapi.dll'.
19132354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\shlwapi.dll' [rescheduled]
19142354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\powrprof.dll'.
19152354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\powrprof.dll' [rescheduled]
19162354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\umpdc.dll'.
19172354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\umpdc.dll' [rescheduled]
19182354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\SHCore.dll'.
19192354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\SHCore.dll' [rescheduled]
19202354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\cfgmgr32.dll'.
19212354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\cfgmgr32.dll' [rescheduled]
19222354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\gdi32full.dll'.
19232354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\gdi32full.dll' [rescheduled]
19242354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\DXCore.dll'.
19252354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\DXCore.dll' [rescheduled]
19262354.760: Detected loader lock ownership: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume4\Windows\System32\glu32.dll'.
19272354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 22900 (was 22900) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\glu32.dll' [rescheduled]
19282354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\mpr.dll'.
19292354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\mpr.dll' [rescheduled]
19302354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\shell32.dll'.
19312354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\shell32.dll' [rescheduled]
19322354.760: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'.
19332354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll' [rescheduled]
19342354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\win32u.dll'.
19352354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\win32u.dll' [rescheduled]
19362354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\gdi32.dll'.
19372354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rescheduled]
19382354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\user32.dll'.
19392354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rescheduled]
19402354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\msvcp_win.dll'.
19412354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\msvcp_win.dll' [rescheduled]
19422354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\combase.dll'.
19432354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\combase.dll' [rescheduled]
19442354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\winmmbase.dll'.
19452354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\winmmbase.dll' [rescheduled]
19462354.760: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-datetime-l1-1-1) -> 0x0, fPresent=1
19472354.760: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-datetime-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
19482354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16290000 'api-ms-win-core-datetime-l1-1-1'
19492354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\windows.storage.dll'.
19502354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\windows.storage.dll' [rescheduled]
19512354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\kernel.appcore.dll'.
19522354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\kernel.appcore.dll' [rescheduled]
19532354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\shlwapi.dll'.
19542354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\shlwapi.dll' [rescheduled]
19552354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\powrprof.dll'.
19562354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\powrprof.dll' [rescheduled]
19572354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\umpdc.dll'.
19582354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\umpdc.dll' [rescheduled]
19592354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\SHCore.dll'.
19602354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\SHCore.dll' [rescheduled]
19612354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\cfgmgr32.dll'.
19622354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\cfgmgr32.dll' [rescheduled]
19632354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\gdi32full.dll'.
19642354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\gdi32full.dll' [rescheduled]
19652354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\DXCore.dll'.
19662354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\DXCore.dll' [rescheduled]
19672354.760: Detected loader lock ownership: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume4\Windows\System32\glu32.dll'.
19682354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 22900 (was 22900) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\glu32.dll' [rescheduled]
19692354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\mpr.dll'.
19702354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\mpr.dll' [rescheduled]
19712354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\shell32.dll'.
19722354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\shell32.dll' [rescheduled]
19732354.760: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'.
19742354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll' [rescheduled]
19752354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\win32u.dll'.
19762354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\win32u.dll' [rescheduled]
19772354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\gdi32.dll'.
19782354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rescheduled]
19792354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\user32.dll'.
19802354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rescheduled]
19812354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\msvcp_win.dll'.
19822354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\msvcp_win.dll' [rescheduled]
19832354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\combase.dll'.
19842354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\combase.dll' [rescheduled]
19852354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\winmmbase.dll'.
19862354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\winmmbase.dll' [rescheduled]
19872354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\windows.storage.dll'.
19882354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\windows.storage.dll' [rescheduled]
19892354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\kernel.appcore.dll'.
19902354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\kernel.appcore.dll' [rescheduled]
19912354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\shlwapi.dll'.
19922354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\shlwapi.dll' [rescheduled]
19932354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\powrprof.dll'.
19942354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\powrprof.dll' [rescheduled]
19952354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\umpdc.dll'.
19962354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\umpdc.dll' [rescheduled]
19972354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\SHCore.dll'.
19982354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\SHCore.dll' [rescheduled]
19992354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\cfgmgr32.dll'.
20002354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\cfgmgr32.dll' [rescheduled]
20012354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\gdi32full.dll'.
20022354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\gdi32full.dll' [rescheduled]
20032354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\DXCore.dll'.
20042354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\DXCore.dll' [rescheduled]
20052354.760: Detected loader lock ownership: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume4\Windows\System32\glu32.dll'.
20062354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 22900 (was 22900) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\glu32.dll' [rescheduled]
20072354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\mpr.dll'.
20082354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\mpr.dll' [rescheduled]
20092354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\shell32.dll'.
20102354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\shell32.dll' [rescheduled]
20112354.760: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'.
20122354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll' [rescheduled]
20132354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\win32u.dll'.
20142354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\win32u.dll' [rescheduled]
20152354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\gdi32.dll'.
20162354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rescheduled]
20172354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\user32.dll'.
20182354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rescheduled]
20192354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\msvcp_win.dll'.
20202354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\msvcp_win.dll' [rescheduled]
20212354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\combase.dll'.
20222354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\combase.dll' [rescheduled]
20232354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\winmmbase.dll'.
20242354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\winmmbase.dll' [rescheduled]
20252354.760: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-localization-obsolete-l1-2-0) -> 0x0, fPresent=1
20262354.760: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-obsolete-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
20272354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16290000 'api-ms-win-core-localization-obsolete-l1-2-0'
20282354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\windows.storage.dll'.
20292354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\windows.storage.dll' [rescheduled]
20302354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\kernel.appcore.dll'.
20312354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\kernel.appcore.dll' [rescheduled]
20322354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\shlwapi.dll'.
20332354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\shlwapi.dll' [rescheduled]
20342354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\powrprof.dll'.
20352354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\powrprof.dll' [rescheduled]
20362354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\umpdc.dll'.
20372354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\umpdc.dll' [rescheduled]
20382354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\SHCore.dll'.
20392354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\SHCore.dll' [rescheduled]
20402354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\cfgmgr32.dll'.
20412354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\cfgmgr32.dll' [rescheduled]
20422354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\gdi32full.dll'.
20432354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\gdi32full.dll' [rescheduled]
20442354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\DXCore.dll'.
20452354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\DXCore.dll' [rescheduled]
20462354.760: Detected loader lock ownership: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume4\Windows\System32\glu32.dll'.
20472354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 22900 (was 22900) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\glu32.dll' [rescheduled]
20482354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\mpr.dll'.
20492354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\mpr.dll' [rescheduled]
20502354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\shell32.dll'.
20512354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\shell32.dll' [rescheduled]
20522354.760: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'.
20532354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll' [rescheduled]
20542354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\win32u.dll'.
20552354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\win32u.dll' [rescheduled]
20562354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\gdi32.dll'.
20572354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rescheduled]
20582354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\user32.dll'.
20592354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rescheduled]
20602354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\msvcp_win.dll'.
20612354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\msvcp_win.dll' [rescheduled]
20622354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\combase.dll'.
20632354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\combase.dll' [rescheduled]
20642354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\winmmbase.dll'.
20652354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\winmmbase.dll' [rescheduled]
20662354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\windows.storage.dll'.
20672354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\windows.storage.dll' [rescheduled]
20682354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\kernel.appcore.dll'.
20692354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\kernel.appcore.dll' [rescheduled]
20702354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\shlwapi.dll'.
20712354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\shlwapi.dll' [rescheduled]
20722354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\powrprof.dll'.
20732354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\powrprof.dll' [rescheduled]
20742354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\umpdc.dll'.
20752354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\umpdc.dll' [rescheduled]
20762354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\SHCore.dll'.
20772354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\SHCore.dll' [rescheduled]
20782354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\cfgmgr32.dll'.
20792354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\cfgmgr32.dll' [rescheduled]
20802354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\gdi32full.dll'.
20812354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\gdi32full.dll' [rescheduled]
20822354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\DXCore.dll'.
20832354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\DXCore.dll' [rescheduled]
20842354.760: Detected loader lock ownership: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume4\Windows\System32\glu32.dll'.
20852354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 22900 (was 22900) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\glu32.dll' [rescheduled]
20862354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\mpr.dll'.
20872354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\mpr.dll' [rescheduled]
20882354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\shell32.dll'.
20892354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\shell32.dll' [rescheduled]
20902354.760: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'.
20912354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll' [rescheduled]
20922354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\win32u.dll'.
20932354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\win32u.dll' [rescheduled]
20942354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\gdi32.dll'.
20952354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rescheduled]
20962354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\user32.dll'.
20972354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rescheduled]
20982354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\msvcp_win.dll'.
20992354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\msvcp_win.dll' [rescheduled]
21002354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\combase.dll'.
21012354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\combase.dll' [rescheduled]
21022354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\winmmbase.dll'.
21032354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\winmmbase.dll' [rescheduled]
21042354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\imm32.dll'.
21052354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'user32.dll'.
21062354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #25 'win32u.dll'.
21072354.760: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\imm32.dll)
21082354.760: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\imm32.dll
21092354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
21102354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume4\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
21112354.760: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\win32u.dll [redoing WinVerifyTrust]
21122354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\win32u.dll'.
21132354.760: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume4\Windows\System32\win32u.dll
21142354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
21152354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
21162354.760: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\user32.dll [redoing WinVerifyTrust]
21172354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\user32.dll'.
21182354.760: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume4\Windows\System32\user32.dll
21192354.760: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\system32\IMM32.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
21202354.760: supR3HardenedDllNotificationCallback: load 00007ffa18560000 LB 0x0002e000 C:\windows\System32\IMM32.DLL [fFlags=0x0]
21212354.760: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\imm32.dll [avoiding WinVerifyTrust]
21222354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa18560000 'C:\windows\system32\IMM32.DLL'
21232354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\imm32.dll'.
21242354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\imm32.dll' [rescheduled]
21252354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\windows.storage.dll'.
21262354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\windows.storage.dll' [rescheduled]
21272354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\kernel.appcore.dll'.
21282354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\kernel.appcore.dll' [rescheduled]
21292354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\shlwapi.dll'.
21302354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\shlwapi.dll' [rescheduled]
21312354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\powrprof.dll'.
21322354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\powrprof.dll' [rescheduled]
21332354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\umpdc.dll'.
21342354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\umpdc.dll' [rescheduled]
21352354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\SHCore.dll'.
21362354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\SHCore.dll' [rescheduled]
21372354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\cfgmgr32.dll'.
21382354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\cfgmgr32.dll' [rescheduled]
21392354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\gdi32full.dll'.
21402354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\gdi32full.dll' [rescheduled]
21412354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\DXCore.dll'.
21422354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\DXCore.dll' [rescheduled]
21432354.760: Detected loader lock ownership: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume4\Windows\System32\glu32.dll'.
21442354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 22900 (was 22900) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\glu32.dll' [rescheduled]
21452354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\mpr.dll'.
21462354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\mpr.dll' [rescheduled]
21472354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\shell32.dll'.
21482354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\shell32.dll' [rescheduled]
21492354.760: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'.
21502354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll' [rescheduled]
21512354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\win32u.dll'.
21522354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\win32u.dll' [rescheduled]
21532354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\gdi32.dll'.
21542354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rescheduled]
21552354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\user32.dll'.
21562354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rescheduled]
21572354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\msvcp_win.dll'.
21582354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\msvcp_win.dll' [rescheduled]
21592354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\combase.dll'.
21602354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\combase.dll' [rescheduled]
21612354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\winmmbase.dll'.
21622354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\winmmbase.dll' [rescheduled]
21632354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\imm32.dll'.
21642354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\imm32.dll' [rescheduled]
21652354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\windows.storage.dll'.
21662354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\windows.storage.dll' [rescheduled]
21672354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\kernel.appcore.dll'.
21682354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\kernel.appcore.dll' [rescheduled]
21692354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\shlwapi.dll'.
21702354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\shlwapi.dll' [rescheduled]
21712354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\powrprof.dll'.
21722354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\powrprof.dll' [rescheduled]
21732354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\umpdc.dll'.
21742354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\umpdc.dll' [rescheduled]
21752354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\SHCore.dll'.
21762354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\SHCore.dll' [rescheduled]
21772354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\cfgmgr32.dll'.
21782354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\cfgmgr32.dll' [rescheduled]
21792354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\gdi32full.dll'.
21802354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\gdi32full.dll' [rescheduled]
21812354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\DXCore.dll'.
21822354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\DXCore.dll' [rescheduled]
21832354.760: Detected loader lock ownership: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume4\Windows\System32\glu32.dll'.
21842354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 22900 (was 22900) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\glu32.dll' [rescheduled]
21852354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\mpr.dll'.
21862354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\mpr.dll' [rescheduled]
21872354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\shell32.dll'.
21882354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\shell32.dll' [rescheduled]
21892354.760: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'.
21902354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll' [rescheduled]
21912354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\win32u.dll'.
21922354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\win32u.dll' [rescheduled]
21932354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\gdi32.dll'.
21942354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rescheduled]
21952354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\user32.dll'.
21962354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rescheduled]
21972354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\msvcp_win.dll'.
21982354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\msvcp_win.dll' [rescheduled]
21992354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\combase.dll'.
22002354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\combase.dll' [rescheduled]
22012354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\winmmbase.dll'.
22022354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\winmmbase.dll' [rescheduled]
22032354.760: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\advapi32.dll
22042354.760: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\System32\ADVAPI32.DLL (Input=ADVAPI32.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
22052354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16970000 'C:\windows\System32\ADVAPI32.DLL'
22062354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\imm32.dll'.
22072354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\imm32.dll' [rescheduled]
22082354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\windows.storage.dll'.
22092354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\windows.storage.dll' [rescheduled]
22102354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\kernel.appcore.dll'.
22112354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\kernel.appcore.dll' [rescheduled]
22122354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\shlwapi.dll'.
22132354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\shlwapi.dll' [rescheduled]
22142354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\powrprof.dll'.
22152354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\powrprof.dll' [rescheduled]
22162354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\umpdc.dll'.
22172354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\umpdc.dll' [rescheduled]
22182354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\SHCore.dll'.
22192354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\SHCore.dll' [rescheduled]
22202354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\cfgmgr32.dll'.
22212354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\cfgmgr32.dll' [rescheduled]
22222354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\gdi32full.dll'.
22232354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\gdi32full.dll' [rescheduled]
22242354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\DXCore.dll'.
22252354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\DXCore.dll' [rescheduled]
22262354.760: Detected loader lock ownership: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume4\Windows\System32\glu32.dll'.
22272354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 22900 (was 22900) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\glu32.dll' [rescheduled]
22282354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\mpr.dll'.
22292354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\mpr.dll' [rescheduled]
22302354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\shell32.dll'.
