Skip to content

Instantly share code, notes, and snippets.

Embed
What would you like to do?
WSL Vagrant Issues
3f80.3c98: Log file opened: 6.1.8r137981 g_hStartupLog=0000000000000088 g_uNtVerCombined=0xa047bb00
3f80.3c98: \SystemRoot\System32\ntdll.dll:
3f80.3c98: CreationTime: 2020-05-12T19:15:35.370039500Z
3f80.3c98: LastWriteTime: 2020-05-12T19:15:35.406940600Z
3f80.3c98: ChangeTime: 2020-05-12T20:48:51.077790500Z
3f80.3c98: FileAttributes: 0x20
3f80.3c98: Size: 0x1e8460
3f80.3c98: NT Headers: 0xd8
3f80.3c98: Timestamp: 0xb29ecf52
3f80.3c98: Machine: 0x8664 - amd64
3f80.3c98: Timestamp: 0xb29ecf52
3f80.3c98: Image Version: 10.0
3f80.3c98: SizeOfImage: 0x1f0000 (2031616)
3f80.3c98: Resource Dir: 0x17f000 LB 0x6f310
3f80.3c98: [Version info resource found at 0xd8! (ID/Name: 0x1; SubID/SubName: 0x409)]
3f80.3c98: [Raw version resource data: 0x17f0f0 LB 0x380, codepage 0x0 (reserved 0x0)]
3f80.3c98: ProductName: Microsoft® Windows® Operating System
3f80.3c98: ProductVersion: 10.0.18362.815
3f80.3c98: FileVersion: 10.0.18362.815 (WinBuild.160101.0800)
3f80.3c98: FileDescription: NT Layer DLL
3f80.3c98: \SystemRoot\System32\kernel32.dll:
3f80.3c98: CreationTime: 2020-04-17T16:46:41.164938800Z
3f80.3c98: LastWriteTime: 2020-04-17T16:46:41.180896400Z
3f80.3c98: ChangeTime: 2020-05-12T19:16:19.470849300Z
3f80.3c98: FileAttributes: 0x20
3f80.3c98: Size: 0xb0498
3f80.3c98: NT Headers: 0xe8
3f80.3c98: Timestamp: 0x21b07e83
3f80.3c98: Machine: 0x8664 - amd64
3f80.3c98: Timestamp: 0x21b07e83
3f80.3c98: Image Version: 10.0
3f80.3c98: SizeOfImage: 0xb2000 (729088)
3f80.3c98: Resource Dir: 0xb0000 LB 0x520
3f80.3c98: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
3f80.3c98: [Raw version resource data: 0xb00b0 LB 0x3a4, codepage 0x0 (reserved 0x0)]
3f80.3c98: ProductName: Microsoft® Windows® Operating System
3f80.3c98: ProductVersion: 10.0.18362.778
3f80.3c98: FileVersion: 10.0.18362.778 (WinBuild.160101.0800)
3f80.3c98: FileDescription: Windows NT BASE API Client DLL
3f80.3c98: \SystemRoot\System32\KernelBase.dll:
3f80.3c98: CreationTime: 2020-05-12T19:15:35.826821900Z
3f80.3c98: LastWriteTime: 2020-05-12T19:15:35.885987700Z
3f80.3c98: ChangeTime: 2020-05-12T20:48:48.883281100Z
3f80.3c98: FileAttributes: 0x20
3f80.3c98: Size: 0x2a4068
3f80.3c98: NT Headers: 0xf8
3f80.3c98: Timestamp: 0xb89efff3
3f80.3c98: Machine: 0x8664 - amd64
3f80.3c98: Timestamp: 0xb89efff3
3f80.3c98: Image Version: 10.0
3f80.3c98: SizeOfImage: 0x2a4000 (2768896)
3f80.3c98: Resource Dir: 0x27e000 LB 0x548
3f80.3c98: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
3f80.3c98: [Raw version resource data: 0x27e0b0 LB 0x3bc, codepage 0x0 (reserved 0x0)]
3f80.3c98: ProductName: Microsoft® Windows® Operating System
3f80.3c98: ProductVersion: 10.0.18362.815
3f80.3c98: FileVersion: 10.0.18362.815 (WinBuild.160101.0800)
3f80.3c98: FileDescription: Windows NT BASE API Client DLL
3f80.3c98: \SystemRoot\System32\apisetschema.dll:
3f80.3c98: CreationTime: 2019-03-19T04:43:54.837151500Z
3f80.3c98: LastWriteTime: 2019-03-19T04:43:54.837151500Z
3f80.3c98: ChangeTime: 2020-05-12T19:16:19.460875900Z
3f80.3c98: FileAttributes: 0x20
3f80.3c98: Size: 0x1d028
3f80.3c98: NT Headers: 0xc8
3f80.3c98: Timestamp: 0xd6ced080
3f80.3c98: Machine: 0x8664 - amd64
3f80.3c98: Timestamp: 0xd6ced080
3f80.3c98: Image Version: 10.0
3f80.3c98: SizeOfImage: 0x1e000 (122880)
3f80.3c98: Resource Dir: 0x1d000 LB 0x408
3f80.3c98: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
3f80.3c98: [Raw version resource data: 0x1d060 LB 0x3a8, codepage 0x0 (reserved 0x0)]
3f80.3c98: ProductName: Microsoft® Windows® Operating System
3f80.3c98: ProductVersion: 10.0.18362.1
3f80.3c98: FileVersion: 10.0.18362.1 (WinBuild.160101.0800)
3f80.3c98: FileDescription: ApiSet Schema DLL
3f80.3c98: supR3HardenedWinFindAdversaries: 0x0
3f80.3c98: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox'
3f80.3c98: Calling main()
3f80.3c98: SUPR3HardenedMain: pszProgName=VBoxHeadless fFlags=0x0
3f80.3c98: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox'
3f80.3c98: SUPR3HardenedMain: Respawn #1
3f80.3c98: System32: \Device\HarddiskVolume2\Windows\System32
3f80.3c98: WinSxS: \Device\HarddiskVolume2\Windows\WinSxS
3f80.3c98: KnownDllPath: C:\WINDOWS\System32
3f80.3c98: supR3HardenedWinInit: Performing a limited self purification...
3f80.3c98: supHardNtVpScanVirtualMemory: enmKind=SELF_PURIFICATION
3f80.3c98: *0000000000000000-000000000083ffff 0x0001/0x0000 0x0000000
3f80.3c98: *0000000000840000-000000000084ffff 0x0004/0x0004 0x0040000
3f80.3c98: 0000000000850000-000000000085ffff 0x0001/0x0000 0x0000000
3f80.3c98: *0000000000860000-000000000087afff 0x0002/0x0002 0x0040000
3f80.3c98: 000000000087b000-000000000087ffff 0x0001/0x0000 0x0000000
3f80.3c98: *0000000000880000-0000000000938fff 0x0000/0x0004 0x0020000
3f80.3c98: 0000000000939000-000000000093bfff 0x0104/0x0004 0x0020000
3f80.3c98: 000000000093c000-000000000097ffff 0x0004/0x0004 0x0020000
3f80.3c98: *0000000000980000-0000000000983fff 0x0002/0x0002 0x0040000
3f80.3c98: 0000000000984000-000000000098ffff 0x0001/0x0000 0x0000000
3f80.3c98: *0000000000990000-0000000000991fff 0x0004/0x0004 0x0020000
3f80.3c98: 0000000000992000-000000000099ffff 0x0001/0x0000 0x0000000
3f80.3c98: *00000000009a0000-00000000009a1fff 0x0004/0x0004 0x0020000
3f80.3c98: 00000000009a2000-00000000009b9fff 0x0000/0x0004 0x0020000
3f80.3c98: 00000000009ba000-00000000009fffff 0x0001/0x0000 0x0000000
3f80.3c98: *0000000000a00000-0000000000b38fff 0x0000/0x0004 0x0020000
3f80.3c98: 0000000000b39000-0000000000b3bfff 0x0004/0x0004 0x0020000
3f80.3c98: 0000000000b3c000-0000000000bfffff 0x0000/0x0004 0x0020000
3f80.3c98: 0000000000c00000-0000000000c6ffff 0x0001/0x0000 0x0000000
3f80.3c98: *0000000000c70000-0000000000c76fff 0x0004/0x0004 0x0020000
3f80.3c98: 0000000000c77000-0000000000d6ffff 0x0000/0x0004 0x0020000
3f80.3c98: *0000000000d70000-0000000000e36fff 0x0002/0x0002 0x0040000
3f80.3c98: 0000000000e37000-0000000000eaffff 0x0001/0x0000 0x0000000
3f80.3c98: *0000000000eb0000-0000000000ebefff 0x0004/0x0004 0x0020000
3f80.3c98: 0000000000ebf000-0000000000ebffff 0x0000/0x0004 0x0020000
3f80.3c98: *0000000000ec0000-0000000000ec9fff 0x0000/0x0004 0x0020000
3f80.3c98: 0000000000eca000-00000000010bafff 0x0004/0x0004 0x0020000
3f80.3c98: 00000000010bb000-00000000010bbfff 0x0000/0x0004 0x0020000
3f80.3c98: 00000000010bc000-00000000010bffff 0x0001/0x0000 0x0000000
3f80.3c98: *00000000010c0000-00000000010dcfff 0x0004/0x0004 0x0020000
3f80.3c98: 00000000010dd000-00000000011bffff 0x0000/0x0004 0x0020000
3f80.3c98: 00000000011c0000-000000007ffdffff 0x0001/0x0000 0x0000000
3f80.3c98: *000000007ffe0000-000000007ffe0fff 0x0002/0x0002 0x0020000
3f80.3c98: 000000007ffe1000-000000007ffe1fff 0x0001/0x0000 0x0000000
3f80.3c98: *000000007ffe2000-000000007ffe2fff 0x0002/0x0002 0x0020000
3f80.3c98: 000000007ffe3000-00007ff43f77ffff 0x0001/0x0000 0x0000000
3f80.3c98: *00007ff43f780000-00007ff43f784fff 0x0002/0x0002 0x0040000
3f80.3c98: 00007ff43f785000-00007ff43f87ffff 0x0000/0x0002 0x0040000
3f80.3c98: *00007ff43f880000-00007ff53f89ffff 0x0000/0x0004 0x0020000
3f80.3c98: *00007ff53f8a0000-00007ff54189ffff 0x0000/0x0004 0x0020000
3f80.3c98: 00007ff5418a0000-00007ff5418a0fff 0x0004/0x0004 0x0020000
3f80.3c98: 00007ff5418a1000-00007ff5418affff 0x0001/0x0000 0x0000000
3f80.3c98: *00007ff5418b0000-00007ff5418b0fff 0x0002/0x0002 0x0040000
3f80.3c98: 00007ff5418b1000-00007ff5418bffff 0x0001/0x0000 0x0000000
3f80.3c98: *00007ff5418c0000-00007ff5418e2fff 0x0002/0x0002 0x0040000
3f80.3c98: 00007ff5418e3000-00007ff7e032ffff 0x0001/0x0000 0x0000000
3f80.3c98: *00007ff7e0330000-00007ff7e0330fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxHeadless.exe
3f80.3c98: 00007ff7e0331000-00007ff7e03a6fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxHeadless.exe
3f80.3c98: 00007ff7e03a7000-00007ff7e03a7fff 0x0080/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxHeadless.exe
3f80.3c98: 00007ff7e03a8000-00007ff7e03effff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxHeadless.exe
3f80.3c98: 00007ff7e03f0000-00007ff7e03f2fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxHeadless.exe
3f80.3c98: 00007ff7e03f3000-00007ff7e03f5fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxHeadless.exe
3f80.3c98: 00007ff7e03f6000-00007ff7e03f8fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxHeadless.exe
3f80.3c98: 00007ff7e03f9000-00007ff7e03f9fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxHeadless.exe
3f80.3c98: 00007ff7e03fa000-00007ff7e03fbfff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxHeadless.exe
3f80.3c98: 00007ff7e03fc000-00007ff7e03fcfff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxHeadless.exe
3f80.3c98: 00007ff7e03fd000-00007ff7e0445fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxHeadless.exe
3f80.3c98: 00007ff7e0446000-00007fffde15ffff 0x0001/0x0000 0x0000000
3f80.3c98: *00007fffde160000-00007fffde160fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\KernelBase.dll
3f80.3c98: 00007fffde161000-00007fffde265fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\KernelBase.dll
3f80.3c98: 00007fffde266000-00007fffde3c8fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\KernelBase.dll
3f80.3c98: 00007fffde3c9000-00007fffde3ccfff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\KernelBase.dll
3f80.3c98: 00007fffde3cd000-00007fffde3cdfff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\KernelBase.dll
3f80.3c98: 00007fffde3ce000-00007fffde403fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\KernelBase.dll
3f80.3c98: 00007fffde404000-00007fffdfecffff 0x0001/0x0000 0x0000000
3f80.3c98: *00007fffdfed0000-00007fffdfed0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\kernel32.dll
3f80.3c98: 00007fffdfed1000-00007fffdff45fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\kernel32.dll
3f80.3c98: 00007fffdff46000-00007fffdff77fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\kernel32.dll
3f80.3c98: 00007fffdff78000-00007fffdff78fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\kernel32.dll
3f80.3c98: 00007fffdff79000-00007fffdff79fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\kernel32.dll
3f80.3c98: 00007fffdff7a000-00007fffdff81fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\kernel32.dll
3f80.3c98: 00007fffdff82000-00007fffe0e9ffff 0x0001/0x0000 0x0000000
3f80.3c98: *00007fffe0ea0000-00007fffe0ea0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
3f80.3c98: 00007fffe0ea1000-00007fffe0fb7fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
3f80.3c98: 00007fffe0fb8000-00007fffe0ffefff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
3f80.3c98: 00007fffe0fff000-00007fffe0ffffff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
3f80.3c98: 00007fffe1000000-00007fffe1001fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
3f80.3c98: 00007fffe1002000-00007fffe100afff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
3f80.3c98: 00007fffe100b000-00007fffe108ffff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
3f80.3c98: 00007fffe1090000-00007ffffffeffff 0x0001/0x0000 0x0000000
3f80.3c98: kernel32.dll: timestamp 0x21b07e83 (rc=VINF_SUCCESS)
3f80.3c98: kernelbase.dll: timestamp 0xb89efff3 (rc=VINF_SUCCESS)
3f80.3c98: VBoxHeadless.exe: timestamp 0x5ebd9c8a (rc=VINF_SUCCESS)
3f80.3c98: '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxHeadless.exe' has no imports
3f80.3c98: '\Device\HarddiskVolume2\Windows\System32\ntdll.dll' has no imports
3f80.3c98: supR3HardenedWinInit: SUPHARDNTVPKIND_SELF_PURIFICATION_LIMITED -> VINF_SUCCESS, cFixes=0
3f80.3c98: '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxHeadless.exe' has no imports
3f80.3c98: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxHeadless.exe)
3f80.3c98: supR3HardNtEnableThreadCreationEx:
3f80.3c98: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007fffe0f11770 pvNtTerminateThread=00007fffe0f3cac0
3f80.3c98: supR3HardenedWinDoReSpawn(1): New child 3f38.2e68 [kernel32].
3f80.3c98: supR3HardNtChildGatherData: PebBaseAddress=00000000010ca000 cbPeb=0x388
3f80.3c98: supR3HardNtPuChFindNtdll: uNtDllParentAddr=00007fffe0ea0000 uNtDllChildAddr=00007fffe0ea0000
3f80.3c98: supR3HardenedWinSetupChildInit: uLdrInitThunk=00007fffe0f11770
3f80.3c98: supR3HardenedWinSetupChildInit: Initial context:
rax=0000000000000000 rbx=0000000000000000 rcx=00007ff7e0337740 rdx=00000000010ca000
rsi=0000000000000000 rdi=0000000000000000 r8 =0000000000000000 r9 =0000000000000000
r10=0000000000000000 r11=0000000000000000 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000 P1=0000000000000000 P2=0000000000000000
rip=00007fffe0f0ce30 rsp=00000000012ffbf8 rbp=0000000000000000 ctxflags=0010001b
cs=0033 ss=002b ds=0000 es=0000 fs=0000 gs=0000 eflags=00000200 mxcrx=00001f80
P3=0000000000000000 P4=0000000000000000 P5=0000000000000000 P6=0000000000000000
dr0=0000000000000000 dr1=0000000000000000 dr2=0000000000000000 dr3=0000000000000000
dr6=0000000000000000 dr7=0000000000000000 vcr=0000000000000000 dcr=0000000000000000
lbt=0000000000000000 lbf=0000000000000000 lxt=0000000000000000 lxf=0000000000000000
3f80.3c98: supR3HardenedWinSetupChildInit: Start child.
3f80.3c98: supR3HardNtChildWaitFor: Found expected request 0 (PurifyChildAndCloseHandles) after 0 ms.