22312354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\shell32.dll' [rescheduled]
22322354.760: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'.
22332354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll' [rescheduled]
22342354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\win32u.dll'.
22352354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\win32u.dll' [rescheduled]
22362354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\gdi32.dll'.
22372354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rescheduled]
22382354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\user32.dll'.
22392354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rescheduled]
22402354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\msvcp_win.dll'.
22412354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\msvcp_win.dll' [rescheduled]
22422354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\combase.dll'.
22432354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\combase.dll' [rescheduled]
22442354.760: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume4\Windows\System32\winmmbase.dll'.
22452354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume4\Windows\System32\winmmbase.dll' [rescheduled]
22462354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9fef80000 'D:\Program Files\Oracle\VirtualBox\VirtualBoxVM.dll'
22472354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
22482354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16140000 'C:\windows\System32\crypt32.dll'
22492354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Windows\System32\imm32.dll'
22502354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
22512354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16140000 'C:\windows\System32\crypt32.dll'
22522354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Windows\System32\windows.storage.dll'
22532354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
22542354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16140000 'C:\windows\System32\crypt32.dll'
22552354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Windows\System32\kernel.appcore.dll'
22562354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
22572354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16140000 'C:\windows\System32\crypt32.dll'
22582354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Windows\System32\shlwapi.dll'
22592354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
22602354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16140000 'C:\windows\System32\crypt32.dll'
22612354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Windows\System32\powrprof.dll'
22622354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
22632354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16140000 'C:\windows\System32\crypt32.dll'
22642354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Windows\System32\umpdc.dll'
22652354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
22662354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16140000 'C:\windows\System32\crypt32.dll'
22672354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Windows\System32\SHCore.dll'
22682354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
22692354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16140000 'C:\windows\System32\crypt32.dll'
22702354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Windows\System32\cfgmgr32.dll'
22712354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
22722354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16140000 'C:\windows\System32\crypt32.dll'
22732354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Windows\System32\gdi32full.dll'
22742354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
22752354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16140000 'C:\windows\System32\crypt32.dll'
22762354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Windows\System32\DXCore.dll'
22772354.760: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000470 pwszName=\Device\HarddiskVolume4\Windows\System32\glu32.dll
22782354.760: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000000bf3cb0
22792354.760: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000bf3cb0
22802354.760: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=F356C86D0A2DBA0570D09B39D4AF818DFCB17010
22812354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
22822354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16140000 'C:\windows\System32\crypt32.dll'
22832354.760: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0212~31bf3856ad364e35~amd64~~10.0.18362.900.cat'; file='\Device\HarddiskVolume4\Windows\System32\glu32.dll'
22842354.760: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
22852354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Windows\System32\glu32.dll'
22862354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
22872354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16140000 'C:\windows\System32\crypt32.dll'
22882354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Windows\System32\mpr.dll'
22892354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
22902354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16140000 'C:\windows\System32\crypt32.dll'
22912354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Windows\System32\shell32.dll'
22922354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
22932354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 24202) fWinVerifyTrust=1 for '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll'
22942354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
22952354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16140000 'C:\windows\System32\crypt32.dll'
22962354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Windows\System32\win32u.dll'
22972354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
22982354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16140000 'C:\windows\System32\crypt32.dll'
22992354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Windows\System32\gdi32.dll'
23002354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
23012354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16140000 'C:\windows\System32\crypt32.dll'
23022354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Windows\System32\user32.dll'
23032354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
23042354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16140000 'C:\windows\System32\crypt32.dll'
23052354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Windows\System32\msvcp_win.dll'
23062354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
23072354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16140000 'C:\windows\System32\crypt32.dll'
23082354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Windows\System32\combase.dll'
23092354.760: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rsaenh.dll
23102354.760: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
23112354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
23122354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16140000 'C:\windows\System32\crypt32.dll'
23132354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Windows\System32\winmmbase.dll'
23142354.760: SUPR3HardenedMain: Calling TrustedMain (00007ff9fef816c0)...
23152354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
23162354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'gdi32.dll'.
23172354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'ole32.dll'.
23182354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'user32.dll'.
23192354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'imm32.dll'.
23202354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'winmm.dll'.
23212354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'oleaut32.dll'.
23222354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'shell32.dll'.
23232354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'advapi32.dll'.
23242354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'qt5guivbox.dll'.
23252354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'qt5corevbox.dll'.
23262354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'msvcr100.dll'.
23272354.760: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\platforms\qwindows.dll) WinVerifyTrust
23282354.760: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\platforms\qwindows.dll
23292354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
23302354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
23312354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
23322354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
23332354.760: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll
23342354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
23352354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
23362354.760: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll
23372354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
23382354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
23392354.760: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\advapi32.dll
23402354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
23412354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume4\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
23422354.760: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\shell32.dll
23432354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
23442354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume4\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
23452354.760: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\oleaut32.dll
23462354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
23472354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume4\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008]
23482354.760: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\winmm.dll
23492354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'imm32.dll'...
23502354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'imm32.dll' -> '\Device\HarddiskVolume4\Windows\System32\imm32.dll' [rcNtRedir=0xc0150008]
23512354.760: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\imm32.dll
23522354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
23532354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
23542354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
23552354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume4\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
23562354.760: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\ole32.dll
23572354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
23582354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
23592354.760: supR3HardenedMonitor_LdrLoadDll: pName=D:\Program Files\Oracle\VirtualBox\platforms\qwindows.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
23602354.760: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\platforms\qwindows.dll
23612354.760: supR3HardenedDllNotificationCallback: load 00007ff9e3400000 LB 0x0012e000 D:\Program Files\Oracle\VirtualBox\platforms\qwindows.dll [fFlags=0x0]
23622354.760: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\platforms\qwindows.dll
23632354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e3400000 'D:\Program Files\Oracle\VirtualBox\platforms\qwindows.dll'
23642354.760: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000000000005f4 pwszName=\Device\HarddiskVolume4\Windows\System32\uxtheme.dll
23652354.760: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000000bf3cb0
23662354.760: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000bf3cb0
23672354.760: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=286AD1CEC16EFDCA5718925D19E68A486A5851A0
23682354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
23692354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16140000 'C:\windows\System32\crypt32.dll'
23702354.760: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0415~31bf3856ad364e35~amd64~~10.0.18362.900.cat'; file='\Device\HarddiskVolume4\Windows\System32\uxtheme.dll'
23712354.760: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
23722354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
23732354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #33 'gdi32.dll'.
23742354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #34 'user32.dll'.
23752354.760: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\uxtheme.dll) WinVerifyTrust
23762354.760: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\uxtheme.dll
23772354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
23782354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
23792354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
23802354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
23812354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
23822354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
23832354.760: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\system32\uxtheme.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
23842354.760: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\uxtheme.dll
23852354.760: supR3HardenedDllNotificationCallback: load 00007ffa138b0000 LB 0x00099000 C:\windows\system32\uxtheme.dll [fFlags=0x0]
23862354.760: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\uxtheme.dll
23872354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa138b0000 'C:\windows\system32\uxtheme.dll'
23882354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa17f40000 'C:\windows\system32\user32.dll'
23892354.760: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\shell32.dll
23902354.760: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\system32\shell32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
23912354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16a20000 'C:\windows\system32\shell32.dll'
23922354.760: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\SHCore.dll
23932354.760: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\system32\SHCore.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
23942354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa17a00000 'C:\windows\system32\SHCore.dll'
23952354.760: supR3HardenedMonitor_LdrLoadDll: error opening 'C:\windows\system32\wintab32.dll': 0 (NtPath=\??\C:\windows\system32\wintab32.dll; Input=C:\windows\system32\wintab32.dll; rcNtGetDll=0x0
23962354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0xc0000034 'C:\windows\system32\wintab32.dll'
23972354.760: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\winmm.dll
23982354.760: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\system32\winmm.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
23992354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\system32\winmm.dll'
24002354.760: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\winmm.dll
24012354.760: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\system32\winmm.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
24022354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\system32\winmm.dll'
24032354.760: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\shell32.dll
24042354.760: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\system32\shell32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
24052354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16a20000 'C:\windows\system32\shell32.dll'
24062354.760: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\uxtheme.dll
24072354.760: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\system32\uxtheme.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
24082354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa138b0000 'C:\windows\system32\uxtheme.dll'
24092354.760: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\advapi32.dll
24102354.760: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\system32\advapi32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
24112354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16970000 'C:\windows\system32\advapi32.dll'
24122354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
24132354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16140000 'C:\windows\System32\crypt32.dll'
24142354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #13 'rpcrt4.dll'.
24152354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #30 'profapi.dll'.
24162354.760: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\userenv.dll) WinVerifyTrust
24172354.760: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\userenv.dll
24182354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'profapi.dll'...
24192354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'profapi.dll' -> '\Device\HarddiskVolume4\Windows\System32\profapi.dll' [rcNtRedir=0xc0150008]
24202354.760: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\profapi.dll
24212354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
24222354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
24232354.760: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\system32\userenv.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
24242354.760: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\userenv.dll
24252354.760: supR3HardenedDllNotificationCallback: load 00007ffa15480000 LB 0x00025000 C:\windows\system32\userenv.dll [fFlags=0x0]
24262354.760: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\userenv.dll
24272354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa15480000 'C:\windows\system32\userenv.dll'
24282354.760: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\kernel32.dll
24292354.760: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\System32\kernel32.dll (Input=kernel32, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
24302354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa174d0000 'C:\windows\System32\kernel32.dll'
24312354.760: supR3HardenedDllNotificationCallback: load 00007ffa17dc0000 LB 0x000a2000 C:\windows\System32\clbcatq.dll [fFlags=0x0]
24322354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
24332354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #30 'rpcrt4.dll'.
24342354.760: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\clbcatq.dll)
24352354.760: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\clbcatq.dll
24362354.2f64: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
24372354.2f64: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
24382354.2f64: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
24392354.2f64: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
24402354.2f64: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
24412354.2f64: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16140000 'C:\windows\System32\crypt32.dll'
24422354.2f64: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Windows\System32\clbcatq.dll'
24432354.2f64: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
24442354.2f64: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
24452354.2f64: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp100.dll'.
24462354.2f64: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxrt.dll'.
24472354.2f64: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'advapi32.dll'.
24482354.2f64: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'ole32.dll'.
24492354.2f64: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'oleaut32.dll'.
24502354.2f64: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VBoxC.dll) WinVerifyTrust
24512354.2f64: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VBoxC.dll
24522354.2f64: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
24532354.2f64: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume4\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
24542354.2f64: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\oleaut32.dll
24552354.2f64: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
24562354.2f64: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume4\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
24572354.2f64: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\ole32.dll
24582354.2f64: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
24592354.2f64: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
24602354.2f64: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\advapi32.dll
24612354.2f64: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
24622354.2f64: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
24632354.2f64: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
24642354.2f64: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
24652354.2f64: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcp100.dll
24662354.2f64: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
24672354.2f64: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
24682354.2f64: supR3HardenedMonitor_LdrLoadDll: pName=D:\Program Files\Oracle\VirtualBox\VBoxC.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
24692354.2f64: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VBoxC.dll
24702354.2f64: supR3HardenedDllNotificationCallback: load 00007ff9e2f60000 LB 0x003b0000 D:\Program Files\Oracle\VirtualBox\VBoxC.dll [fFlags=0x0]
24712354.2f64: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VBoxC.dll
24722354.2f64: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e2f60000 'D:\Program Files\Oracle\VirtualBox\VBoxC.dll'
24732354.2f64: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
24742354.2f64: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
24752354.2f64: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
24762354.2f64: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'advapi32.dll'.
24772354.2f64: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'shlwapi.dll'.
24782354.2f64: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'ole32.dll'.
24792354.2f64: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'oleaut32.dll'.
24802354.2f64: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'rpcrt4.dll'.
24812354.2f64: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VBoxProxyStub.dll) WinVerifyTrust
24822354.2f64: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VBoxProxyStub.dll
24832354.2f64: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
24842354.2f64: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
24852354.2f64: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
24862354.2f64: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume4\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
24872354.2f64: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\oleaut32.dll
24882354.2f64: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
24892354.2f64: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume4\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
24902354.2f64: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\ole32.dll
24912354.2f64: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shlwapi.dll'...
24922354.2f64: supR3HardenedWinVerifyCacheProcessImportTodos: 'shlwapi.dll' -> '\Device\HarddiskVolume4\Windows\System32\shlwapi.dll' [rcNtRedir=0xc0150008]
24932354.2f64: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\shlwapi.dll
24942354.2f64: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
24952354.2f64: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
24962354.2f64: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\advapi32.dll
24972354.2f64: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
24982354.2f64: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
24992354.2f64: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
25002354.2f64: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
25012354.2f64: supR3HardenedMonitor_LdrLoadDll: pName=D:\Program Files\Oracle\VirtualBox\VBoxProxyStub.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
25022354.2f64: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VBoxProxyStub.dll
25032354.2f64: supR3HardenedDllNotificationCallback: load 00007ff9e3310000 LB 0x000ed000 D:\Program Files\Oracle\VirtualBox\VBoxProxyStub.dll [fFlags=0x0]
25042354.2f64: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VBoxProxyStub.dll
25052354.2f64: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e3310000 'D:\Program Files\Oracle\VirtualBox\VBoxProxyStub.dll'
25062354.2f64: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000714 pwszName=\Device\HarddiskVolume4\Windows\System32\msiltcfg.dll
25072354.2f64: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000000bf3cb0
25082354.2f64: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000bf3cb0
25092354.2f64: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=18F5337EE7F9E69042ABA03B5E3E62E237D3C5A9
25102354.2f64: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
25112354.2f64: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16140000 'C:\windows\System32\crypt32.dll'
25122354.2f64: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0211~31bf3856ad364e35~amd64~~10.0.18362.900.cat'; file='\Device\HarddiskVolume4\Windows\System32\msiltcfg.dll'
25132354.2f64: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
25142354.2f64: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
25152354.2f64: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'advapi32.dll'.
25162354.2f64: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'version.dll'.
25172354.2f64: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\msiltcfg.dll) WinVerifyTrust
25182354.2f64: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\msiltcfg.dll
25192354.2f64: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'version.dll'...