3f80.3c98: supR3HardNtChildPurify: Startup delay kludge #1/0: 262 ms, 31 sleeps
3f80.3c98: supHardNtVpScanVirtualMemory: enmKind=CHILD_PURIFICATION
3f80.3c98: *0000000000000000-0000000000f4ffff 0x0001/0x0000 0x0000000
3f80.3c98: *0000000000f50000-0000000000f6ffff 0x0004/0x0004 0x0020000
3f80.3c98: *0000000000f70000-0000000000f8afff 0x0002/0x0002 0x0040000
3f80.3c98: 0000000000f8b000-0000000000f8ffff 0x0001/0x0000 0x0000000
3f80.3c98: *0000000000f90000-0000000000f93fff 0x0002/0x0002 0x0040000
3f80.3c98: 0000000000f94000-0000000000f9ffff 0x0001/0x0000 0x0000000
3f80.3c98: *0000000000fa0000-0000000000fa1fff 0x0004/0x0004 0x0020000
3f80.3c98: 0000000000fa2000-0000000000ffffff 0x0001/0x0000 0x0000000
3f80.3c98: *0000000001000000-00000000010c9fff 0x0000/0x0004 0x0020000
3f80.3c98: 00000000010ca000-00000000010ccfff 0x0004/0x0004 0x0020000
3f80.3c98: 00000000010cd000-00000000011fffff 0x0000/0x0004 0x0020000
3f80.3c98: *0000000001200000-00000000012fafff 0x0000/0x0004 0x0020000
3f80.3c98: 00000000012fb000-00000000012fdfff 0x0104/0x0004 0x0020000
3f80.3c98: 00000000012fe000-00000000012fffff 0x0004/0x0004 0x0020000
3f80.3c98: 0000000001300000-000000007ffdffff 0x0001/0x0000 0x0000000
3f80.3c98: *000000007ffe0000-000000007ffe0fff 0x0002/0x0002 0x0020000
3f80.3c98: 000000007ffe1000-000000007ffe1fff 0x0001/0x0000 0x0000000
3f80.3c98: *000000007ffe2000-000000007ffe2fff 0x0002/0x0002 0x0020000
3f80.3c98: 000000007ffe3000-00007ff54309ffff 0x0001/0x0000 0x0000000
3f80.3c98: *00007ff5430a0000-00007ff5430a0fff 0x0002/0x0002 0x0040000
3f80.3c98: 00007ff5430a1000-00007ff5430affff 0x0001/0x0000 0x0000000
3f80.3c98: *00007ff5430b0000-00007ff5430d2fff 0x0002/0x0002 0x0040000
3f80.3c98: 00007ff5430d3000-00007ff7e032ffff 0x0001/0x0000 0x0000000
3f80.3c98: *00007ff7e0330000-00007ff7e0330fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxHeadless.exe
3f80.3c98: 00007ff7e0331000-00007ff7e03a6fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxHeadless.exe
3f80.3c98: 00007ff7e03a7000-00007ff7e03a7fff 0x0080/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxHeadless.exe
3f80.3c98: 00007ff7e03a8000-00007ff7e03effff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxHeadless.exe
3f80.3c98: 00007ff7e03f0000-00007ff7e03f0fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxHeadless.exe
3f80.3c98: 00007ff7e03f1000-00007ff7e03f1fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxHeadless.exe
3f80.3c98: 00007ff7e03f2000-00007ff7e03f6fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxHeadless.exe
3f80.3c98: 00007ff7e03f7000-00007ff7e03f7fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxHeadless.exe
3f80.3c98: 00007ff7e03f8000-00007ff7e03f8fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxHeadless.exe
3f80.3c98: 00007ff7e03f9000-00007ff7e03fcfff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxHeadless.exe
3f80.3c98: 00007ff7e03fd000-00007ff7e0445fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxHeadless.exe
3f80.3c98: 00007ff7e0446000-00007fffe0e9ffff 0x0001/0x0000 0x0000000
3f80.3c98: *00007fffe0ea0000-00007fffe0ea0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
3f80.3c98: 00007fffe0ea1000-00007fffe0fb7fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
3f80.3c98: 00007fffe0fb8000-00007fffe0ffefff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
3f80.3c98: 00007fffe0fff000-00007fffe100afff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
3f80.3c98: 00007fffe100b000-00007fffe1019fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
3f80.3c98: 00007fffe101a000-00007fffe101afff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
3f80.3c98: 00007fffe101b000-00007fffe101dfff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
3f80.3c98: 00007fffe101e000-00007fffe108ffff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
3f80.3c98: 00007fffe1090000-00007ffffffeffff 0x0001/0x0000 0x0000000
3f80.3c98: supR3HardNtChildPurify: Done after 263 ms and 0 fixes (loop #0).
3f38.2e68: Log file opened: 6.1.8r137981 g_hStartupLog=0000000000000008 g_uNtVerCombined=0xa047bb00
3f38.2e68: supR3HardenedVmProcessInit: uNtDllAddr=00007fffe0ea0000 g_uNtVerCombined=0xa047bb00 (stack ~00000000012ff688)
3f38.2e68: ntdll.dll: timestamp 0xb29ecf52 (rc=VINF_SUCCESS)
3f38.2e68: New simple heap: #1 0000000001400000 LB 0x400000 (for 2031616 allocation)
3f80.3c98: supR3HardNtEnableThreadCreationEx:
3f38.2e68: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox'
3f38.2e68: System32: \Device\HarddiskVolume2\Windows\System32
3f38.2e68: WinSxS: \Device\HarddiskVolume2\Windows\WinSxS
3f38.2e68: KnownDllPath: C:\WINDOWS\System32
3f38.2e68: supR3HardenedVmProcessInit: Opening vboxdrv stub...
3f38.2e68: supR3HardenedVmProcessInit: Restoring LdrInitializeThunk...
3f38.2e68: supR3HardenedVmProcessInit: Returning to LdrInitializeThunk...
3f38.2e68: Registered Dll notification callback with NTDLL.
3f38.2e68: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\kernel32.dll)
3f38.2e68: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\kernel32.dll
3f38.2e68: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\KERNEL32.DLL (Input=KERNEL32.DLL, rcNtResolve=0xc0150008) *pfFlags=0xffffffff pwszSearchPath=0000000000004001:<flags> [calling]
3f38.2e68: supR3HardenedDllNotificationCallback: load 00007fffde160000 LB 0x002a4000 C:\WINDOWS\System32\KERNELBASE.dll [fFlags=0x0]
3f38.2e68: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\KernelBase.dll)
3f38.2e68: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\KernelBase.dll
3f38.2e68: supR3HardenedDllNotificationCallback: load 00007fffdfed0000 LB 0x000b2000 C:\WINDOWS\System32\KERNEL32.DLL [fFlags=0x0]
3f38.2e68: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
3f38.2e68: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdfed0000 'C:\WINDOWS\System32\KERNEL32.DLL'
3f38.2e68: supR3HardenedDllNotificationCallback: load 00007ff7e0330000 LB 0x00116000 C:\Program Files\Oracle\VirtualBox\VBoxHeadless.exe [fFlags=0x0]
3f38.2e68: '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxHeadless.exe' has no imports
3f38.2e68: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxHeadless.exe)
3f38.2e68: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxHeadless.exe
3f38.2e68: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007fffe0f11770 pvNtTerminateThread=00007fffe0f3cac0
3f80.3c98: supR3HardNtChildWaitFor: Found expected request 1 (CloseEvents) after 64 ms.