25202354.2f64: supR3HardenedWinVerifyCacheProcessImportTodos: 'version.dll' -> '\Device\HarddiskVolume4\Windows\System32\version.dll' [rcNtRedir=0xc0150008]
25212354.2f64: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
25222354.2f64: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16140000 'C:\windows\System32\crypt32.dll'
25232354.2f64: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
25242354.2f64: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\version.dll) WinVerifyTrust
25252354.2f64: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\version.dll
25262354.2f64: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
25272354.2f64: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
25282354.2f64: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
25292354.2f64: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
25302354.2f64: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
25312354.2f64: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
25322354.2f64: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\System32\msiltcfg.dll (Input=msiltcfg.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
25332354.2f64: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msiltcfg.dll
25342354.2f64: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\version.dll
25352354.2f64: supR3HardenedDllNotificationCallback: load 00007ffa0e2d0000 LB 0x0000a000 C:\windows\SYSTEM32\VERSION.dll [fFlags=0x0]
25362354.2f64: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\version.dll
25372354.2f64: supR3HardenedDllNotificationCallback: load 00007ff9e93a0000 LB 0x0000a000 C:\windows\System32\msiltcfg.dll [fFlags=0x0]
25382354.2f64: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msiltcfg.dll
25392354.2f64: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e93a0000 'C:\windows\System32\msiltcfg.dll'
25402354.2f64: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\user32.dll
25412354.2f64: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\System32\user32.dll (Input=user32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
25422354.2f64: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa17f40000 'C:\windows\System32\user32.dll'
25432354.2f64: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000000000006d8 pwszName=\Device\HarddiskVolume4\Windows\System32\msi.dll
25442354.2f64: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000000bf3cb0
25452354.2f64: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000bf3cb0
25462354.2f64: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=D632F4707AC34D872FD0014EC575A010A4FDD7CA
25472354.2f64: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
25482354.2f64: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16140000 'C:\windows\System32\crypt32.dll'
25492354.2f64: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0211~31bf3856ad364e35~amd64~~10.0.18362.900.cat'; file='\Device\HarddiskVolume4\Windows\System32\msi.dll'
25502354.2f64: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
25512354.2f64: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
25522354.2f64: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'advapi32.dll'.
25532354.2f64: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'user32.dll'.
25542354.2f64: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'shell32.dll'.
25552354.2f64: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'gdi32.dll'.
25562354.2f64: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'rpcrt4.dll'.
25572354.2f64: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'ole32.dll'.
25582354.2f64: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'bcrypt.dll'.
25592354.2f64: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\msi.dll) WinVerifyTrust
25602354.2f64: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\msi.dll
25612354.2f64: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcrypt.dll'...
25622354.2f64: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcrypt.dll' -> '\Device\HarddiskVolume4\Windows\System32\bcrypt.dll' [rcNtRedir=0xc0150008]
25632354.2f64: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\bcrypt.dll
25642354.2f64: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
25652354.2f64: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume4\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
25662354.2f64: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\ole32.dll
25672354.2f64: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
25682354.2f64: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
25692354.2f64: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
25702354.2f64: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
25712354.2f64: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
25722354.2f64: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume4\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
25732354.2f64: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\shell32.dll
25742354.2f64: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
25752354.2f64: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
25762354.2f64: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
25772354.2f64: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
25782354.2f64: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
25792354.2f64: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
25802354.2f64: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll
25812354.2f64: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\System32\msi.dll (Input=msi.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
25822354.2f64: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msi.dll
25832354.2f64: supR3HardenedDllNotificationCallback: load 00007ff9f3000000 LB 0x0046e000 C:\windows\System32\msi.dll [fFlags=0x0]
25842354.2f64: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msi.dll
25852354.2f64: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f3000000 'C:\windows\System32\msi.dll'
25862354.2f64: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msiltcfg.dll
25872354.2f64: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\System32\msiltcfg.dll (Input=msiltcfg.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
25882354.2f64: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e93a0000 'C:\windows\System32\msiltcfg.dll'
25892354.2f64: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\oleaut32.dll
25902354.2f64: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\system32\oleaut32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
25912354.2f64: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa17e70000 'C:\windows\system32\oleaut32.dll'
25922354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16770000 'C:\windows\system32\gdi32.dll'
25932354.2e80: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
25942354.2e80: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
25952354.2e80: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
25962354.2e80: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
25972354.2e80: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
25982354.2e80: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxPuelMainVM.dll) WinVerifyTrust
25992354.2e80: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxPuelMainVM.dll
26002354.2e80: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
26012354.2e80: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
26022354.2e80: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
26032354.2e80: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
26042354.2e80: supR3HardenedMonitor_LdrLoadDll: pName=D:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxPuelMainVM.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
26052354.2e80: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxPuelMainVM.dll
26062354.2e80: supR3HardenedDllNotificationCallback: load 00007ffa11eb0000 LB 0x0000e000 D:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxPuelMainVM.DLL [fFlags=0x0]
26072354.2e80: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxPuelMainVM.dll
26082354.2e80: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa11eb0000 'D:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxPuelMainVM.DLL'
26092354.760: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\oleaut32.dll
26102354.760: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\oleaut32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
26112354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa17e70000 'C:\Windows\System32\oleaut32.dll'
26122354.760: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\shell32.dll
26132354.760: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\system32\shell32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
26142354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16a20000 'C:\windows\system32\shell32.dll'
26152354.760: supR3HardenedDllNotificationCallback: load 00007ffa17c80000 LB 0x00135000 C:\windows\System32\MSCTF.dll [fFlags=0x0]
26162354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
26172354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'oleaut32.dll'.
26182354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #38 'user32.dll'.
26192354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #39 'gdi32.dll'.
26202354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #40 'imm32.dll'.
26212354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #41 'advapi32.dll'.
26222354.760: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\msctf.dll)
26232354.760: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\msctf.dll
26242354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
26252354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
26262354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'imm32.dll'...
26272354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'imm32.dll' -> '\Device\HarddiskVolume4\Windows\System32\imm32.dll' [rcNtRedir=0xc0150008]
26282354.760: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\imm32.dll
26292354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
26302354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
26312354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
26322354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
26332354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
26342354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume4\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
26352354.760: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\oleaut32.dll
26362354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
26372354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
26382354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
26392354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16140000 'C:\windows\System32\crypt32.dll'
26402354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Windows\System32\msctf.dll'
26412354.760: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000990 pwszName=\Device\HarddiskVolume4\Windows\System32\DataExchange.dll
26422354.760: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000000bf3cb0
26432354.760: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000bf3cb0
26442354.760: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=AF758F581E6ED4B195B000E1E88DA05815FF2C72
26452354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
26462354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16140000 'C:\windows\System32\crypt32.dll'
26472354.760: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0410~31bf3856ad364e35~amd64~~10.0.18362.900.cat'; file='\Device\HarddiskVolume4\Windows\System32\DataExchange.dll'
26482354.760: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
26492354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
26502354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'shcore.dll'.
26512354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #29 'combase.dll'.
26522354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #34 'd3d11.dll'.
26532354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #35 'dcomp.dll'.
26542354.760: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\DataExchange.dll) WinVerifyTrust
26552354.760: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\DataExchange.dll
26562354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'dcomp.dll'...
26572354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'dcomp.dll' -> '\Device\HarddiskVolume4\Windows\System32\dcomp.dll' [rcNtRedir=0xc0150008]
26582354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
26592354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16140000 'C:\windows\System32\crypt32.dll'
26602354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'win32u.dll'.
26612354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp_win.dll'.
26622354.760: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\dcomp.dll) WinVerifyTrust
26632354.760: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\dcomp.dll
26642354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'd3d11.dll'...
26652354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'd3d11.dll' -> '\Device\HarddiskVolume4\Windows\System32\d3d11.dll' [rcNtRedir=0xc0150008]
26662354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
26672354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
26682354.760: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcp_win.dll
26692354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
26702354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume4\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
26712354.760: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\win32u.dll
26722354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
26732354.760: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\crypt32.dll
26742354.760: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\System32\crypt32.dll (Input=crypt32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
26752354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16140000 'C:\windows\System32\crypt32.dll'
26762354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
26772354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #24 'dxgi.dll'.
26782354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #27 'win32u.dll'.
26792354.760: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\d3d11.dll) WinVerifyTrust
26802354.760: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\d3d11.dll
26812354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
26822354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume4\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
26832354.760: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\combase.dll
26842354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shcore.dll'...
26852354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'shcore.dll' -> '\Device\HarddiskVolume4\Windows\System32\shcore.dll' [rcNtRedir=0xc0150008]
26862354.760: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\SHCore.dll
26872354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
26882354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
26892354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
26902354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume4\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
26912354.760: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\win32u.dll
26922354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'dxgi.dll'...
26932354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'dxgi.dll' -> '\Device\HarddiskVolume4\Windows\System32\dxgi.dll' [rcNtRedir=0xc0150008]
26942354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
26952354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16140000 'C:\windows\System32\crypt32.dll'
26962354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
26972354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'win32u.dll'.
26982354.760: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\dxgi.dll) WinVerifyTrust
26992354.760: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\dxgi.dll
27002354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
27012354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
27022354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
27032354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume4\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
27042354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
27052354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
27062354.760: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\system32\dataexchange.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
27072354.760: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\DataExchange.dll
27082354.760: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\d3d11.dll
27092354.760: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\dcomp.dll
27102354.760: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\dxgi.dll
27112354.760: supR3HardenedDllNotificationCallback: load 00007ffa14240000 LB 0x000eb000 C:\windows\system32\dxgi.dll [fFlags=0x0]
27122354.760: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\dxgi.dll
27132354.760: supR3HardenedDllNotificationCallback: load 00007ffa12780000 LB 0x0025b000 C:\windows\system32\d3d11.dll [fFlags=0x0]
27142354.760: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\d3d11.dll
27152354.760: supR3HardenedDllNotificationCallback: load 00007ffa12e70000 LB 0x001dc000 C:\windows\system32\dcomp.dll [fFlags=0x0]
27162354.760: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\dcomp.dll
27172354.760: supR3HardenedDllNotificationCallback: load 00007ff9f07c0000 LB 0x0003a000 C:\windows\system32\dataexchange.dll [fFlags=0x0]
27182354.760: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\DataExchange.dll
27192354.760: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\gdi32.dll
27202354.760: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\System32\gdi32.dll (Input=gdi32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
27212354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16770000 'C:\windows\System32\gdi32.dll'
27222354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9f07c0000 'C:\windows\system32\dataexchange.dll'
27232354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'rmclient.dll'.
27242354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #31 'rpcrt4.dll'.
27252354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #47 'combase.dll'.
27262354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #50 'msvcp_win.dll'.
27272354.760: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\twinapi.appcore.dll)
27282354.760: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\twinapi.appcore.dll
27292354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
27302354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'rpcrt4.dll'.
27312354.760: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\rmclient.dll)
27322354.760: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\rmclient.dll
27332354.760: supR3HardenedDllNotificationCallback: load 00007ffa13dc0000 LB 0x00029000 C:\windows\system32\RMCLIENT.dll [fFlags=0x0]
27342354.760: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rmclient.dll [avoiding WinVerifyTrust]
27352354.760: supR3HardenedDllNotificationCallback: load 00007ffa13980000 LB 0x00261000 C:\windows\system32\twinapi.appcore.dll [fFlags=0x0]
27362354.760: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\twinapi.appcore.dll [avoiding WinVerifyTrust]
27372354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
27382354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
27392354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
27402354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
27412354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
27422354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
27432354.760: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcp_win.dll
27442354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
27452354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume4\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
27462354.760: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\combase.dll
27472354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
27482354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
27492354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rmclient.dll'...
27502354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'rmclient.dll' -> '\Device\HarddiskVolume4\Windows\System32\rmclient.dll' [rcNtRedir=0xc0150008]
27512354.760: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rmclient.dll [lacks WinVerifyTrust]
27522354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
27532354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16140000 'C:\windows\System32\crypt32.dll'
27542354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Windows\System32\rmclient.dll'
27552354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
27562354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16140000 'C:\windows\System32\crypt32.dll'
27572354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Windows\System32\twinapi.appcore.dll'
27582354.760: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\SHCore.dll
27592354.760: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\system32\Shcore.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
27602354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa17a00000 'C:\windows\system32\Shcore.dll'
27612354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
27622354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #15 'rpcrt4.dll'.
27632354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #19 'coreuicomponents.dll'.
27642354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #20 'coremessaging.dll'.
27652354.760: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\TextInputFramework.dll)
27662354.760: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\TextInputFramework.dll
27672354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
27682354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #35 'coremessaging.dll'.
27692354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #47 'shcore.dll'.
27702354.760: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\CoreUIComponents.dll)
27712354.760: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\CoreUIComponents.dll
27722354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
27732354.760: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\CoreMessaging.dll)
27742354.760: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\CoreMessaging.dll
27752354.760: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\ntmarta.dll)
27762354.760: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\ntmarta.dll
27772354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'combase.dll'.
27782354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #24 'rpcrt4.dll'.
27792354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #32 'bcryptprimitives.dll'.
27802354.760: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\WinTypes.dll)
27812354.760: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\WinTypes.dll
27822354.760: supR3HardenedDllNotificationCallback: load 00007ffa145a0000 LB 0x00031000 C:\windows\SYSTEM32\ntmarta.dll [fFlags=0x0]
27832354.760: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\ntmarta.dll [avoiding WinVerifyTrust]
27842354.760: supR3HardenedDllNotificationCallback: load 00007ffa13080000 LB 0x000d4000 C:\windows\System32\CoreMessaging.dll [fFlags=0x0]
27852354.760: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\CoreMessaging.dll [avoiding WinVerifyTrust]
27862354.760: supR3HardenedDllNotificationCallback: load 00007ffa11020000 LB 0x00153000 C:\windows\SYSTEM32\wintypes.dll [fFlags=0x0]
27872354.760: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\WinTypes.dll [avoiding WinVerifyTrust]
27882354.760: supR3HardenedDllNotificationCallback: load 00007ffa112b0000 LB 0x0032a000 C:\windows\System32\CoreUIComponents.dll [fFlags=0x0]
27892354.760: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\CoreUIComponents.dll [avoiding WinVerifyTrust]
27902354.760: supR3HardenedDllNotificationCallback: load 00007ffa05660000 LB 0x0009e000 C:\windows\System32\TextInputFramework.dll [fFlags=0x0]
27912354.760: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\TextInputFramework.dll [avoiding WinVerifyTrust]
27922354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcryptprimitives.dll'...
27932354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcryptprimitives.dll' -> '\Device\HarddiskVolume4\Windows\System32\bcryptprimitives.dll' [rcNtRedir=0xc0150008]
27942354.760: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\bcryptprimitives.dll
27952354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
27962354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
27972354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
27982354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume4\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
27992354.760: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\combase.dll
28002354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
28012354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
28022354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shcore.dll'...
28032354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'shcore.dll' -> '\Device\HarddiskVolume4\Windows\System32\shcore.dll' [rcNtRedir=0xc0150008]
28042354.760: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\SHCore.dll
28052354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'coremessaging.dll'...