3f38.2e68: \SystemRoot\System32\ntdll.dll:
3f38.2e68: CreationTime: 2020-05-12T19:15:35.370039500Z
3f38.2e68: LastWriteTime: 2020-05-12T19:15:35.406940600Z
3f38.2e68: ChangeTime: 2020-05-12T20:48:51.077790500Z
3f38.2e68: FileAttributes: 0x20
3f38.2e68: Size: 0x1e8460
3f38.2e68: NT Headers: 0xd8
3f38.2e68: Timestamp: 0xb29ecf52
3f38.2e68: Machine: 0x8664 - amd64
3f38.2e68: Timestamp: 0xb29ecf52
3f38.2e68: Image Version: 10.0
3f38.2e68: SizeOfImage: 0x1f0000 (2031616)
3f38.2e68: Resource Dir: 0x17f000 LB 0x6f310
3f38.2e68: [Version info resource found at 0xd8! (ID/Name: 0x1; SubID/SubName: 0x409)]
3f38.2e68: [Raw version resource data: 0x17f0f0 LB 0x380, codepage 0x0 (reserved 0x0)]
3f38.2e68: ProductName: Microsoft® Windows® Operating System
3f38.2e68: ProductVersion: 10.0.18362.815
3f38.2e68: FileVersion: 10.0.18362.815 (WinBuild.160101.0800)
3f38.2e68: FileDescription: NT Layer DLL
3f38.2e68: \SystemRoot\System32\kernel32.dll:
3f38.2e68: CreationTime: 2020-04-17T16:46:41.164938800Z
3f38.2e68: LastWriteTime: 2020-04-17T16:46:41.180896400Z
3f38.2e68: ChangeTime: 2020-05-12T19:16:19.470849300Z
3f38.2e68: FileAttributes: 0x20
3f38.2e68: Size: 0xb0498
3f38.2e68: NT Headers: 0xe8
3f38.2e68: Timestamp: 0x21b07e83
3f38.2e68: Machine: 0x8664 - amd64
3f38.2e68: Timestamp: 0x21b07e83
3f38.2e68: Image Version: 10.0
3f38.2e68: SizeOfImage: 0xb2000 (729088)
3f38.2e68: Resource Dir: 0xb0000 LB 0x520
3f38.2e68: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
3f38.2e68: [Raw version resource data: 0xb00b0 LB 0x3a4, codepage 0x0 (reserved 0x0)]
3f38.2e68: ProductName: Microsoft® Windows® Operating System
3f38.2e68: ProductVersion: 10.0.18362.778
3f38.2e68: FileVersion: 10.0.18362.778 (WinBuild.160101.0800)
3f38.2e68: FileDescription: Windows NT BASE API Client DLL
3f38.2e68: \SystemRoot\System32\KernelBase.dll:
3f38.2e68: CreationTime: 2020-05-12T19:15:35.826821900Z
3f38.2e68: LastWriteTime: 2020-05-12T19:15:35.885987700Z
3f38.2e68: ChangeTime: 2020-05-12T20:48:48.883281100Z
3f38.2e68: FileAttributes: 0x20
3f38.2e68: Size: 0x2a4068
3f38.2e68: NT Headers: 0xf8
3f38.2e68: Timestamp: 0xb89efff3
3f38.2e68: Machine: 0x8664 - amd64
3f38.2e68: Timestamp: 0xb89efff3
3f38.2e68: Image Version: 10.0
3f38.2e68: SizeOfImage: 0x2a4000 (2768896)
3f38.2e68: Resource Dir: 0x27e000 LB 0x548
3f38.2e68: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
3f38.2e68: [Raw version resource data: 0x27e0b0 LB 0x3bc, codepage 0x0 (reserved 0x0)]
3f38.2e68: ProductName: Microsoft® Windows® Operating System
3f38.2e68: ProductVersion: 10.0.18362.815
3f38.2e68: FileVersion: 10.0.18362.815 (WinBuild.160101.0800)
3f38.2e68: FileDescription: Windows NT BASE API Client DLL
3f38.2e68: \SystemRoot\System32\apisetschema.dll:
3f38.2e68: CreationTime: 2019-03-19T04:43:54.837151500Z
3f38.2e68: LastWriteTime: 2019-03-19T04:43:54.837151500Z
3f38.2e68: ChangeTime: 2020-05-12T19:16:19.460875900Z
3f38.2e68: FileAttributes: 0x20
3f38.2e68: Size: 0x1d028
3f38.2e68: NT Headers: 0xc8
3f38.2e68: Timestamp: 0xd6ced080
3f38.2e68: Machine: 0x8664 - amd64
3f38.2e68: Timestamp: 0xd6ced080
3f38.2e68: Image Version: 10.0
3f38.2e68: SizeOfImage: 0x1e000 (122880)
3f38.2e68: Resource Dir: 0x1d000 LB 0x408
3f38.2e68: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
3f38.2e68: [Raw version resource data: 0x1d060 LB 0x3a8, codepage 0x0 (reserved 0x0)]
3f38.2e68: ProductName: Microsoft® Windows® Operating System
3f38.2e68: ProductVersion: 10.0.18362.1
3f38.2e68: FileVersion: 10.0.18362.1 (WinBuild.160101.0800)
3f38.2e68: FileDescription: ApiSet Schema DLL
3f38.2e68: supR3HardenedWinFindAdversaries: 0x0
3f38.2e68: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox'
3f38.2e68: Calling main()
3f38.2e68: SUPR3HardenedMain: pszProgName=VBoxHeadless fFlags=0x0
3f38.2e68: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox'
3f38.2e68: '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxHeadless.exe' has no imports
3f38.2e68: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxHeadless.exe)
3f38.2e68: SUPR3HardenedMain: Respawn #2
3f38.2e68: supR3HardNtEnableThreadCreationEx:
3f38.2e68: supR3HardenedDllNotificationCallback: load 00007fffe07d0000 LB 0x00120000 C:\WINDOWS\System32\RPCRT4.dll [fFlags=0x0]
3f38.2e68: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll)
3f38.2e68: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll
3f38.2e68: supR3HardenedDllNotificationCallback: load 00007fffdf9c0000 LB 0x00097000 C:\WINDOWS\System32\sechost.dll [fFlags=0x0]
3f38.2e68: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'rpcrt4.dll'.
3f38.2e68: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\sechost.dll)
3f38.2e68: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\sechost.dll
3f38.2e68: '\Device\HarddiskVolume2\Windows\System32\ntdll.dll' has no imports
3f38.2e68: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\ntdll.dll)
3f38.2e68: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\ntdll.dll
3f38.2e68: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
3f38.2e68: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
3f38.2e68: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
3f38.2e68: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\ntdll.dll (Input=ntdll.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
3f38.2e68: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffe0ea0000 'C:\WINDOWS\System32\ntdll.dll'
3f38.2e68: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007fffe0f11770 pvNtTerminateThread=00007fffe0f3cac0
3f38.2e68: supR3HardenedWinDoReSpawn(2): New child 3f08.3b28 [kernel32].
3f38.2e68: supR3HardenedWinReSpawn: NtSetInformationThread/ThreadHideFromDebugger failed: 0xc0000022 (harmless)
3f38.2e68: supR3HardNtChildGatherData: PebBaseAddress=0000000000310000 cbPeb=0x388
3f38.2e68: supR3HardNtPuChFindNtdll: uNtDllParentAddr=00007fffe0ea0000 uNtDllChildAddr=00007fffe0ea0000
3f38.2e68: supR3HardenedWinSetupChildInit: uLdrInitThunk=00007fffe0f11770
3f38.2e68: supR3HardenedWinSetupChildInit: Initial context:
rax=0000000000000000 rbx=0000000000000000 rcx=00007ff7e0337740 rdx=0000000000310000
rsi=0000000000000000 rdi=0000000000000000 r8 =0000000000000000 r9 =0000000000000000
r10=0000000000000000 r11=0000000000000000 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000 P1=0000000000000000 P2=0000000000000000
rip=00007fffe0f0ce30 rsp=000000000015fc08 rbp=0000000000000000 ctxflags=0010001b
cs=0033 ss=002b ds=0000 es=0000 fs=0000 gs=0000 eflags=00000200 mxcrx=00001f80
P3=0000000000000000 P4=0000000000000000 P5=0000000000000000 P6=0000000000000000
dr0=0000000000000000 dr1=0000000000000000 dr2=0000000000000000 dr3=0000000000000000
dr6=0000000000000000 dr7=0000000000000000 vcr=0000000000000000 dcr=0000000000000000
lbt=0000000000000000 lbf=0000000000000000 lxt=0000000000000000 lxf=0000000000000000
3f38.2e68: kernel32.dll: timestamp 0x21b07e83 (rc=VINF_SUCCESS)
3f38.2e68: supR3HardenedWinSetupChildInit: Start child.
3f38.2e68: supR3HardNtChildWaitFor: Found expected request 0 (PurifyChildAndCloseHandles) after 1 ms.
3f38.2e68: supR3HardNtChildPurify: Startup delay kludge #1/0: 258 ms, 31 sleeps
3f38.2e68: supHardNtVpScanVirtualMemory: enmKind=CHILD_PURIFICATION
3f38.2e68: *0000000000000000-000000000001ffff 0x0001/0x0000 0x0000000
3f38.2e68: *0000000000020000-000000000003ffff 0x0004/0x0004 0x0020000
3f38.2e68: *0000000000040000-000000000005afff 0x0002/0x0002 0x0040000
3f38.2e68: 000000000005b000-000000000005ffff 0x0001/0x0000 0x0000000
3f38.2e68: *0000000000060000-000000000015afff 0x0000/0x0004 0x0020000
3f38.2e68: 000000000015b000-000000000015dfff 0x0104/0x0004 0x0020000
3f38.2e68: 000000000015e000-000000000015ffff 0x0004/0x0004 0x0020000
3f38.2e68: *0000000000160000-0000000000163fff 0x0002/0x0002 0x0040000
3f38.2e68: 0000000000164000-000000000016ffff 0x0001/0x0000 0x0000000
3f38.2e68: *0000000000170000-0000000000171fff 0x0004/0x0004 0x0020000
3f38.2e68: 0000000000172000-00000000001fffff 0x0001/0x0000 0x0000000
3f38.2e68: *0000000000200000-000000000030ffff 0x0000/0x0004 0x0020000
3f38.2e68: 0000000000310000-0000000000312fff 0x0004/0x0004 0x0020000
3f38.2e68: 0000000000313000-00000000003fffff 0x0000/0x0004 0x0020000
3f38.2e68: 0000000000400000-000000007ffdffff 0x0001/0x0000 0x0000000
3f38.2e68: *000000007ffe0000-000000007ffe0fff 0x0002/0x0002 0x0020000
3f38.2e68: 000000007ffe1000-000000007ffe1fff 0x0001/0x0000 0x0000000
3f38.2e68: *000000007ffe2000-000000007ffe2fff 0x0002/0x0002 0x0020000
3f38.2e68: 000000007ffe3000-00007ff5d91bffff 0x0001/0x0000 0x0000000
3f38.2e68: *00007ff5d91c0000-00007ff5d91c0fff 0x0002/0x0002 0x0040000
3f38.2e68: 00007ff5d91c1000-00007ff5d91cffff 0x0001/0x0000 0x0000000
3f38.2e68: *00007ff5d91d0000-00007ff5d91f2fff 0x0002/0x0002 0x0040000
3f38.2e68: 00007ff5d91f3000-00007ff7e032ffff 0x0001/0x0000 0x0000000
3f38.2e68: *00007ff7e0330000-00007ff7e0330fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxHeadless.exe
3f38.2e68: 00007ff7e0331000-00007ff7e03a6fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxHeadless.exe
3f38.2e68: 00007ff7e03a7000-00007ff7e03a7fff 0x0080/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxHeadless.exe
3f38.2e68: 00007ff7e03a8000-00007ff7e03effff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxHeadless.exe
3f38.2e68: 00007ff7e03f0000-00007ff7e03f0fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxHeadless.exe
3f38.2e68: 00007ff7e03f1000-00007ff7e03f1fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxHeadless.exe
3f38.2e68: 00007ff7e03f2000-00007ff7e03f6fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxHeadless.exe
3f38.2e68: 00007ff7e03f7000-00007ff7e03f7fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxHeadless.exe
3f38.2e68: 00007ff7e03f8000-00007ff7e03f8fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxHeadless.exe
3f38.2e68: 00007ff7e03f9000-00007ff7e03fcfff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxHeadless.exe
3f38.2e68: 00007ff7e03fd000-00007ff7e0445fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxHeadless.exe
3f38.2e68: 00007ff7e0446000-00007fffe0e9ffff 0x0001/0x0000 0x0000000
3f38.2e68: *00007fffe0ea0000-00007fffe0ea0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
3f38.2e68: 00007fffe0ea1000-00007fffe0fb7fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
3f38.2e68: 00007fffe0fb8000-00007fffe0ffefff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
3f38.2e68: 00007fffe0fff000-00007fffe100afff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
3f38.2e68: 00007fffe100b000-00007fffe1019fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
3f38.2e68: 00007fffe101a000-00007fffe101afff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
3f38.2e68: 00007fffe101b000-00007fffe101dfff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
3f38.2e68: 00007fffe101e000-00007fffe108ffff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
3f38.2e68: 00007fffe1090000-00007ffffffeffff 0x0001/0x0000 0x0000000
3f38.2e68: VBoxHeadless.exe: timestamp 0x5ebd9c8a (rc=VINF_SUCCESS)
3f38.2e68: '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxHeadless.exe' has no imports
3f38.2e68: '\Device\HarddiskVolume2\Windows\System32\ntdll.dll' has no imports
3f38.2e68: supR3HardNtChildPurify: Done after 283 ms and 0 fixes (loop #0).