28062354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'coremessaging.dll' -> '\Device\HarddiskVolume4\Windows\System32\coremessaging.dll' [rcNtRedir=0xc0150008]
28072354.760: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\CoreMessaging.dll [lacks WinVerifyTrust]
28082354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
28092354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
28102354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'coremessaging.dll'...
28112354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'coremessaging.dll' -> '\Device\HarddiskVolume4\Windows\System32\coremessaging.dll' [rcNtRedir=0xc0150008]
28122354.760: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\CoreMessaging.dll [lacks WinVerifyTrust]
28132354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'coreuicomponents.dll'...
28142354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'coreuicomponents.dll' -> '\Device\HarddiskVolume4\Windows\System32\coreuicomponents.dll' [rcNtRedir=0xc0150008]
28152354.760: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\CoreUIComponents.dll [lacks WinVerifyTrust]
28162354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
28172354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
28182354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
28192354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
28202354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
28212354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16140000 'C:\windows\System32\crypt32.dll'
28222354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Windows\System32\WinTypes.dll'
28232354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
28242354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16140000 'C:\windows\System32\crypt32.dll'
28252354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Windows\System32\ntmarta.dll'
28262354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
28272354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16140000 'C:\windows\System32\crypt32.dll'
28282354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Windows\System32\CoreMessaging.dll'
28292354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
28302354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16140000 'C:\windows\System32\crypt32.dll'
28312354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Windows\System32\CoreUIComponents.dll'
28322354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
28332354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16140000 'C:\windows\System32\crypt32.dll'
28342354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Windows\System32\TextInputFramework.dll'
28352354.760: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(ext-ms-win-rtcore-ntuser-window-ext-l1-1-0.dll) -> 0x0, fPresent=1
28362354.760: supR3HardenedMonitor_LdrLoadDll: pName=ext-ms-win-rtcore-ntuser-window-ext-l1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
28372354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa17f40000 'ext-ms-win-rtcore-ntuser-window-ext-l1-1-0.dll'
28382354.760: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(ext-ms-win-rtcore-ntuser-integration-l1-1-0.dll) -> 0x0, fPresent=1
28392354.760: supR3HardenedMonitor_LdrLoadDll: pName=ext-ms-win-rtcore-ntuser-integration-l1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
28402354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa17f40000 'ext-ms-win-rtcore-ntuser-integration-l1-1-0.dll'
28412354.760: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-com-l1-1-0.dll) -> 0x0, fPresent=1
28422354.760: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-com-l1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
28432354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa17110000 'api-ms-win-core-com-l1-1-0.dll'
28442354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
28452354.760: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\iertutil.dll)
28462354.760: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\iertutil.dll
28472354.760: supR3HardenedDllNotificationCallback: load 00007ffa03a00000 LB 0x002a6000 C:\windows\System32\iertutil.dll [fFlags=0x0]
28482354.760: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\iertutil.dll [avoiding WinVerifyTrust]
28492354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
28502354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
28512354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
28522354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16140000 'C:\windows\System32\crypt32.dll'
28532354.760: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Windows\System32\iertutil.dll'
28542354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa17ab0000 'C:\windows\system32\ole32.dll'
28552354.760: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msctf.dll
28562354.760: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\System32\MSCTF.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
28572354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa17c80000 'C:\windows\System32\MSCTF.dll'
28582354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa17ab0000 'C:\windows\System32\ole32.dll'
28592354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa17e70000 'C:\windows\System32\OLEAUT32.dll'
28602354.760: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000abc pwszName=\Device\HarddiskVolume4\Windows\System32\wbem\wbemprox.dll
28612354.760: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000000bf3cb0
28622354.760: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000bf3cb0
28632354.760: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=DB1AA7E2E4704C908EC9382E1F9E64808B9E5E1D
28642354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
28652354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16140000 'C:\windows\System32\crypt32.dll'
28662354.760: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package03~31bf3856ad364e35~amd64~~10.0.18362.900.cat'; file='\Device\HarddiskVolume4\Windows\System32\wbem\wbemprox.dll'
28672354.760: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
28682354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
28692354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'ws2_32.dll'.
28702354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #18 'wbemcomn.dll'.
28712354.760: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\wbem\wbemprox.dll) WinVerifyTrust
28722354.760: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\wbem\wbemprox.dll
28732354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'wbemcomn.dll'...
28742354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'wbemcomn.dll' -> '\Device\HarddiskVolume4\Windows\System32\wbemcomn.dll' [rcNtRedir=0xc0150008]
28752354.760: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000af8 pwszName=\Device\HarddiskVolume4\Windows\System32\wbemcomn.dll
28762354.760: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000000bf3cb0
28772354.760: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000bf3cb0
28782354.760: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=22EAF38FA276D7A374D3945ACD556FA0953D3440
28792354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
28802354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16140000 'C:\windows\System32\crypt32.dll'
28812354.760: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package03~31bf3856ad364e35~amd64~~10.0.18362.900.cat'; file='\Device\HarddiskVolume4\Windows\System32\wbemcomn.dll'
28822354.760: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
28832354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
28842354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #14 'bcrypt.dll'.
28852354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #18 'ws2_32.dll'.
28862354.760: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\wbemcomn.dll) WinVerifyTrust
28872354.760: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\wbemcomn.dll
28882354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
28892354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume4\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
28902354.760: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\ws2_32.dll
28912354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
28922354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
28932354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
28942354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume4\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
28952354.760: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\ws2_32.dll
28962354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcrypt.dll'...
28972354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcrypt.dll' -> '\Device\HarddiskVolume4\Windows\System32\bcrypt.dll' [rcNtRedir=0xc0150008]
28982354.760: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\bcrypt.dll
28992354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
29002354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
29012354.760: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\system32\wbem\wbemprox.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
29022354.760: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\wbem\wbemprox.dll
29032354.760: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\wbemcomn.dll
29042354.760: supR3HardenedDllNotificationCallback: load 00007ffa06d80000 LB 0x00084000 C:\windows\SYSTEM32\wbemcomn.dll [fFlags=0x0]
29052354.760: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\wbemcomn.dll
29062354.760: supR3HardenedDllNotificationCallback: load 00007ffa06e10000 LB 0x00011000 C:\windows\system32\wbem\wbemprox.dll [fFlags=0x0]
29072354.760: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\wbem\wbemprox.dll
29082354.760: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(API-MS-Win-Core-LocalRegistry-L1-1-0.dll) -> 0x0, fPresent=1
29092354.760: supR3HardenedMonitor_LdrLoadDll: pName=API-MS-Win-Core-LocalRegistry-L1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
29102354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16290000 'API-MS-Win-Core-LocalRegistry-L1-1-0.dll'
29112354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa06e10000 'C:\windows\system32\wbem\wbemprox.dll'
29122354.760: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000b14 pwszName=\Device\HarddiskVolume4\Windows\System32\wbem\wbemsvc.dll
29132354.760: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000000bf3cb0
29142354.760: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000bf3cb0
29152354.760: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=00C864D7F76A7AD25E7D0DA164B0B66188F5B7FF
29162354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
29172354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16140000 'C:\windows\System32\crypt32.dll'
29182354.760: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package03~31bf3856ad364e35~amd64~~10.0.18362.900.cat'; file='\Device\HarddiskVolume4\Windows\System32\wbem\wbemsvc.dll'
29192354.760: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
29202354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
29212354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'rpcrt4.dll'.
29222354.760: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\wbem\wbemsvc.dll) WinVerifyTrust
29232354.760: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\wbem\wbemsvc.dll
29242354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
29252354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
29262354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
29272354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
29282354.760: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\system32\wbem\wbemsvc.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
29292354.760: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\wbem\wbemsvc.dll
29302354.760: supR3HardenedDllNotificationCallback: load 00007ffa05ec0000 LB 0x00014000 C:\windows\system32\wbem\wbemsvc.dll [fFlags=0x0]
29312354.760: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\wbem\wbemsvc.dll
29322354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa05ec0000 'C:\windows\system32\wbem\wbemsvc.dll'
29332354.760: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-localization-l1-2-0.dll) -> 0x0, fPresent=1
29342354.760: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-l1-2-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
29352354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16290000 'api-ms-win-core-localization-l1-2-0.dll'
29362354.760: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-localization-obsolete-l1-1-0.dll) -> 0x0, fPresent=1
29372354.760: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-obsolete-l1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
29382354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16290000 'api-ms-win-core-localization-obsolete-l1-1-0.dll'
29392354.760: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000ae4 pwszName=\Device\HarddiskVolume4\Windows\System32\wbem\fastprox.dll
29402354.760: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000000bf3cb0
29412354.760: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000bf3cb0
29422354.760: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=0708A64F48237CD4D5092546CE9C373F20B30CA1
29432354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
29442354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16140000 'C:\windows\System32\crypt32.dll'
29452354.760: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package03~31bf3856ad364e35~amd64~~10.0.18362.900.cat'; file='\Device\HarddiskVolume4\Windows\System32\wbem\fastprox.dll'
29462354.760: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
29472354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
29482354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #20 'wbemcomn.dll'.
29492354.760: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\wbem\fastprox.dll) WinVerifyTrust
29502354.760: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\wbem\fastprox.dll
29512354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'wbemcomn.dll'...
29522354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'wbemcomn.dll' -> '\Device\HarddiskVolume4\Windows\System32\wbemcomn.dll' [rcNtRedir=0xc0150008]
29532354.760: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\wbemcomn.dll
29542354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
29552354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
29562354.760: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\system32\wbem\fastprox.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
29572354.760: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\wbem\fastprox.dll
29582354.760: supR3HardenedDllNotificationCallback: load 00007ffa05ee0000 LB 0x00101000 C:\windows\system32\wbem\fastprox.dll [fFlags=0x0]
29592354.760: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\wbem\fastprox.dll
29602354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa05ee0000 'C:\windows\system32\wbem\fastprox.dll'
29612354.760: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000b00 pwszName=\Device\HarddiskVolume4\Windows\System32\amsi.dll
29622354.760: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000000bf3cb0
29632354.760: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000bf3cb0
29642354.760: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=B5D4D58A583ACAD5AA76D7DD0F2DB8ADE903942B
29652354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
29662354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16140000 'C:\windows\System32\crypt32.dll'
29672354.760: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package04~31bf3856ad364e35~amd64~~10.0.18362.900.cat'; file='\Device\HarddiskVolume4\Windows\System32\amsi.dll'
29682354.760: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
29692354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
29702354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #14 'rpcrt4.dll'.
29712354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #16 'userenv.dll'.
29722354.760: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\amsi.dll) WinVerifyTrust
29732354.760: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\amsi.dll
29742354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'userenv.dll'...
29752354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'userenv.dll' -> '\Device\HarddiskVolume4\Windows\System32\userenv.dll' [rcNtRedir=0xc0150008]
29762354.760: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\userenv.dll
29772354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
29782354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
29792354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
29802354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
29812354.760: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\System32\amsi.dll (Input=amsi.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
29822354.760: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\amsi.dll
29832354.760: supR3HardenedDllNotificationCallback: load 00007ffa00c80000 LB 0x00015000 C:\windows\System32\amsi.dll [fFlags=0x0]
29842354.760: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\amsi.dll
29852354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa00c80000 'C:\windows\System32\amsi.dll'
29862354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
29872354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16140000 'C:\windows\System32\crypt32.dll'
29882354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'advapi32.dll'.
29892354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'ole32.dll'.
29902354.760: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'oleaut32.dll'.
29912354.760: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\ProgramData\Microsoft\Windows Defender\Platform\4.18.2006.10-0\MpOAV.dll) WinVerifyTrust
29922354.760: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\ProgramData\Microsoft\Windows Defender\Platform\4.18.2006.10-0\MpOAV.dll
29932354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
29942354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume4\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
29952354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
29962354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume4\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
29972354.760: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
29982354.760: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
29992354.760: supR3HardenedMonitor_LdrLoadDll: pName=C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2006.10-0\MpOav.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
30002354.760: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\ProgramData\Microsoft\Windows Defender\Platform\4.18.2006.10-0\MpOAV.dll
30012354.760: supR3HardenedDllNotificationCallback: load 00007ff9fdf50000 LB 0x00078000 C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2006.10-0\MpOav.dll [fFlags=0x0]
30022354.760: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\ProgramData\Microsoft\Windows Defender\Platform\4.18.2006.10-0\MpOAV.dll
30032354.760: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-synch-l1-2-0) -> 0x0, fPresent=1
30042354.760: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-synch-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
30052354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16290000 'api-ms-win-core-synch-l1-2-0'
30062354.760: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-fibers-l1-1-1) -> 0x0, fPresent=1
30072354.760: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-fibers-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
30082354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16290000 'api-ms-win-core-fibers-l1-1-1'
30092354.760: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-synch-l1-2-0) -> 0x0, fPresent=1
30102354.760: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-synch-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
30112354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16290000 'api-ms-win-core-synch-l1-2-0'
30122354.760: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-fibers-l1-1-1) -> 0x0, fPresent=1
30132354.760: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-fibers-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
30142354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16290000 'api-ms-win-core-fibers-l1-1-1'
30152354.760: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-localization-l1-2-1) -> 0x0, fPresent=1
30162354.760: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-l1-2-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
30172354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16290000 'api-ms-win-core-localization-l1-2-1'
30182354.760: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\version.dll
30192354.760: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\system32\version.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
30202354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa0e2d0000 'C:\windows\system32\version.dll'
30212354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9fdf50000 'C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2006.10-0\MpOav.dll'
30222354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16970000 'C:\windows\System32\ADVAPI32.dll'
30232354.12a0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
30242354.12a0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
30252354.12a0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
30262354.12a0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VBoxVMM.dll) WinVerifyTrust
30272354.12a0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VBoxVMM.dll
30282354.12a0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
30292354.12a0: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
30302354.12a0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
30312354.12a0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
30322354.12a0: supR3HardenedMonitor_LdrLoadDll: pName=D:\Program Files\Oracle\VirtualBox\VBoxVMM.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
30332354.12a0: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VBoxVMM.dll
30342354.12a0: supR3HardenedDllNotificationCallback: load 00007ff9d80b0000 LB 0x0037d000 D:\Program Files\Oracle\VirtualBox\VBoxVMM.DLL [fFlags=0x0]
30352354.12a0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VBoxVMM.dll
30362354.12a0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9d80b0000 'D:\Program Files\Oracle\VirtualBox\VBoxVMM.DLL'
30372354.b34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
30382354.960: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
30392354.960: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
30402354.960: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp100.dll'.
30412354.960: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxvmm.dll'.
30422354.960: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'vboxrt.dll'.
30432354.960: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'user32.dll'.
30442354.960: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VBoxSharedClipboard.dll) WinVerifyTrust
30452354.960: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VBoxSharedClipboard.dll
30462354.960: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
30472354.960: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
30482354.960: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
30492354.960: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
30502354.960: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxvmm.dll'...