3f08.3b28: Log file opened: 6.1.8r137981 g_hStartupLog=0000000000000008 g_uNtVerCombined=0xa047bb00
3f08.3b28: supR3HardenedVmProcessInit: uNtDllAddr=00007fffe0ea0000 g_uNtVerCombined=0xa047bb00 (stack ~000000000015f698)
3f38.2e68: supR3HardenedEarlyCompact: Removed heap 1 (0x00000001400000 LB 0x400000)
3f38.2e68: supR3HardNtEnableThreadCreationEx:
3f08.3b28: ntdll.dll: timestamp 0xb29ecf52 (rc=VINF_SUCCESS)
3f08.3b28: New simple heap: #1 0000000000500000 LB 0x400000 (for 2031616 allocation)
3f08.3b28: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox'
3f08.3b28: System32: \Device\HarddiskVolume2\Windows\System32
3f08.3b28: WinSxS: \Device\HarddiskVolume2\Windows\WinSxS
3f08.3b28: KnownDllPath: C:\WINDOWS\System32
3f08.3b28: supR3HardenedVmProcessInit: Opening vboxdrv...
3f08.3b28: supR3HardenedVmProcessInit: Restoring LdrInitializeThunk...
3f08.3b28: supR3HardenedVmProcessInit: Returning to LdrInitializeThunk...
3f08.3b28: Registered Dll notification callback with NTDLL.
3f08.3b28: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\kernel32.dll)
3f08.3b28: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\kernel32.dll
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\KERNEL32.DLL (Input=KERNEL32.DLL, rcNtResolve=0xc0150008) *pfFlags=0xffffffff pwszSearchPath=0000000000004001:<flags> [calling]
3f08.3b28: supR3HardenedDllNotificationCallback: load 00007fffde160000 LB 0x002a4000 C:\WINDOWS\System32\KERNELBASE.dll [fFlags=0x0]
3f08.3b28: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\KernelBase.dll)
3f08.3b28: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\KernelBase.dll
3f08.3b28: supR3HardenedDllNotificationCallback: load 00007fffdfed0000 LB 0x000b2000 C:\WINDOWS\System32\KERNEL32.DLL [fFlags=0x0]
3f08.3b28: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdfed0000 'C:\WINDOWS\System32\KERNEL32.DLL'
3f08.3b28: supR3HardenedDllNotificationCallback: load 00007ff7e0330000 LB 0x00116000 C:\Program Files\Oracle\VirtualBox\VBoxHeadless.exe [fFlags=0x0]
3f08.3b28: '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxHeadless.exe' has no imports
3f08.3b28: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxHeadless.exe)
3f08.3b28: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxHeadless.exe
3f08.3b28: supR3HardNtDisableThreadCreation: pvLdrInitThunk=00007fffe0f11770 pvNtTerminateThread=00007fffe0f3cac0
3f38.2e68: supR3HardNtChildWaitFor: Found expected request 1 (CloseEvents) after 74 ms.
3f08.3b28: \SystemRoot\System32\ntdll.dll:
3f08.3b28: CreationTime: 2020-05-12T19:15:35.370039500Z
3f08.3b28: LastWriteTime: 2020-05-12T19:15:35.406940600Z
3f08.3b28: ChangeTime: 2020-05-12T20:48:51.077790500Z
3f08.3b28: FileAttributes: 0x20
3f08.3b28: Size: 0x1e8460
3f08.3b28: NT Headers: 0xd8
3f08.3b28: Timestamp: 0xb29ecf52
3f08.3b28: Machine: 0x8664 - amd64
3f08.3b28: Timestamp: 0xb29ecf52
3f08.3b28: Image Version: 10.0
3f08.3b28: SizeOfImage: 0x1f0000 (2031616)
3f08.3b28: Resource Dir: 0x17f000 LB 0x6f310
3f08.3b28: [Version info resource found at 0xd8! (ID/Name: 0x1; SubID/SubName: 0x409)]
3f08.3b28: [Raw version resource data: 0x17f0f0 LB 0x380, codepage 0x0 (reserved 0x0)]
3f08.3b28: ProductName: Microsoft® Windows® Operating System
3f08.3b28: ProductVersion: 10.0.18362.815
3f08.3b28: FileVersion: 10.0.18362.815 (WinBuild.160101.0800)
3f08.3b28: FileDescription: NT Layer DLL
3f08.3b28: \SystemRoot\System32\kernel32.dll:
3f08.3b28: CreationTime: 2020-04-17T16:46:41.164938800Z
3f08.3b28: LastWriteTime: 2020-04-17T16:46:41.180896400Z
3f08.3b28: ChangeTime: 2020-05-12T19:16:19.470849300Z
3f08.3b28: FileAttributes: 0x20
3f08.3b28: Size: 0xb0498
3f08.3b28: NT Headers: 0xe8
3f08.3b28: Timestamp: 0x21b07e83
3f08.3b28: Machine: 0x8664 - amd64
3f08.3b28: Timestamp: 0x21b07e83
3f08.3b28: Image Version: 10.0
3f08.3b28: SizeOfImage: 0xb2000 (729088)
3f08.3b28: Resource Dir: 0xb0000 LB 0x520
3f08.3b28: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
3f08.3b28: [Raw version resource data: 0xb00b0 LB 0x3a4, codepage 0x0 (reserved 0x0)]
3f08.3b28: ProductName: Microsoft® Windows® Operating System
3f08.3b28: ProductVersion: 10.0.18362.778
3f08.3b28: FileVersion: 10.0.18362.778 (WinBuild.160101.0800)
3f08.3b28: FileDescription: Windows NT BASE API Client DLL
3f08.3b28: \SystemRoot\System32\KernelBase.dll:
3f08.3b28: CreationTime: 2020-05-12T19:15:35.826821900Z
3f08.3b28: LastWriteTime: 2020-05-12T19:15:35.885987700Z
3f08.3b28: ChangeTime: 2020-05-12T20:48:48.883281100Z
3f08.3b28: FileAttributes: 0x20
3f08.3b28: Size: 0x2a4068
3f08.3b28: NT Headers: 0xf8
3f08.3b28: Timestamp: 0xb89efff3
3f08.3b28: Machine: 0x8664 - amd64
3f08.3b28: Timestamp: 0xb89efff3
3f08.3b28: Image Version: 10.0
3f08.3b28: SizeOfImage: 0x2a4000 (2768896)
3f08.3b28: Resource Dir: 0x27e000 LB 0x548
3f08.3b28: [Version info resource found at 0x90! (ID/Name: 0x1; SubID/SubName: 0x409)]
3f08.3b28: [Raw version resource data: 0x27e0b0 LB 0x3bc, codepage 0x0 (reserved 0x0)]
3f08.3b28: ProductName: Microsoft® Windows® Operating System
3f08.3b28: ProductVersion: 10.0.18362.815
3f08.3b28: FileVersion: 10.0.18362.815 (WinBuild.160101.0800)
3f08.3b28: FileDescription: Windows NT BASE API Client DLL
3f08.3b28: \SystemRoot\System32\apisetschema.dll:
3f08.3b28: CreationTime: 2019-03-19T04:43:54.837151500Z
3f08.3b28: LastWriteTime: 2019-03-19T04:43:54.837151500Z
3f08.3b28: ChangeTime: 2020-05-12T19:16:19.460875900Z
3f08.3b28: FileAttributes: 0x20
3f08.3b28: Size: 0x1d028
3f08.3b28: NT Headers: 0xc8
3f08.3b28: Timestamp: 0xd6ced080
3f08.3b28: Machine: 0x8664 - amd64
3f08.3b28: Timestamp: 0xd6ced080
3f08.3b28: Image Version: 10.0
3f08.3b28: SizeOfImage: 0x1e000 (122880)
3f08.3b28: Resource Dir: 0x1d000 LB 0x408
3f08.3b28: [Version info resource found at 0x48! (ID/Name: 0x1; SubID/SubName: 0x409)]
3f08.3b28: [Raw version resource data: 0x1d060 LB 0x3a8, codepage 0x0 (reserved 0x0)]
3f08.3b28: ProductName: Microsoft® Windows® Operating System
3f08.3b28: ProductVersion: 10.0.18362.1
3f08.3b28: FileVersion: 10.0.18362.1 (WinBuild.160101.0800)
3f08.3b28: FileDescription: ApiSet Schema DLL
3f08.3b28: supR3HardenedWinFindAdversaries: 0x0
3f08.3b28: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox'
3f08.3b28: Calling main()
3f08.3b28: SUPR3HardenedMain: pszProgName=VBoxHeadless fFlags=0x0
3f08.3b28: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox'
3f08.3b28: '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxHeadless.exe' has no imports
3f08.3b28: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxHeadless.exe)
3f08.3b28: SUPR3HardenedMain: Final process, opening VBoxDrv...