30512354.960: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxvmm.dll' -> '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\vboxvmm.dll' [rcNtRedir=0xc0150008]
30522354.960: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VBoxVMM.dll
30532354.960: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
30542354.960: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
30552354.960: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
30562354.960: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
30572354.960: supR3HardenedMonitor_LdrLoadDll: pName=D:\Program Files\Oracle\VirtualBox\VBoxSharedClipboard.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
30582354.960: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VBoxSharedClipboard.dll
30592354.960: supR3HardenedDllNotificationCallback: load 00007ffa11db0000 LB 0x0000f000 D:\Program Files\Oracle\VirtualBox\VBoxSharedClipboard.DLL [fFlags=0x0]
30602354.960: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VBoxSharedClipboard.dll
30612354.960: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa11db0000 'D:\Program Files\Oracle\VirtualBox\VBoxSharedClipboard.DLL'
30622354.1b7c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
30632354.1b7c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
30642354.1b7c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp100.dll'.
30652354.1b7c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxrt.dll'.
30662354.1b7c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VBoxDragAndDropSvc.dll) WinVerifyTrust
30672354.1b7c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VBoxDragAndDropSvc.dll
30682354.1b7c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
30692354.1b7c: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
30702354.1b7c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
30712354.1b7c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
30722354.1b7c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
30732354.1b7c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
30742354.1b7c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll
30752354.1b7c: supR3HardenedMonitor_LdrLoadDll: pName=D:\Program Files\Oracle\VirtualBox\VBoxDragAndDropSvc.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
30762354.1b7c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VBoxDragAndDropSvc.dll
30772354.1b7c: supR3HardenedDllNotificationCallback: load 00007ffa11da0000 LB 0x0000d000 D:\Program Files\Oracle\VirtualBox\VBoxDragAndDropSvc.DLL [fFlags=0x0]
30782354.1b7c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VBoxDragAndDropSvc.dll
30792354.1b7c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa11da0000 'D:\Program Files\Oracle\VirtualBox\VBoxDragAndDropSvc.DLL'
30802354.b34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16a20000 'C:\windows\system32\Shell32.dll'
30812354.b34: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VBoxVMM.dll
30822354.b34: supR3HardenedMonitor_LdrLoadDll: pName=D:\Program Files\Oracle\VirtualBox\VBoxVMM.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
30832354.b34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9d80b0000 'D:\Program Files\Oracle\VirtualBox\VBoxVMM.DLL'
30842354.b34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
30852354.b34: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
30862354.b34: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
30872354.b34: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
30882354.b34: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'ole32.dll'.
30892354.b34: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'oleaut32.dll'.
30902354.b34: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.dll) WinVerifyTrust
30912354.b34: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.dll
30922354.b34: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
30932354.b34: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume4\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
30942354.b34: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
30952354.b34: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume4\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
30962354.b34: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
30972354.b34: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
30982354.b34: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
30992354.b34: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
31002354.b34: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
31012354.b34: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
31022354.b34: supR3HardenedMonitor_LdrLoadDll: pName=D:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
31032354.b34: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.dll
31042354.b34: supR3HardenedDllNotificationCallback: load 00007ff9fed70000 LB 0x00041000 D:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.DLL [fFlags=0x0]
31052354.b34: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.dll
31062354.b34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9fed70000 'D:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.DLL'
31072354.b34: supR3HardenedDllNotificationCallback: Unload 00007ff9fed70000 LB 0x00041000 D:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.DLL [flags=0x0]
31082354.b34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
31092354.b34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
31102354.b34: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
31112354.b34: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxvmm.dll'.
31122354.b34: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxrt.dll'.
31132354.b34: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'vboxddu.dll'.
31142354.b34: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'vboxdd2.dll'.
31152354.b34: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'user32.dll'.
31162354.b34: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'setupapi.dll'.
31172354.b34: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'ws2_32.dll'.
31182354.b34: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'ole32.dll'.
31192354.b34: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'iphlpapi.dll'.
31202354.b34: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VBoxDD.dll) WinVerifyTrust
31212354.b34: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VBoxDD.dll
31222354.b34: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'iphlpapi.dll'...
31232354.b34: supR3HardenedWinVerifyCacheProcessImportTodos: 'iphlpapi.dll' -> '\Device\HarddiskVolume4\Windows\System32\iphlpapi.dll' [rcNtRedir=0xc0150008]
31242354.b34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
31252354.b34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16140000 'C:\windows\System32\crypt32.dll'
31262354.b34: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\IPHLPAPI.DLL) WinVerifyTrust
31272354.b34: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\IPHLPAPI.DLL
31282354.b34: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
31292354.b34: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume4\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
31302354.b34: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
31312354.b34: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume4\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
31322354.b34: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\ws2_32.dll
31332354.b34: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'setupapi.dll'...
31342354.b34: supR3HardenedWinVerifyCacheProcessImportTodos: 'setupapi.dll' -> '\Device\HarddiskVolume4\Windows\System32\setupapi.dll' [rcNtRedir=0xc0150008]
31352354.b34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
31362354.b34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16140000 'C:\windows\System32\crypt32.dll'
31372354.b34: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
31382354.b34: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #29 'rpcrt4.dll'.
31392354.b34: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #36 'cfgmgr32.dll'.
31402354.b34: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #41 'bcrypt.dll'.
31412354.b34: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\setupapi.dll) WinVerifyTrust
31422354.b34: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\setupapi.dll
31432354.b34: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
31442354.b34: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
31452354.b34: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxdd2.dll'...
31462354.b34: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxdd2.dll' -> '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\vboxdd2.dll' [rcNtRedir=0xc0150008]
31472354.b34: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcrypt.dll'...
31482354.b34: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcrypt.dll' -> '\Device\HarddiskVolume4\Windows\System32\bcrypt.dll' [rcNtRedir=0xc0150008]
31492354.b34: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\bcrypt.dll
31502354.b34: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'cfgmgr32.dll'...
31512354.b34: supR3HardenedWinVerifyCacheProcessImportTodos: 'cfgmgr32.dll' -> '\Device\HarddiskVolume4\Windows\System32\cfgmgr32.dll' [rcNtRedir=0xc0150008]
31522354.b34: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\cfgmgr32.dll
31532354.b34: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
31542354.b34: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
31552354.b34: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
31562354.b34: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
31572354.b34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
31582354.b34: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
31592354.b34: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
31602354.b34: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VBoxDD2.dll) WinVerifyTrust
31612354.b34: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VBoxDD2.dll
31622354.b34: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxddu.dll'...
31632354.b34: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxddu.dll' -> '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\vboxddu.dll' [rcNtRedir=0xc0150008]
31642354.b34: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
31652354.b34: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
31662354.b34: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
31672354.b34: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
31682354.b34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
31692354.b34: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
31702354.b34: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
31712354.b34: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
31722354.b34: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'setupapi.dll'.
31732354.b34: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'advapi32.dll'.
31742354.b34: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VBoxDDU.dll) WinVerifyTrust
31752354.b34: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VBoxDDU.dll
31762354.b34: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
31772354.b34: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
31782354.b34: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxvmm.dll'...
31792354.b34: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxvmm.dll' -> '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\vboxvmm.dll' [rcNtRedir=0xc0150008]
31802354.b34: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VBoxVMM.dll
31812354.b34: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
31822354.b34: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
31832354.b34: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
31842354.b34: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume4\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
31852354.b34: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'setupapi.dll'...
31862354.b34: supR3HardenedWinVerifyCacheProcessImportTodos: 'setupapi.dll' -> '\Device\HarddiskVolume4\Windows\System32\setupapi.dll' [rcNtRedir=0xc0150008]
31872354.b34: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\setupapi.dll
31882354.b34: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
31892354.b34: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
31902354.b34: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
31912354.b34: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
31922354.b34: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
31932354.b34: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
31942354.b34: supR3HardenedMonitor_LdrLoadDll: pName=D:\Program Files\Oracle\VirtualBox\VBoxDD.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
31952354.b34: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VBoxDD.dll
31962354.b34: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VBoxDDU.dll
31972354.b34: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VBoxDD2.dll
31982354.b34: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\IPHLPAPI.DLL
31992354.b34: supR3HardenedDllNotificationCallback: load 00007ffa17590000 LB 0x00470000 C:\windows\System32\SETUPAPI.dll [fFlags=0x0]
32002354.b34: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\setupapi.dll
32012354.b34: supR3HardenedDllNotificationCallback: load 00007ff9e2e50000 LB 0x00066000 D:\Program Files\Oracle\VirtualBox\VBoxDDU.dll [fFlags=0x0]
32022354.b34: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VBoxDDU.dll
32032354.b34: supR3HardenedDllNotificationCallback: load 00007ff9b6090000 LB 0x0085c000 D:\Program Files\Oracle\VirtualBox\VBoxDD2.dll [fFlags=0x0]
32042354.b34: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VBoxDD2.dll
32052354.b34: supR3HardenedDllNotificationCallback: load 00007ffa14a80000 LB 0x0003a000 C:\windows\SYSTEM32\IPHLPAPI.DLL [fFlags=0x0]
32062354.b34: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\IPHLPAPI.DLL
32072354.b34: supR3HardenedDllNotificationCallback: load 00007ff9b68f0000 LB 0x009e6000 D:\Program Files\Oracle\VirtualBox\VBoxDD.DLL [fFlags=0x0]
32082354.b34: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VBoxDD.dll
32092354.b34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9b68f0000 'D:\Program Files\Oracle\VirtualBox\VBoxDD.DLL'
32102354.b34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
32112354.b34: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.dll
32122354.b34: supR3HardenedMonitor_LdrLoadDll: pName=D:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
32132354.b34: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.dll
32142354.b34: supR3HardenedDllNotificationCallback: load 00007ff9fed70000 LB 0x00041000 D:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.DLL [fFlags=0x0]
32152354.b34: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.dll
32162354.b34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9fed70000 'D:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.DLL'
32172354.b34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
32182354.b34: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VBoxC.dll
32192354.b34: supR3HardenedMonitor_LdrLoadDll: pName=D:\Program Files\Oracle\VirtualBox\VBoxC.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
32202354.b34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9e2f60000 'D:\Program Files\Oracle\VirtualBox\VBoxC.DLL'
32212354.b34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
32222354.b34: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VBoxDD2.dll
32232354.b34: supR3HardenedMonitor_LdrLoadDll: pName=D:\Program Files\Oracle\VirtualBox\VBoxDD2.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
32242354.b34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9b6090000 'D:\Program Files\Oracle\VirtualBox\VBoxDD2.DLL'
32252354.b34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
32262354.b34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
32272354.b34: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
32282354.b34: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
32292354.b34: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxEhciR3.dll) WinVerifyTrust
32302354.b34: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxEhciR3.dll
32312354.b34: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
32322354.b34: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
32332354.b34: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
32342354.b34: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
32352354.b34: supR3HardenedMonitor_LdrLoadDll: pName=D:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxEhciR3.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
32362354.b34: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxEhciR3.dll
32372354.b34: supR3HardenedDllNotificationCallback: load 00007ff9fef00000 LB 0x00018000 D:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxEhciR3.DLL [fFlags=0x0]
32382354.b34: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxEhciR3.dll
32392354.b34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9fef00000 'D:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxEhciR3.DLL'
32402354.b34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
32412354.b34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
32422354.b34: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
32432354.b34: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
32442354.b34: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxNvmeR3.dll) WinVerifyTrust
32452354.b34: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxNvmeR3.dll
32462354.b34: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
32472354.b34: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
32482354.b34: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
32492354.b34: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
32502354.b34: supR3HardenedMonitor_LdrLoadDll: pName=D:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxNvmeR3.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
32512354.b34: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxNvmeR3.dll
32522354.b34: supR3HardenedDllNotificationCallback: load 00007ff9feee0000 LB 0x00012000 D:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxNvmeR3.DLL [fFlags=0x0]
32532354.b34: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxNvmeR3.dll
32542354.b34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9feee0000 'D:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxNvmeR3.DLL'
32552354.b34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
32562354.b34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
32572354.b34: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
32582354.b34: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
32592354.b34: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbCardReaderR3.dll) WinVerifyTrust
32602354.b34: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbCardReaderR3.dll
32612354.b34: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
32622354.b34: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
32632354.b34: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
32642354.b34: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
32652354.b34: supR3HardenedMonitor_LdrLoadDll: pName=D:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbCardReaderR3.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
32662354.b34: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbCardReaderR3.dll
32672354.b34: supR3HardenedDllNotificationCallback: load 00007ff9fbe80000 LB 0x00018000 D:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbCardReaderR3.DLL [fFlags=0x0]
32682354.b34: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbCardReaderR3.dll
32692354.b34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9fbe80000 'D:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbCardReaderR3.DLL'
32702354.b34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
32712354.b34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
32722354.b34: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
32732354.b34: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
32742354.b34: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbWebcamR3.dll) WinVerifyTrust
32752354.b34: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbWebcamR3.dll
32762354.b34: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
32772354.b34: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
32782354.b34: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
32792354.b34: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
32802354.b34: supR3HardenedMonitor_LdrLoadDll: pName=D:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbWebcamR3.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
32812354.b34: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbWebcamR3.dll
32822354.b34: supR3HardenedDllNotificationCallback: load 00007ff9fbe60000 LB 0x00019000 D:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbWebcamR3.DLL [fFlags=0x0]
32832354.b34: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbWebcamR3.dll
32842354.b34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9fbe60000 'D:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbWebcamR3.DLL'
32852354.b34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
32862354.5d0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
32872354.5d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
32882354.5d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxvmm.dll'.
32892354.5d0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxrt.dll'.
32902354.5d0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VBoxSharedFolders.dll) WinVerifyTrust
32912354.5d0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VBoxSharedFolders.dll
32922354.5d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
32932354.5d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
32942354.5d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxvmm.dll'...
32952354.5d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxvmm.dll' -> '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\vboxvmm.dll' [rcNtRedir=0xc0150008]
32962354.5d0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VBoxVMM.dll
32972354.5d0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
32982354.5d0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
32992354.5d0: supR3HardenedMonitor_LdrLoadDll: pName=D:\Program Files\Oracle\VirtualBox\VBoxSharedFolders.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
33002354.5d0: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VBoxSharedFolders.dll
33012354.5d0: supR3HardenedDllNotificationCallback: load 00007ff9fbdb0000 LB 0x00014000 D:\Program Files\Oracle\VirtualBox\VBoxSharedFolders.DLL [fFlags=0x0]
33022354.5d0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VBoxSharedFolders.dll
33032354.5d0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9fbdb0000 'D:\Program Files\Oracle\VirtualBox\VBoxSharedFolders.DLL'
33042354.2adc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
33052354.2adc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
33062354.2adc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp100.dll'.