3f08.3b28: supR3HardenedEarlyCompact: Removed heap 1 (0x00000000500000 LB 0x400000)
3f08.3b28: supR3HardNtEnableThreadCreationEx:
3f08.3b28: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxSupLib.dll)
3f08.3b28: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxSupLib.dll
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
3f08.3b28: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxSupLib.dll [lacks WinVerifyTrust]
3f08.3b28: supR3HardenedDllNotificationCallback: load 00007fffda6c0000 LB 0x00005000 C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL [fFlags=0x0]
3f08.3b28: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxSupLib.dll [lacks WinVerifyTrust]
3f08.3b28: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxSupLib.dll [lacks WinVerifyTrust]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffda6c0000 'C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL'
3f08.3b28: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxSupLib.dll [lacks WinVerifyTrust]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffda6c0000 'C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL'
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffda6c0000 'C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL'
3f08.3b28: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msasn1.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'crypt32.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #27 'rpcrt4.dll'.
3f08.3b28: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\wintrust.dll)
3f08.3b28: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\wintrust.dll
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
3f08.3b28: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll)
3f08.3b28: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'crypt32.dll'...
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: 'crypt32.dll' -> '\Device\HarddiskVolume2\Windows\System32\crypt32.dll' [rcNtRedir=0xc0150008]
3f08.3b28: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #32 'msasn1.dll'.
3f08.3b28: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\crypt32.dll)
3f08.3b28: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\crypt32.dll
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msasn1.dll'...
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: 'msasn1.dll' -> '\Device\HarddiskVolume2\Windows\System32\msasn1.dll' [rcNtRedir=0xc0150008]
3f08.3b28: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\msasn1.dll)
3f08.3b28: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\msasn1.dll
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
3f08.3b28: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\msvcrt.dll)
3f08.3b28: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\msvcrt.dll
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msasn1.dll'...
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: 'msasn1.dll' -> '\Device\HarddiskVolume2\Windows\System32\msasn1.dll' [rcNtRedir=0xc0150008]
3f08.3b28: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msasn1.dll [lacks WinVerifyTrust]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\Wintrust.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
3f08.3b28: supR3HardenedDllNotificationCallback: load 00007fffdff90000 LB 0x0009e000 C:\WINDOWS\System32\msvcrt.dll [fFlags=0x0]
3f08.3b28: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
3f08.3b28: supR3HardenedDllNotificationCallback: load 00007fffdddf0000 LB 0x00012000 C:\WINDOWS\System32\MSASN1.dll [fFlags=0x0]
3f08.3b28: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msasn1.dll [lacks WinVerifyTrust]
3f08.3b28: supR3HardenedDllNotificationCallback: load 00007fffde410000 LB 0x000fa000 C:\WINDOWS\System32\ucrtbase.dll [fFlags=0x0]
3f08.3b28: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\ucrtbase.dll)
3f08.3b28: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\ucrtbase.dll
3f08.3b28: supR3HardenedDllNotificationCallback: load 00007fffdece0000 LB 0x00149000 C:\WINDOWS\System32\CRYPT32.dll [fFlags=0x0]
3f08.3b28: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\crypt32.dll [lacks WinVerifyTrust]
3f08.3b28: supR3HardenedDllNotificationCallback: load 00007fffe07d0000 LB 0x00120000 C:\WINDOWS\System32\RPCRT4.dll [fFlags=0x0]
3f08.3b28: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
3f08.3b28: supR3HardenedDllNotificationCallback: load 00007fffde000000 LB 0x0005c000 C:\WINDOWS\System32\Wintrust.dll [fFlags=0x0]
3f08.3b28: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
3f08.3b28: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-synch-l1-2-0) -> 0x0, fPresent=1
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-synch-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffde160000 'api-ms-win-core-synch-l1-2-0'
3f08.3b28: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-fibers-l1-1-1) -> 0x0, fPresent=1
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-fibers-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffde160000 'api-ms-win-core-fibers-l1-1-1'
3f08.3b28: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-fibers-l1-1-1) -> 0x0, fPresent=1
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-fibers-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffde160000 'api-ms-win-core-fibers-l1-1-1'
3f08.3b28: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-synch-l1-2-0) -> 0x0, fPresent=1
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-synch-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffde160000 'api-ms-win-core-synch-l1-2-0'
3f08.3b28: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-localization-l1-2-1) -> 0x0, fPresent=1
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-l1-2-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffde160000 'api-ms-win-core-localization-l1-2-1'
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffde000000 'C:\WINDOWS\system32\Wintrust.dll'
3f08.3b28: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\bcrypt.dll)
3f08.3b28: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\bcrypt.dll
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\bcrypt.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
3f08.3b28: supR3HardenedDllNotificationCallback: load 00007fffde130000 LB 0x00026000 C:\WINDOWS\System32\bcrypt.dll [fFlags=0x0]
3f08.3b28: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\bcrypt.dll [lacks WinVerifyTrust]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffde130000 'C:\WINDOWS\system32\bcrypt.dll'
3f08.3b28: bcrypt.dll loaded at 00007fffde130000, BCryptOpenAlgorithmProvider at 00007fffde134c70, preloading providers:
3f08.3b28: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\bcryptprimitives.dll)
3f08.3b28: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\bcryptprimitives.dll
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\bcryptprimitives.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
3f08.3b28: supR3HardenedDllNotificationCallback: load 00007fffdee30000 LB 0x00080000 C:\WINDOWS\System32\bcryptprimitives.dll [fFlags=0x0]
3f08.3b28: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\bcryptprimitives.dll [lacks WinVerifyTrust]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdee30000 'C:\WINDOWS\system32\bcryptprimitives.dll'
3f08.3b28: BCryptOpenAlgorithmProvider(,'MD2',0,0) -> 0x0 (hAlgo=00000000009da340)
3f08.3b28: BCryptOpenAlgorithmProvider(,'MD4',0,0) -> 0x0 (hAlgo=00000000009dfa60)
3f08.3b28: BCryptOpenAlgorithmProvider(,'MD5',0,0) -> 0x0 (hAlgo=00000000009dfd60)
3f08.3b28: BCryptOpenAlgorithmProvider(,'SHA1',0,0) -> 0x0 (hAlgo=00000000009e0060)
3f08.3b28: BCryptOpenAlgorithmProvider(,'SHA256',0,0) -> 0x0 (hAlgo=00000000009e0360)
3f08.3b28: BCryptOpenAlgorithmProvider(,'SHA512',0,0) -> 0x0 (hAlgo=00000000009e0660)
3f08.3b28: BCryptOpenAlgorithmProvider(,'RSA',0,0) -> 0x0 (hAlgo=00000000009e0960)
3f08.3b28: BCryptOpenAlgorithmProvider(,'DSA',0,0) -> 0x0 (hAlgo=00000000009e0c60)
3f08.3b28: supR3HardenedDllNotificationCallback: load 00007fffde110000 LB 0x00017000 C:\WINDOWS\System32\CRYPTSP.dll [fFlags=0x0]
3f08.3b28: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\cryptsp.dll)
3f08.3b28: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\cryptsp.dll
3f08.3b28: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #18 'bcrypt.dll'.