33072354.2adc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxvmm.dll'.
33082354.2adc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'vboxrt.dll'.
33092354.2adc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VBoxGuestControlSvc.dll) WinVerifyTrust
33102354.2adc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VBoxGuestControlSvc.dll
33112354.2adc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
33122354.2adc: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
33132354.2adc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxvmm.dll'...
33142354.2adc: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxvmm.dll' -> '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\vboxvmm.dll' [rcNtRedir=0xc0150008]
33152354.2adc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VBoxVMM.dll
33162354.2adc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
33172354.2adc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
33182354.2adc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
33192354.2adc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
33202354.2adc: supR3HardenedMonitor_LdrLoadDll: pName=D:\Program Files\Oracle\VirtualBox\VBoxGuestControlSvc.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
33212354.2adc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VBoxGuestControlSvc.dll
33222354.2adc: supR3HardenedDllNotificationCallback: load 00007ffa11d90000 LB 0x0000c000 D:\Program Files\Oracle\VirtualBox\VBoxGuestControlSvc.DLL [fFlags=0x0]
33232354.2adc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VBoxGuestControlSvc.dll
33242354.2adc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa11d90000 'D:\Program Files\Oracle\VirtualBox\VBoxGuestControlSvc.DLL'
33252354.24f4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
33262354.24f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
33272354.24f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp100.dll'.
33282354.24f4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxrt.dll'.
33292354.24f4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VBoxGuestPropSvc.dll) WinVerifyTrust
33302354.24f4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VBoxGuestPropSvc.dll
33312354.24f4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
33322354.24f4: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
33332354.24f4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
33342354.24f4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
33352354.24f4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
33362354.24f4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
33372354.24f4: supR3HardenedMonitor_LdrLoadDll: pName=D:\Program Files\Oracle\VirtualBox\VBoxGuestPropSvc.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
33382354.24f4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VBoxGuestPropSvc.dll
33392354.24f4: supR3HardenedDllNotificationCallback: load 00007ffa119b0000 LB 0x0000d000 D:\Program Files\Oracle\VirtualBox\VBoxGuestPropSvc.DLL [fFlags=0x0]
33402354.24f4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\VBoxGuestPropSvc.dll
33412354.24f4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa119b0000 'D:\Program Files\Oracle\VirtualBox\VBoxGuestPropSvc.DLL'
33422354.b34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
33432354.b34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
33442354.b34: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
33452354.b34: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
33462354.b34: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VDPluginCrypt.dll) WinVerifyTrust
33472354.b34: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VDPluginCrypt.dll
33482354.b34: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
33492354.b34: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
33502354.b34: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
33512354.b34: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
33522354.b34: supR3HardenedMonitor_LdrLoadDll: pName=D:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VDPluginCrypt.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
33532354.b34: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VDPluginCrypt.dll
33542354.b34: supR3HardenedDllNotificationCallback: load 00007ffa0f500000 LB 0x0000a000 D:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VDPluginCrypt.DLL [fFlags=0x0]
33552354.b34: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume1\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VDPluginCrypt.dll
33562354.b34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa0f500000 'D:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VDPluginCrypt.DLL'
33572354.b34: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\IPHLPAPI.DLL
33582354.b34: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\system32\Iphlpapi.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
33592354.b34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa14a80000 'C:\windows\system32\Iphlpapi.dll'
33602354.b34: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'rpcrt4.dll'.
33612354.b34: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'nsi.dll'.
33622354.b34: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\winnsi.dll)
33632354.b34: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\winnsi.dll
33642354.b34: supR3HardenedDllNotificationCallback: load 00007ffa182a0000 LB 0x00008000 C:\windows\System32\NSI.dll [fFlags=0x0]
33652354.b34: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\nsi.dll)
33662354.b34: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\nsi.dll
33672354.b34: supR3HardenedDllNotificationCallback: load 00007ffa0c8a0000 LB 0x0000b000 C:\windows\SYSTEM32\WINNSI.DLL [fFlags=0x0]
33682354.b34: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\winnsi.dll [avoiding WinVerifyTrust]
33692354.b34: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'rpcrt4.dll'.
33702354.b34: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume4\Windows\System32\dhcpcsvc6.dll)
33712354.b34: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\dhcpcsvc6.dll
33722354.b34: supR3HardenedDllNotificationCallback: load 00007ffa0c840000 LB 0x00016000 C:\windows\SYSTEM32\dhcpcsvc6.DLL [fFlags=0x0]
33732354.b34: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\dhcpcsvc6.dll [avoiding WinVerifyTrust]
33742354.b34: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'rpcrt4.dll'.
33752354.b34: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'ws2_32.dll'.
33762354.b34: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'nsi.dll'.
33772354.b34: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume4\Windows\System32\dhcpcsvc.dll)
33782354.b34: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\dhcpcsvc.dll
33792354.b34: supR3HardenedDllNotificationCallback: load 00007ffa0c820000 LB 0x0001c000 C:\windows\SYSTEM32\dhcpcsvc.DLL [fFlags=0x0]
33802354.b34: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\dhcpcsvc.dll [avoiding WinVerifyTrust]
33812354.b34: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #21 'ws2_32.dll'.
33822354.b34: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #23 'nsi.dll'.
33832354.b34: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\dnsapi.dll)
33842354.b34: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\dnsapi.dll
33852354.b34: supR3HardenedDllNotificationCallback: load 00007ffa14ac0000 LB 0x000cb000 C:\windows\SYSTEM32\DNSAPI.dll [fFlags=0x0]
33862354.b34: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\dnsapi.dll [avoiding WinVerifyTrust]
33872354.b34: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'nsi.dll'...
33882354.b34: supR3HardenedWinVerifyCacheProcessImportTodos: 'nsi.dll' -> '\Device\HarddiskVolume4\Windows\System32\nsi.dll' [rcNtRedir=0xc0150008]
33892354.b34: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\nsi.dll [lacks WinVerifyTrust]
33902354.b34: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
33912354.b34: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume4\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
33922354.b34: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\ws2_32.dll
33932354.b34: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'nsi.dll'...
33942354.b34: supR3HardenedWinVerifyCacheProcessImportTodos: 'nsi.dll' -> '\Device\HarddiskVolume4\Windows\System32\nsi.dll' [rcNtRedir=0xc0150008]
33952354.b34: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\nsi.dll [lacks WinVerifyTrust]
33962354.b34: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
33972354.b34: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume4\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
33982354.b34: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\ws2_32.dll
33992354.b34: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
34002354.b34: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
34012354.b34: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
34022354.b34: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
34032354.b34: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'nsi.dll'...
34042354.b34: supR3HardenedWinVerifyCacheProcessImportTodos: 'nsi.dll' -> '\Device\HarddiskVolume4\Windows\System32\nsi.dll' [rcNtRedir=0xc0150008]
34052354.b34: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\nsi.dll [lacks WinVerifyTrust]
34062354.b34: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
34072354.b34: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
34082354.b34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
34092354.b34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16140000 'C:\windows\System32\crypt32.dll'
34102354.b34: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Windows\System32\dnsapi.dll'
34112354.b34: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000f44 pwszName=\Device\HarddiskVolume4\Windows\System32\dhcpcsvc.dll
34122354.b34: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000000bf3cb0
34132354.b34: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000bf3cb0
34142354.b34: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=4046160B2B0DC0559D0AE96A25C912515D96829D
34152354.b34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
34162354.b34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16140000 'C:\windows\System32\crypt32.dll'
34172354.b34: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.18362.900.cat'; file='\Device\HarddiskVolume4\Windows\System32\dhcpcsvc.dll'
34182354.b34: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
34192354.b34: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Windows\System32\dhcpcsvc.dll'
34202354.b34: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000f3c pwszName=\Device\HarddiskVolume4\Windows\System32\dhcpcsvc6.dll
34212354.b34: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000000bf3cb0
34222354.b34: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000bf3cb0
34232354.b34: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=C8A4B35134FE83EA6C710EA68891208811F657FE
34242354.b34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
34252354.b34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16140000 'C:\windows\System32\crypt32.dll'
34262354.b34: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.18362.900.cat'; file='\Device\HarddiskVolume4\Windows\System32\dhcpcsvc6.dll'
34272354.b34: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
34282354.b34: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Windows\System32\dhcpcsvc6.dll'
34292354.b34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
34302354.b34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16140000 'C:\windows\System32\crypt32.dll'
34312354.b34: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Windows\System32\nsi.dll'
34322354.b34: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rsaenh.dll
34332354.b34: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
34342354.b34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
34352354.b34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16140000 'C:\windows\System32\crypt32.dll'
34362354.b34: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Windows\System32\winnsi.dll'
34372354.b34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
34382354.b34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16140000 'C:\windows\System32\crypt32.dll'
34392354.b34: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcp_win.dll'.
34402354.b34: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #16 'rpcrt4.dll'.
34412354.b34: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #28 'devobj.dll'.
34422354.b34: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\MMDevAPI.dll) WinVerifyTrust
34432354.b34: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\MMDevAPI.dll
34442354.b34: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'devobj.dll'...
34452354.b34: supR3HardenedWinVerifyCacheProcessImportTodos: 'devobj.dll' -> '\Device\HarddiskVolume4\Windows\System32\devobj.dll' [rcNtRedir=0xc0150008]
34462354.b34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
34472354.b34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16140000 'C:\windows\System32\crypt32.dll'
34482354.b34: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #18 'cfgmgr32.dll'.
34492354.b34: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\devobj.dll) WinVerifyTrust
34502354.b34: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\devobj.dll
34512354.b34: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
34522354.b34: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
34532354.b34: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
34542354.b34: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
34552354.b34: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcp_win.dll
34562354.b34: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'cfgmgr32.dll'...
34572354.b34: supR3HardenedWinVerifyCacheProcessImportTodos: 'cfgmgr32.dll' -> '\Device\HarddiskVolume4\Windows\System32\cfgmgr32.dll' [rcNtRedir=0xc0150008]
34582354.b34: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\cfgmgr32.dll
34592354.b34: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\System32\MMDevApi.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
34602354.b34: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\MMDevAPI.dll
34612354.b34: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\devobj.dll
34622354.b34: supR3HardenedDllNotificationCallback: load 00007ffa15300000 LB 0x0002a000 C:\windows\System32\DEVOBJ.dll [fFlags=0x0]
34632354.b34: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\devobj.dll
34642354.b34: supR3HardenedDllNotificationCallback: load 00007ffa03000000 LB 0x00072000 C:\windows\System32\MMDevApi.dll [fFlags=0x0]
34652354.b34: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\MMDevAPI.dll
34662354.b34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa03000000 'C:\windows\System32\MMDevApi.dll'
34672354.b34: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000001038 pwszName=\Device\HarddiskVolume4\Windows\System32\dsound.dll
34682354.b34: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000000bf3cb0
34692354.b34: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000bf3cb0
34702354.b34: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=8184043CF3F3DF1E3CF96E74DBBF7D0836417373
34712354.b34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
34722354.b34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16140000 'C:\windows\System32\crypt32.dll'
34732354.b34: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.18362.900.cat'; file='\Device\HarddiskVolume4\Windows\System32\dsound.dll'
34742354.b34: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
34752354.b34: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
34762354.b34: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #32 'winmm.dll'.
34772354.b34: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\dsound.dll) WinVerifyTrust
34782354.b34: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\dsound.dll
34792354.b34: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
34802354.b34: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume4\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008]
34812354.b34: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\winmm.dll
34822354.b34: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
34832354.b34: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
34842354.b34: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcrt.dll
34852354.b34: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\System32\dsound.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
34862354.b34: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\dsound.dll
34872354.b34: supR3HardenedDllNotificationCallback: load 00007ff9fbbc0000 LB 0x00099000 C:\windows\System32\dsound.dll [fFlags=0x0]
34882354.b34: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\dsound.dll
34892354.b34: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\dsound.dll
34902354.b34: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\System32\dsound.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
34912354.b34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9fbbc0000 'C:\windows\System32\dsound.dll'
34922354.b34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9fbbc0000 'C:\windows\System32\dsound.dll'
34932354.b34: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\dsound.dll
34942354.b34: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\system32\dsound.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
34952354.b34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9fbbc0000 'C:\windows\system32\dsound.dll'
34962354.b34: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\MMDevAPI.dll
34972354.b34: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\System32\MMDEVAPI.DLL (Input=MMDEVAPI.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
34982354.b34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa03000000 'C:\windows\System32\MMDEVAPI.DLL'
34992354.23a0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
35002354.23a0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16140000 'C:\windows\System32\crypt32.dll'
35012354.23a0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcp_win.dll'.
35022354.23a0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'rpcrt4.dll'.
35032354.23a0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'oleaut32.dll'.
35042354.23a0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #29 'mmdevapi.dll'.
35052354.23a0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\AudioSes.dll) WinVerifyTrust
35062354.23a0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\AudioSes.dll
35072354.23a0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mmdevapi.dll'...
35082354.23a0: supR3HardenedWinVerifyCacheProcessImportTodos: 'mmdevapi.dll' -> '\Device\HarddiskVolume4\Windows\System32\mmdevapi.dll' [rcNtRedir=0xc0150008]
35092354.23a0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\MMDevAPI.dll
35102354.23a0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
35112354.23a0: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume4\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
35122354.23a0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
35132354.23a0: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
35142354.23a0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\rpcrt4.dll
35152354.23a0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
35162354.23a0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
35172354.23a0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msvcp_win.dll
35182354.23a0: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\System32\AUDIOSES.DLL (Input=AUDIOSES.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
35192354.23a0: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\AudioSes.dll
35202354.23a0: supR3HardenedDllNotificationCallback: load 00007ffa00470000 LB 0x0015d000 C:\windows\System32\AUDIOSES.DLL [fFlags=0x0]
35212354.23a0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\AudioSes.dll
35222354.23a0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa00470000 'C:\windows\System32\AUDIOSES.DLL'
35232354.b34: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\winmm.dll
35242354.b34: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\System32\winmm.dll (Input=winmm.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
35252354.b34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
35262354.b34: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000000000010e8 pwszName=\Device\HarddiskVolume4\Windows\System32\wdmaud.drv
35272354.b34: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000000bf3cb0
35282354.b34: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000bf3cb0
35292354.b34: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=38EA8D6D625C6A0A9075DAE17FD33652FF8FC23A
35302354.b34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
35312354.b34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16140000 'C:\windows\System32\crypt32.dll'
35322354.b34: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.18362.900.cat'; file='\Device\HarddiskVolume4\Windows\System32\wdmaud.drv'
35332354.b34: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
35342354.b34: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
35352354.b34: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'mmdevapi.dll'.
35362354.b34: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #27 'ksuser.dll'.