3f08.3b28: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\rsaenh.dll)
3f08.3b28: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\rsaenh.dll
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcrypt.dll'...
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcrypt.dll' -> '\Device\HarddiskVolume2\Windows\System32\bcrypt.dll' [rcNtRedir=0xc0150008]
3f08.3b28: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\bcrypt.dll [lacks WinVerifyTrust]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
3f08.3b28: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
3f08.3b28: supR3HardenedDllNotificationCallback: load 00007fffdd0e0000 LB 0x00033000 C:\WINDOWS\system32\rsaenh.dll [fFlags=0x0]
3f08.3b28: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdd0e0000 'C:\WINDOWS\system32\rsaenh.dll'
3f08.3b28: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'bcryptprimitives.dll'.
3f08.3b28: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\cryptbase.dll)
3f08.3b28: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\cryptbase.dll
3f08.3b28: supR3HardenedDllNotificationCallback: load 00007fffdd740000 LB 0x0000c000 C:\WINDOWS\SYSTEM32\CRYPTBASE.dll [fFlags=0x0]
3f08.3b28: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\cryptbase.dll [lacks WinVerifyTrust]
3f08.3b28: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcryptprimitives.dll'...
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcryptprimitives.dll' -> '\Device\HarddiskVolume2\Windows\System32\bcryptprimitives.dll' [rcNtRedir=0xc0150008]
3f08.3b28: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\bcryptprimitives.dll [lacks WinVerifyTrust]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\kernel32.dll (Input=kernel32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdfed0000 'C:\WINDOWS\System32\kernel32.dll'
3f08.3b28: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\WINTRUST.DLL (Input=WINTRUST.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffde000000 'C:\WINDOWS\System32\WINTRUST.DLL'
3f08.3b28: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\crypt32.dll [lacks WinVerifyTrust]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\CRYPT32.dll (rcNtResolve=0xc0150008) *pfFlags=0x2 pwszSearchPath=0000000000000001:<flags> [calling]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdece0000 'C:\WINDOWS\System32\CRYPT32.dll'
3f08.3b28: supR3HardenedDllNotificationCallback: load 00007fffe0780000 LB 0x0001d000 C:\WINDOWS\System32\imagehlp.dll [fFlags=0x0]
3f08.3b28: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #20 'rpcrt4.dll'.
3f08.3b28: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\imagehlp.dll)
3f08.3b28: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\imagehlp.dll
3f08.3b28: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
3f08.3b28: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdd0e0000 'C:\WINDOWS\system32\rsaenh.dll'
3f08.3b28: supR3HardenedDllNotificationCallback: load 00007fffdf9c0000 LB 0x00097000 C:\WINDOWS\System32\sechost.dll [fFlags=0x0]
3f08.3b28: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'rpcrt4.dll'.
3f08.3b28: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\sechost.dll)
3f08.3b28: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\sechost.dll
3f08.3b28: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'rpcrt4.dll'.
3f08.3b28: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\gpapi.dll)
3f08.3b28: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\gpapi.dll
3f08.3b28: supR3HardenedDllNotificationCallback: load 00007fffdc960000 LB 0x00022000 C:\WINDOWS\SYSTEM32\gpapi.dll [fFlags=0x0]
3f08.3b28: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gpapi.dll [lacks WinVerifyTrust]
3f08.3b28: supR3HardenedDllNotificationCallback: load 00007fffdddc0000 LB 0x00023000 C:\WINDOWS\System32\profapi.dll [fFlags=0x0]
3f08.3b28: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\profapi.dll)
3f08.3b28: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\profapi.dll
3f08.3b28: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'crypt32.dll'.
3f08.3b28: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\cryptnet.dll)
3f08.3b28: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\cryptnet.dll
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'crypt32.dll'...
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: 'crypt32.dll' -> '\Device\HarddiskVolume2\Windows\System32\crypt32.dll' [rcNtRedir=0xc0150008]
3f08.3b28: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\crypt32.dll [lacks WinVerifyTrust]
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
3f08.3b28: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
3f08.3b28: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
3f08.3b28: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
3f08.3b28: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\cryptnet.dll (Input=cryptnet.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
3f08.3b28: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
3f08.3b28: supR3HardenedDllNotificationCallback: load 00007fffd8420000 LB 0x0002f000 C:\WINDOWS\System32\cryptnet.dll [fFlags=0x0]
3f08.3b28: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
3f08.3b28: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x2 pwszSearchPath=0000000000000001:<flags> [calling]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffd8420000 'C:\WINDOWS\System32\cryptnet.dll'
3f08.3b28: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x2 pwszSearchPath=0000000000000001:<flags> [calling]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffd8420000 'C:\WINDOWS\System32\cryptnet.dll'
3f08.3b28: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x2 pwszSearchPath=0000000000000001:<flags> [calling]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffd8420000 'C:\WINDOWS\System32\cryptnet.dll'
3f08.3b28: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x2 pwszSearchPath=0000000000000001:<flags> [calling]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffd8420000 'C:\WINDOWS\System32\cryptnet.dll'
3f08.3b28: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x2 pwszSearchPath=0000000000000001:<flags> [calling]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffd8420000 'C:\WINDOWS\System32\cryptnet.dll'
3f08.3b28: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x2 pwszSearchPath=0000000000000001:<flags> [calling]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffd8420000 'C:\WINDOWS\System32\cryptnet.dll'
3f08.3b28: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffd8420000 'C:\WINDOWS\System32\cryptnet.dll'
3f08.3b28: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffd8420000 'C:\WINDOWS\System32\cryptnet.dll'
3f08.3b28: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffd8420000 'C:\WINDOWS\System32\cryptnet.dll'
3f08.3b28: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffd8420000 'C:\WINDOWS\System32\cryptnet.dll'
3f08.3b28: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffd8420000 'C:\WINDOWS\System32\cryptnet.dll'
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffd8420000 'C:\WINDOWS\System32\cryptnet.dll'
3f08.3b28: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffd8420000 'C:\Windows\System32\cryptnet.dll'
3f08.3b28: supR3HardenedDllNotificationCallback: load 00007fffdf1b0000 LB 0x000a3000 C:\WINDOWS\System32\advapi32.dll [fFlags=0x0]
3f08.3b28: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'sechost.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #27 'rpcrt4.dll'.
3f08.3b28: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\advapi32.dll)
3f08.3b28: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\advapi32.dll
3f08.3b28: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
3f08.3b28: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'sechost.dll'...