35372354.b34: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #28 'avrt.dll'.
35382354.b34: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\wdmaud.drv) WinVerifyTrust
35392354.b34: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\wdmaud.drv
35402354.b34: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'avrt.dll'...
35412354.b34: supR3HardenedWinVerifyCacheProcessImportTodos: 'avrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\avrt.dll' [rcNtRedir=0xc0150008]
35422354.b34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
35432354.b34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16140000 'C:\windows\System32\crypt32.dll'
35442354.b34: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\avrt.dll) WinVerifyTrust
35452354.b34: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\avrt.dll
35462354.b34: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ksuser.dll'...
35472354.b34: supR3HardenedWinVerifyCacheProcessImportTodos: 'ksuser.dll' -> '\Device\HarddiskVolume4\Windows\System32\ksuser.dll' [rcNtRedir=0xc0150008]
35482354.b34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
35492354.b34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16140000 'C:\windows\System32\crypt32.dll'
35502354.b34: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
35512354.b34: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\ksuser.dll) WinVerifyTrust
35522354.b34: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\ksuser.dll
35532354.b34: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mmdevapi.dll'...
35542354.b34: supR3HardenedWinVerifyCacheProcessImportTodos: 'mmdevapi.dll' -> '\Device\HarddiskVolume4\Windows\System32\mmdevapi.dll' [rcNtRedir=0xc0150008]
35552354.b34: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\MMDevAPI.dll
35562354.b34: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
35572354.b34: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
35582354.b34: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
35592354.b34: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
35602354.b34: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
35612354.b34: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\wdmaud.drv
35622354.b34: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\ksuser.dll
35632354.b34: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\avrt.dll
35642354.b34: supR3HardenedDllNotificationCallback: load 00007ffa119a0000 LB 0x00009000 C:\windows\SYSTEM32\ksuser.dll [fFlags=0x0]
35652354.b34: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\ksuser.dll
35662354.b34: supR3HardenedDllNotificationCallback: load 00007ffa119c0000 LB 0x0000a000 C:\windows\SYSTEM32\AVRT.dll [fFlags=0x0]
35672354.b34: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\avrt.dll
35682354.b34: supR3HardenedDllNotificationCallback: load 00007ff9fee90000 LB 0x00044000 C:\windows\System32\wdmaud.drv [fFlags=0x0]
35692354.b34: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\wdmaud.drv
35702354.b34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9fee90000 'C:\windows\System32\wdmaud.drv'
35712354.b34: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\wdmaud.drv
35722354.b34: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
35732354.b34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9fee90000 'C:\windows\System32\wdmaud.drv'
35742354.b34: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\wdmaud.drv
35752354.b34: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
35762354.b34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9fee90000 'C:\windows\System32\wdmaud.drv'
35772354.b34: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\wdmaud.drv
35782354.b34: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
35792354.b34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9fee90000 'C:\windows\System32\wdmaud.drv'
35802354.b34: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\wdmaud.drv
35812354.b34: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
35822354.b34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9fee90000 'C:\windows\System32\wdmaud.drv'
35832354.b34: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\wdmaud.drv
35842354.b34: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
35852354.b34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9fee90000 'C:\windows\System32\wdmaud.drv'
35862354.b34: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\wdmaud.drv
35872354.b34: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
35882354.b34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9fee90000 'C:\windows\System32\wdmaud.drv'
35892354.b34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9fee90000 'C:\windows\System32\wdmaud.drv'
35902354.b34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9fee90000 'C:\windows\System32\wdmaud.drv'
35912354.b34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9fee90000 'C:\windows\System32\wdmaud.drv'
35922354.b34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9fee90000 'C:\windows\System32\wdmaud.drv'
35932354.b34: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000001090 pwszName=\Device\HarddiskVolume4\Windows\System32\msacm32.drv
35942354.b34: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000000bf3cb0
35952354.b34: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000bf3cb0
35962354.b34: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=763C5E89A8DA653902990733D245B99CC7C40BEA
35972354.b34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
35982354.b34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16140000 'C:\windows\System32\crypt32.dll'
35992354.b34: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.18362.900.cat'; file='\Device\HarddiskVolume4\Windows\System32\msacm32.drv'
36002354.b34: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
36012354.b34: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
36022354.b34: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'mmdevapi.dll'.
36032354.b34: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #13 'msacm32.dll'.
36042354.b34: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #14 'winmmbase.dll'.
36052354.b34: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\msacm32.drv) WinVerifyTrust
36062354.b34: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\msacm32.drv
36072354.b34: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmmbase.dll'...
36082354.b34: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmmbase.dll' -> '\Device\HarddiskVolume4\Windows\System32\winmmbase.dll' [rcNtRedir=0xc0150008]
36092354.b34: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\winmmbase.dll
36102354.b34: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msacm32.dll'...
36112354.b34: supR3HardenedWinVerifyCacheProcessImportTodos: 'msacm32.dll' -> '\Device\HarddiskVolume4\Windows\System32\msacm32.dll' [rcNtRedir=0xc0150008]
36122354.b34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
36132354.b34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16140000 'C:\windows\System32\crypt32.dll'
36142354.b34: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
36152354.b34: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\msacm32.dll) WinVerifyTrust
36162354.b34: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\msacm32.dll
36172354.b34: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mmdevapi.dll'...
36182354.b34: supR3HardenedWinVerifyCacheProcessImportTodos: 'mmdevapi.dll' -> '\Device\HarddiskVolume4\Windows\System32\mmdevapi.dll' [rcNtRedir=0xc0150008]
36192354.b34: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\MMDevAPI.dll
36202354.b34: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
36212354.b34: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
36222354.b34: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
36232354.b34: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
36242354.b34: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
36252354.b34: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msacm32.drv
36262354.b34: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msacm32.dll
36272354.b34: supR3HardenedDllNotificationCallback: load 00007ff9ffea0000 LB 0x0001c000 C:\windows\SYSTEM32\MSACM32.dll [fFlags=0x0]
36282354.b34: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msacm32.dll
36292354.b34: supR3HardenedDllNotificationCallback: load 00007ffa11990000 LB 0x0000d000 C:\windows\System32\msacm32.drv [fFlags=0x0]
36302354.b34: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msacm32.drv
36312354.b34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa11990000 'C:\windows\System32\msacm32.drv'
36322354.b34: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msacm32.drv
36332354.b34: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
36342354.b34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa11990000 'C:\windows\System32\msacm32.drv'
36352354.b34: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msacm32.drv
36362354.b34: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
36372354.b34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa11990000 'C:\windows\System32\msacm32.drv'
36382354.b34: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msacm32.drv
36392354.b34: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
36402354.b34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa11990000 'C:\windows\System32\msacm32.drv'
36412354.b34: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msacm32.drv
36422354.b34: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
36432354.b34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa11990000 'C:\windows\System32\msacm32.drv'
36442354.b34: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msacm32.drv
36452354.b34: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
36462354.b34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa11990000 'C:\windows\System32\msacm32.drv'
36472354.b34: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\msacm32.drv
36482354.b34: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
36492354.b34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa11990000 'C:\windows\System32\msacm32.drv'
36502354.b34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa11990000 'C:\windows\System32\msacm32.drv'
36512354.b34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa11990000 'C:\windows\System32\msacm32.drv'
36522354.b34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa11990000 'C:\windows\System32\msacm32.drv'
36532354.b34: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000000000010c0 pwszName=\Device\HarddiskVolume4\Windows\System32\midimap.dll
36542354.b34: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000000bf3cb0
36552354.b34: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000bf3cb0
36562354.b34: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=EB34EC166C3F780657AB67E557E6C2E60C398D10
36572354.b34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
36582354.b34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16140000 'C:\windows\System32\crypt32.dll'
36592354.b34: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.18362.900.cat'; file='\Device\HarddiskVolume4\Windows\System32\midimap.dll'
36602354.b34: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
36612354.b34: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
36622354.b34: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'winmm.dll'.
36632354.b34: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\midimap.dll) WinVerifyTrust
36642354.b34: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\midimap.dll
36652354.b34: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
36662354.b34: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume4\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008]
36672354.b34: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\winmm.dll
36682354.b34: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
36692354.b34: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
36702354.b34: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\System32\midimap.dll (Input=midimap.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
36712354.b34: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\midimap.dll
36722354.b34: supR3HardenedDllNotificationCallback: load 00007ffa0ffd0000 LB 0x0000a000 C:\windows\System32\midimap.dll [fFlags=0x0]
36732354.b34: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\midimap.dll
36742354.b34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa0ffd0000 'C:\windows\System32\midimap.dll'
36752354.b34: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\midimap.dll
36762354.b34: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\System32\midimap.dll (Input=midimap.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
36772354.b34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa0ffd0000 'C:\windows\System32\midimap.dll'
36782354.b34: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\midimap.dll
36792354.b34: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\System32\midimap.dll (Input=midimap.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
36802354.b34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa0ffd0000 'C:\windows\System32\midimap.dll'
36812354.b34: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\midimap.dll
36822354.b34: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\System32\midimap.dll (Input=midimap.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
36832354.b34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa0ffd0000 'C:\windows\System32\midimap.dll'
36842354.b34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
36852354.b34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
36862354.b34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
36872354.b34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
36882354.b34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
36892354.b34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
36902354.b34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
36912354.b34: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\winmm.dll
36922354.b34: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\System32\winmm.dll (Input=winmm.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
36932354.b34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
36942354.b34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
36952354.b34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
36962354.b34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
36972354.b34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
36982354.b34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
36992354.b34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
37002354.b34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
37012354.b34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
37022354.b34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
37032354.b34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
37042354.b34: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\dsound.dll
37052354.b34: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\system32\dsound.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
37062354.b34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9fbbc0000 'C:\windows\system32\dsound.dll'
37072354.b34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
37082354.b34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
37092354.b34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
37102354.b34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
37112354.b34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
37122354.b34: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\winmm.dll
37132354.b34: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\System32\winmm.dll (Input=winmm.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
37142354.b34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
37152354.b34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
37162354.b34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
37172354.b34: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
37182354.2d84: '\Device\HarddiskVolume4\Windows\System32\tzres.dll' has no imports
37192354.2d84: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume4\Windows\System32\tzres.dll)
37202354.2d84: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\tzres.dll
37212354.2d84: supR3HardenedMonitor_NtCreateSection: NtMapViewOfSection failed on 0000000000001258 (hFile=0000000000001268) with 0xc0000022 -> STATUS_TRUST_FAILURE
37222354.2d84: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume4\Windows\System32\tzres.dll [avoiding WinVerifyTrust]
37232354.2d84: supR3HardenedMonitor_NtCreateSection: NtMapViewOfSection failed on 0000000000001268 (hFile=0000000000001258) with 0xc0000022 -> STATUS_TRUST_FAILURE
37242354.103c: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000001254 pwszName=\Device\HarddiskVolume4\Windows\System32\tzres.dll
37252354.103c: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000000bf3cb0
37262354.103c: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000bf3cb0
37272354.103c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\wintrust.dll
37282354.103c: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\System32\WINTRUST.DLL (Input=WINTRUST.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
37292354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16620000 'C:\windows\System32\WINTRUST.DLL'
37302354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16140000 'C:\windows\System32\CRYPT32.dll'
37312354.103c: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=88837B0A9EBB242B4E4FB904A333C960EF93AE6F
37322354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
37332354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16140000 'C:\windows\System32\crypt32.dll'
37342354.103c: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.18362.900.cat'; file='\Device\HarddiskVolume4\Windows\System32\tzres.dll'
37352354.103c: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
37362354.103c: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume4\Windows\System32\tzres.dll'
37372354.103c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\dsound.dll
37382354.103c: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\system32\dsound.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
37392354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9fbbc0000 'C:\windows\system32\dsound.dll'
37402354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
37412354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
37422354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
37432354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
37442354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
37452354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
37462354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
37472354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
37482354.103c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\dsound.dll
37492354.103c: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\system32\dsound.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
37502354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9fbbc0000 'C:\windows\system32\dsound.dll'
37512354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
37522354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
37532354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
37542354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
37552354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
37562354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
37572354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
37582354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
37592354.103c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\dsound.dll
37602354.103c: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\system32\dsound.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
37612354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9fbbc0000 'C:\windows\system32\dsound.dll'
37622354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
37632354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
37642354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
37652354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
37662354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
37672354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
37682354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
37692354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
37702354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9fbbc0000 'C:\windows\system32\dsound.dll'
37712354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
37722354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
37732354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
37742354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
37752354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
37762354.103c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\winmm.dll
37772354.103c: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\System32\winmm.dll (Input=winmm.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
37782354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
37792354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
37802354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
37812354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9fbbc0000 'C:\windows\system32\dsound.dll'
37822354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
37832354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
37842354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
37852354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
37862354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
37872354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
37882354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
37892354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
37902354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9fbbc0000 'C:\windows\system32\dsound.dll'
37912354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
37922354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
37932354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
37942354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
37952354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
37962354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
37972354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
37982354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
37992354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9fbbc0000 'C:\windows\system32\dsound.dll'
38002354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
38012354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
38022354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
38032354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
38042354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
38052354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
38062354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
38072354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
38082354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9fbbc0000 'C:\windows\system32\dsound.dll'
38092354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
38102354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
38112354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
38122354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
38132354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
38142354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
38152354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
38162354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
38172354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9fbbc0000 'C:\windows\system32\dsound.dll'
38182354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
38192354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
38202354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
38212354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
38222354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
38232354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
38242354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
38252354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
38262354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9fbbc0000 'C:\windows\system32\dsound.dll'
38272354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
38282354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
38292354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
38302354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
38312354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
38322354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
38332354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
38342354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
38352354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
38362354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
38372354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
38382354.103c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\dsound.dll
38392354.103c: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\system32\dsound.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
38402354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9fbbc0000 'C:\windows\system32\dsound.dll'
38412354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
38422354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
38432354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
38442354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
38452354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
38462354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
38472354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
38482354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
38492354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
38502354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
38512354.103c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\winmm.dll
38522354.103c: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\System32\winmm.dll (Input=winmm.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
38532354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
38542354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9fbbc0000 'C:\windows\system32\dsound.dll'
38552354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
38562354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
38572354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
38582354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
38592354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
38602354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
38612354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
38622354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
38632354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
38642354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
38652354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
38662354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9fbbc0000 'C:\windows\system32\dsound.dll'
38672354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
38682354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
38692354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
38702354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
38712354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
38722354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
38732354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
38742354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
38752354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
38762354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
38772354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
38782354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9fbbc0000 'C:\windows\system32\dsound.dll'
38792354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
38802354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
38812354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
38822354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
38832354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
38842354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
38852354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
38862354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
38872354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
38882354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
38892354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
38902354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9fbbc0000 'C:\windows\system32\dsound.dll'
38912354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
38922354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
38932354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
38942354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
38952354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
38962354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
38972354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
38982354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
38992354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
39002354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
39012354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
39022354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9fbbc0000 'C:\windows\system32\dsound.dll'
39032354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
39042354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
39052354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
39062354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
39072354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
39082354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
39092354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
39102354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
39112354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
39122354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
39132354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
39142354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9fbbc0000 'C:\windows\system32\dsound.dll'
39152354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
39162354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
39172354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
39182354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
39192354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
39202354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
39212354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
39222354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
39232354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
39242354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
39252354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
39262354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9fbbc0000 'C:\windows\system32\dsound.dll'
39272354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
39282354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
39292354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
39302354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
39312354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
39322354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
39332354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
39342354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
39352354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
39362354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
39372354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
39382354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9fbbc0000 'C:\windows\system32\dsound.dll'
39392354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
39402354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
39412354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
39422354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
39432354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
39442354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
39452354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
39462354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
39472354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
39482354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
39492354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
39502354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9fbbc0000 'C:\windows\system32\dsound.dll'
39512354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
39522354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
39532354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
39542354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
39552354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
39562354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
39572354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
39582354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
39592354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
39602354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
39612354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
39622354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9fbbc0000 'C:\windows\system32\dsound.dll'
39632354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
39642354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
39652354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
39662354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
39672354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
39682354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
39692354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
39702354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
39712354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
39722354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
39732354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
39742354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9fbbc0000 'C:\windows\system32\dsound.dll'
39752354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
39762354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
39772354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
39782354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
39792354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
39802354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
39812354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
39822354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
39832354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
39842354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
39852354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
39862354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9fbbc0000 'C:\windows\system32\dsound.dll'
39872354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
39882354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
39892354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
39902354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
39912354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
39922354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
39932354.103c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\winmm.dll
39942354.103c: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\System32\winmm.dll (Input=winmm.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
39952354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
39962354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
39972354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
39982354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
39992354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
40002354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9fbbc0000 'C:\windows\system32\dsound.dll'
40012354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
40022354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
40032354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
40042354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
40052354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
40062354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
40072354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
40082354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
40092354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
40102354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
40112354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
40122354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9fbbc0000 'C:\windows\system32\dsound.dll'
40132354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
40142354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
40152354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
40162354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
40172354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
40182354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
40192354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
40202354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
40212354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
40222354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
40232354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
40242354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9fbbc0000 'C:\windows\system32\dsound.dll'
40252354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
40262354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
40272354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
40282354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
40292354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
40302354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
40312354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
40322354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
40332354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
40342354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
40352354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
40362354.103c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\dsound.dll
40372354.103c: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\system32\dsound.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
40382354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9fbbc0000 'C:\windows\system32\dsound.dll'
40392354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
40402354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
40412354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
40422354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
40432354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
40442354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
40452354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
40462354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
40472354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
40482354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
40492354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
40502354.2d84: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
40512354.2d84: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\wintrust.dll
40522354.2d84: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\System32\WINTRUST.DLL (Input=WINTRUST.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
40532354.2d84: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16620000 'C:\windows\System32\WINTRUST.DLL'
40542354.2d84: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16140000 'C:\windows\System32\CRYPT32.dll'
40552354.2d84: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16140000 'C:\windows\System32\crypt32.dll'
40562354.2d84: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'ws2_32.dll'.
40572354.2d84: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #22 'rpcrt4.dll'.
40582354.2d84: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\mswsock.dll) WinVerifyTrust
40592354.2d84: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\mswsock.dll
40602354.2d84: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
40612354.2d84: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
40622354.2d84: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
40632354.2d84: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume4\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
40642354.2d84: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\ws2_32.dll
40652354.2d84: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\system32\mswsock.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
40662354.2d84: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\mswsock.dll
40672354.2d84: supR3HardenedDllNotificationCallback: load 00007ffa14d70000 LB 0x00067000 C:\windows\system32\mswsock.dll [fFlags=0x0]
40682354.2d84: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\mswsock.dll
40692354.2d84: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa14d70000 'C:\windows\system32\mswsock.dll'
40702354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ff9fbbc0000 'C:\windows\system32\dsound.dll'
40712354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
40722354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
40732354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
40742354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
40752354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
40762354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
40772354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
40782354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
40792354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
40802354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
40812354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa13050000 'C:\windows\System32\winmm.dll'
40822354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
40832354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16140000 'C:\windows\System32\crypt32.dll'
40842354.103c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
40852354.103c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'rpcrt4.dll'.
40862354.103c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #18 'combase.dll'.
40872354.103c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #21 'shcore.dll'.
40882354.103c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #22 'textinputframework.dll'.
40892354.103c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #23 'inputhost.dll'.
40902354.103c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #42 'user32.dll'.
40912354.103c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\Windows.UI.dll) WinVerifyTrust
40922354.103c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\Windows.UI.dll
40932354.103c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
40942354.103c: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume4\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
40952354.103c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'inputhost.dll'...
40962354.103c: supR3HardenedWinVerifyCacheProcessImportTodos: 'inputhost.dll' -> '\Device\HarddiskVolume4\Windows\System32\inputhost.dll' [rcNtRedir=0xc0150008]
40972354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
40982354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16140000 'C:\windows\System32\crypt32.dll'
40992354.103c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcp_win.dll'.
41002354.103c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'coremessaging.dll'.
41012354.103c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #40 'coreuicomponents.dll'.
41022354.103c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #44 'propsys.dll'.
41032354.103c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #46 'shcore.dll'.
41042354.103c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #47 'win32u.dll'.
41052354.103c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #50 'combase.dll'.
41062354.103c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\InputHost.dll) WinVerifyTrust
41072354.103c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\InputHost.dll
41082354.103c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'textinputframework.dll'...
41092354.103c: supR3HardenedWinVerifyCacheProcessImportTodos: 'textinputframework.dll' -> '\Device\HarddiskVolume4\Windows\System32\textinputframework.dll' [rcNtRedir=0xc0150008]
41102354.103c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\TextInputFramework.dll
41112354.103c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shcore.dll'...
41122354.103c: supR3HardenedWinVerifyCacheProcessImportTodos: 'shcore.dll' -> '\Device\HarddiskVolume4\Windows\System32\shcore.dll' [rcNtRedir=0xc0150008]
41132354.103c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\SHCore.dll
41142354.103c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
41152354.103c: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume4\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
41162354.103c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\combase.dll
41172354.103c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
41182354.103c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
41192354.103c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
41202354.103c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
41212354.103c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
41222354.103c: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume4\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
41232354.103c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
41242354.103c: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume4\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
41252354.103c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shcore.dll'...
41262354.103c: supR3HardenedWinVerifyCacheProcessImportTodos: 'shcore.dll' -> '\Device\HarddiskVolume4\Windows\System32\shcore.dll' [rcNtRedir=0xc0150008]
41272354.103c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\SHCore.dll
41282354.103c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'propsys.dll'...
41292354.103c: supR3HardenedWinVerifyCacheProcessImportTodos: 'propsys.dll' -> '\Device\HarddiskVolume4\Windows\System32\propsys.dll' [rcNtRedir=0xc0150008]
41302354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa148e0000 'C:\windows\system32\rsaenh.dll'
41312354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16140000 'C:\windows\System32\crypt32.dll'
41322354.103c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #18 'oleaut32.dll'.
41332354.103c: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #33 'rpcrt4.dll'.
41342354.103c: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume4\Windows\System32\propsys.dll) WinVerifyTrust
41352354.103c: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume4\Windows\System32\propsys.dll
41362354.103c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'coreuicomponents.dll'...
41372354.103c: supR3HardenedWinVerifyCacheProcessImportTodos: 'coreuicomponents.dll' -> '\Device\HarddiskVolume4\Windows\System32\coreuicomponents.dll' [rcNtRedir=0xc0150008]
41382354.103c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\CoreUIComponents.dll
41392354.103c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'coremessaging.dll'...
41402354.103c: supR3HardenedWinVerifyCacheProcessImportTodos: 'coremessaging.dll' -> '\Device\HarddiskVolume4\Windows\System32\coremessaging.dll' [rcNtRedir=0xc0150008]
41412354.103c: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\CoreMessaging.dll
41422354.103c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
41432354.103c: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume4\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
41442354.103c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
41452354.103c: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume4\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
41462354.103c: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
41472354.103c: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume4\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
41482354.103c: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\Windows.UI.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
41492354.103c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\Windows.UI.dll
41502354.103c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\InputHost.dll
41512354.103c: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\propsys.dll
41522354.103c: supR3HardenedDllNotificationCallback: load 00007ffa11ef0000 LB 0x000f0000 C:\Windows\System32\PROPSYS.dll [fFlags=0x0]
41532354.103c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\propsys.dll
41542354.103c: supR3HardenedDllNotificationCallback: load 00007ffa05540000 LB 0x0011b000 C:\Windows\System32\InputHost.dll [fFlags=0x0]
41552354.103c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\InputHost.dll
41562354.103c: supR3HardenedDllNotificationCallback: load 00007ffa05700000 LB 0x00151000 C:\Windows\System32\Windows.UI.dll [fFlags=0x0]
41572354.103c: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\Windows.UI.dll
41582354.103c: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa05700000 'C:\Windows\System32\Windows.UI.dll'
41592354.1aa0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume4\Windows\System32\avrt.dll
41602354.1aa0: supR3HardenedMonitor_LdrLoadDll: pName=C:\windows\System32\avrt.dll (Input=avrt.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
41612354.1aa0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa119c0000 'C:\windows\System32\avrt.dll'
41622354.53c: supR3HardenedDllNotificationCallback: Unload 00007ffa05700000 LB 0x00151000 C:\Windows\System32\Windows.UI.dll [flags=0x0]
41632354.53c: supR3HardenedDllNotificationCallback: Unload 00007ffa05540000 LB 0x0011b000 C:\Windows\System32\InputHost.dll [flags=0x0]
41642354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16a20000 'C:\windows\system32\shell32.dll'
41652354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16a20000 'C:\windows\system32\shell32.dll'
41662354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16a20000 'C:\windows\system32\shell32.dll'
41672354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16a20000 'C:\windows\system32\shell32.dll'
41682354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16a20000 'C:\windows\system32\shell32.dll'
41692354.760: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007ffa16a20000 'C:\windows\system32\shell32.dll'
41702354.24f4: supR3HardenedDllNotificationCallback: Unload 00007ffa119b0000 LB 0x0000d000 D:\Program Files\Oracle\VirtualBox\VBoxGuestPropSvc.DLL [flags=0x0]
41712354.2adc: supR3HardenedDllNotificationCallback: Unload 00007ffa11d90000 LB 0x0000c000 D:\Program Files\Oracle\VirtualBox\VBoxGuestControlSvc.DLL [flags=0x0]
41722354.5d0: supR3HardenedDllNotificationCallback: Unload 00007ff9fbdb0000 LB 0x00014000 D:\Program Files\Oracle\VirtualBox\VBoxSharedFolders.DLL [flags=0x0]
41732354.1b7c: supR3HardenedDllNotificationCallback: Unload 00007ffa11da0000 LB 0x0000d000 D:\Program Files\Oracle\VirtualBox\VBoxDragAndDropSvc.DLL [flags=0x0]
41742354.960: supR3HardenedDllNotificationCallback: Unload 00007ffa11db0000 LB 0x0000f000 D:\Program Files\Oracle\VirtualBox\VBoxSharedClipboard.DLL [flags=0x0]
41752354.b34: supR3HardenedDllNotificationCallback: Unload 00007ff9fbe60000 LB 0x00019000 D:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbWebcamR3.DLL [flags=0x0]
41762354.b34: supR3HardenedDllNotificationCallback: Unload 00007ff9fbe80000 LB 0x00018000 D:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbCardReaderR3.DLL [flags=0x0]
41772354.b34: supR3HardenedDllNotificationCallback: Unload 00007ff9feee0000 LB 0x00012000 D:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxNvmeR3.DLL [flags=0x0]
41782354.b34: supR3HardenedDllNotificationCallback: Unload 00007ff9fef00000 LB 0x00018000 D:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxEhciR3.DLL [flags=0x0]
41792354.b34: supR3HardenedDllNotificationCallback: Unload 00007ff9fed70000 LB 0x00041000 D:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.DLL [flags=0x0]
41802354.b34: supR3HardenedDllNotificationCallback: Unload 00007ff9b68f0000 LB 0x009e6000 D:\Program Files\Oracle\VirtualBox\VBoxDD.DLL [flags=0x0]
41812354.b34: supR3HardenedDllNotificationCallback: Unload 00007ff9e2e50000 LB 0x00066000 D:\Program Files\Oracle\VirtualBox\VBoxDDU.dll [flags=0x0]
41822354.b34: supR3HardenedDllNotificationCallback: Unload 00007ff9b6090000 LB 0x0085c000 D:\Program Files\Oracle\VirtualBox\VBoxDD2.dll [flags=0x0]
41832354.b34: supR3HardenedDllNotificationCallback: Unload 00007ffa17590000 LB 0x00470000 C:\windows\System32\SETUPAPI.dll [flags=0x0]
41842354.760: supR3HardenedDllNotificationCallback: Unload 00007ffa11eb0000 LB 0x0000e000 D:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxPuelMainVM.DLL [flags=0x0]
41852354.760: supR3HardenedDllNotificationCallback: Unload 00007ffa05ec0000 LB 0x00014000 C:\windows\system32\wbem\wbemsvc.dll [flags=0x0]
41862354.760: supR3HardenedDllNotificationCallback: Unload 00007ffa06e10000 LB 0x00011000 C:\windows\system32\wbem\wbemprox.dll [flags=0x0]
41872354.760: supR3HardenedDllNotificationCallback: Unload 00007ffa05ee0000 LB 0x00101000 C:\windows\system32\wbem\fastprox.dll [flags=0x0]
41882354.760: supR3HardenedDllNotificationCallback: Unload 00007ffa06d80000 LB 0x00084000 C:\windows\SYSTEM32\wbemcomn.dll [flags=0x0]
41892354.760: Terminating the normal way: rcExit=0
41901ca0.3360: supR3HardNtChildWaitFor[2]: Quitting: ExitCode=0x0 (rcNtWait=0x0, rcNt1=0x0, rcNt2=0x103, rcNt3=0x103, 2894251 ms, the end);
41911498.1004: supR3HardNtChildWaitFor[1]: Quitting: ExitCode=0x0 (rcNtWait=0x0, rcNt1=0x0, rcNt2=0x103, rcNt3=0x103, 2894767 ms, the end);

© 2024 Oracle Support Privacy / Do Not Sell My Info Terms of Use Trademark Policy Automated Access Etiquette