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: 'sechost.dll' -> '\Device\HarddiskVolume2\Windows\System32\sechost.dll' [rcNtRedir=0xc0150008]
3f08.3b28: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\sechost.dll [lacks WinVerifyTrust]
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
3f08.3b28: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdd0e0000 'C:\WINDOWS\system32\rsaenh.dll'
3f08.3b28: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\crypt32.dll [lacks WinVerifyTrust]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\crypt32.dll (Input=crypt32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdece0000 'C:\WINDOWS\System32\crypt32.dll'
3f08.3b28: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000000 pwszName=\SystemRoot\System32\ntdll.dll
3f08.3b28: supR3HardNtViCallWinVerifyTrustCatFile: New context 0000000000a32770
3f08.3b28: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000a32770
3f08.3b28: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=2F110B40CF67FEF4EFA84C23431B3B42233E381F
3f08.3b28: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\rpcrt4.dll (Input=rpcrt4.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffe07d0000 'C:\WINDOWS\System32\rpcrt4.dll'
3f08.3b28: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdd0e0000 'C:\WINDOWS\system32\rsaenh.dll'
3f08.3b28: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\crypt32.dll [lacks WinVerifyTrust]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\crypt32.dll (Input=crypt32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdece0000 'C:\WINDOWS\System32\crypt32.dll'
3f08.3b28: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.18362.836.cat'; file='\SystemRoot\System32\ntdll.dll'
3f08.3b28: g_pfnWinVerifyTrust=00007fffde0061f0
3f08.3b28: supR3HardenedScreenImage/preload: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\crypt32.dll [redoing WinVerifyTrust]
3f08.3b28: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdd0e0000 'C:\WINDOWS\system32\rsaenh.dll'
3f08.3b28: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\crypt32.dll [lacks WinVerifyTrust]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\crypt32.dll (Input=crypt32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdece0000 'C:\WINDOWS\System32\crypt32.dll'
3f08.3b28: supR3HardenedScreenImage/preload: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\crypt32.dll'
3f08.3b28: supR3HardenedScreenImage/preload: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\wintrust.dll [redoing WinVerifyTrust]
3f08.3b28: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdd0e0000 'C:\WINDOWS\system32\rsaenh.dll'
3f08.3b28: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\crypt32.dll
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\crypt32.dll (Input=crypt32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdece0000 'C:\WINDOWS\System32\crypt32.dll'
3f08.3b28: supR3HardenedScreenImage/preload: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\wintrust.dll'
3f08.3b28: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdd0e0000 'C:\WINDOWS\system32\rsaenh.dll'
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdece0000 'C:\WINDOWS\System32\crypt32.dll'
3f08.3b28: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\advapi32.dll'
3f08.3b28: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000398 pwszName=\Device\HarddiskVolume2\Windows\System32\cryptnet.dll
3f08.3b28: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000000a32770
3f08.3b28: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000a32770
3f08.3b28: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=09032EBC3D9D9BDDC0EE4A6463C043296B79FF20
3f08.3b28: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdd0e0000 'C:\WINDOWS\system32\rsaenh.dll'
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdece0000 'C:\WINDOWS\System32\crypt32.dll'
3f08.3b28: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.18362.836.cat'; file='\Device\HarddiskVolume2\Windows\System32\cryptnet.dll'
3f08.3b28: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
3f08.3b28: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\cryptnet.dll'
3f08.3b28: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdd0e0000 'C:\WINDOWS\system32\rsaenh.dll'
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdece0000 'C:\WINDOWS\System32\crypt32.dll'
3f08.3b28: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\profapi.dll'
3f08.3b28: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdd0e0000 'C:\WINDOWS\system32\rsaenh.dll'
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdece0000 'C:\WINDOWS\System32\crypt32.dll'
3f08.3b28: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\gpapi.dll'
3f08.3b28: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdd0e0000 'C:\WINDOWS\system32\rsaenh.dll'
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdece0000 'C:\WINDOWS\System32\crypt32.dll'
3f08.3b28: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\sechost.dll'
3f08.3b28: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdd0e0000 'C:\WINDOWS\system32\rsaenh.dll'
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdece0000 'C:\WINDOWS\System32\crypt32.dll'
3f08.3b28: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\imagehlp.dll'
3f08.3b28: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdd0e0000 'C:\WINDOWS\system32\rsaenh.dll'
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdece0000 'C:\WINDOWS\System32\crypt32.dll'
3f08.3b28: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\cryptbase.dll'
3f08.3b28: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdd0e0000 'C:\WINDOWS\system32\rsaenh.dll'
3f08.3b28: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\crypt32.dll
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\crypt32.dll (Input=crypt32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdece0000 'C:\WINDOWS\System32\crypt32.dll'
3f08.3b28: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\rsaenh.dll'
3f08.3b28: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rsaenh.dll
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdd0e0000 'C:\WINDOWS\system32\rsaenh.dll'
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdece0000 'C:\WINDOWS\System32\crypt32.dll'
3f08.3b28: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\cryptsp.dll'
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdd0e0000 'C:\WINDOWS\system32\rsaenh.dll'
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdece0000 'C:\WINDOWS\System32\crypt32.dll'
3f08.3b28: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\bcryptprimitives.dll'
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdd0e0000 'C:\WINDOWS\system32\rsaenh.dll'
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdece0000 'C:\WINDOWS\System32\crypt32.dll'
3f08.3b28: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\bcrypt.dll'
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdd0e0000 'C:\WINDOWS\system32\rsaenh.dll'
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdece0000 'C:\WINDOWS\System32\crypt32.dll'
3f08.3b28: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\ucrtbase.dll'
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdd0e0000 'C:\WINDOWS\system32\rsaenh.dll'
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdece0000 'C:\WINDOWS\System32\crypt32.dll'
3f08.3b28: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll'
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdd0e0000 'C:\WINDOWS\system32\rsaenh.dll'
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdece0000 'C:\WINDOWS\System32\crypt32.dll'
3f08.3b28: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\msasn1.dll'
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdd0e0000 'C:\WINDOWS\system32\rsaenh.dll'
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdece0000 'C:\WINDOWS\System32\crypt32.dll'
3f08.3b28: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll'
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdd0e0000 'C:\WINDOWS\system32\rsaenh.dll'
3f08.3b28: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 24202) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxSupLib.dll'
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdd0e0000 'C:\WINDOWS\system32\rsaenh.dll'
3f08.3b28: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 24202) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxHeadless.exe'
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdd0e0000 'C:\WINDOWS\system32\rsaenh.dll'
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdece0000 'C:\WINDOWS\System32\crypt32.dll'
3f08.3b28: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\KernelBase.dll'
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdd0e0000 'C:\WINDOWS\system32\rsaenh.dll'
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdece0000 'C:\WINDOWS\System32\crypt32.dll'
3f08.3b28: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\kernel32.dll'
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdece0000 'C:\WINDOWS\system32\crypt32.dll'
3f08.3b28: supR3HardenedWinIsDesiredRootCA: Adding 0x4e256dcc6880a355 CN=CORP\srv-build-cd
3f08.3b28: supR3HardenedWinIsDesiredRootCA: Adding 0xb188463be762c700 C=US, ST=California, L=Irvine, O=Blizzard Entertainment, OU=Battle.net, CN=Blizzard Battle.net Local Cert
3f08.3b28: supR3HardenedWinIsDesiredRootCA: Adding 0xba02d0ab12c5ed00 CN=XBL Client IPsec Issuing CA
3f08.3b28: supR3HardenedWinIsDesiredRootCA: Adding 0x3d98ab22bb04a300 C=IE, O=Baltimore, OU=CyberTrust, CN=Baltimore CyberTrust Root
3f08.3b28: supR3HardenedWinIsDesiredRootCA: Adding 0x5ad46780fa5df300 DC=com, DC=microsoft, CN=Microsoft Root Certificate Authority
3f08.3b28: supR3HardenedWinIsDesiredRootCA: Adding 0xc5f7dac95d809a78 CN=CORP\srv-build-cd
3f08.3b28: supR3HardenedWinIsDesiredRootCA: Adding 0xea5386456178582b C=ZA, ST=Western Cape, L=Durbanville, O=Thawte, OU=Thawte Certification, CN=Thawte Timestamping CA
3f08.3b28: supR3HardenedWinIsDesiredRootCA: Adding 0x3be670c1bd02a900 OU=Copyright (c) 1997 Microsoft Corp., OU=Microsoft Corporation, CN=Microsoft Root Authority
3f08.3b28: supR3HardenedWinIsDesiredRootCA: Adding 0x4d4ae3850df1e936 CN=CORP\srv-build-cd
3f08.3b28: supR3HardenedWinIsDesiredRootCA: Adding 0xe991ee72b03db500 C=US, O=Symantec Corporation, CN=Symantec Enterprise Mobile Root for Microsoft
3f08.3b28: supR3HardenedWinIsDesiredRootCA: Adding 0x4d3835aa4180b200 C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Root Certificate Authority 2011
3f08.3b28: supR3HardenedWinIsDesiredRootCA: skipping - not-self-signed: C=US, ST=California, L=Newark, O=Logitech Inc, CN=Logitech Inc
3f08.3b28: supR3HardenedWinIsDesiredRootCA: Adding 0x646e3fe3ba08df00 C=US, O=MSFT, CN=Microsoft Authenticode(tm) Root Authority
3f08.3b28: supR3HardenedWinIsDesiredRootCA: Adding 0xb02f88ad7b7913d0 CN=CORP\srv-build-cd
3f08.3b28: supR3HardenedWinIsDesiredRootCA: Adding 0x9546d06a8d70b800 CN=XBL Server IPsec Issuing CA
3f08.3b28: supR3HardenedWinIsDesiredRootCA: Adding 0xd4fbe673e5ccc600 C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert High Assurance EV Root CA
3f08.3b28: supR3HardenedWinIsDesiredRootCA: Adding 0xece4e4289e08b900 C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Root Certificate Authority 2010
3f08.3b28: supR3HardenedWinIsDesiredRootCA: Adding 0xb6ed0b73917cc342 CN=CORP\srv-build-cd
3f08.3b28: supR3HardenedWinIsDesiredRootCA: Adding 0xf3bb4d7e894b420 C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft ECC TS Root Certificate Authority 2018
3f08.3b28: supR3HardenedWinIsDesiredRootCA: Adding 0x43a9cc371ff5385a O=Microsoft Trust Network, OU=Microsoft Corporation, OU=Microsoft Time Stamping Service Root, OU=Copyright (c) 1997 Microsoft Corp.
3f08.3b28: supR3HardenedWinIsDesiredRootCA: Adding 0x2e2d2c7c68f0202e O=VeriSign Trust Network, OU=VeriSign, Inc., OU=VeriSign Time Stamping Service Root, OU=NO LIABILITY ACCEPTED, (c)97 VeriSign, Inc.
3f08.3b28: supR3HardenedWinIsDesiredRootCA: Adding 0xcec3d46562b9be8e C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft ECC Product Root Certificate Authority 2018
3f08.3b28: supR3HardenedWinIsDesiredRootCA: Adding 0xca58a05dd401ae00 C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Time Stamp Root Certificate Authority 2014
3f08.3b28: supR3HardenedWinIsDesiredRootCA: Adding 0xd8dbfb2c27bfb200 C=US, O=thawte, Inc., OU=Certification Services Division, OU=(c) 2008 thawte, Inc. - For authorized use only, CN=thawte Primary Root CA - G3
3f08.3b28: supR3HardenedWinIsDesiredRootCA: Adding 0x61a3a33f81aace00 C=US, ST=UT, L=Salt Lake City, O=The USERTRUST Network, OU=http://www.usertrust.com, CN=UTN-USERFirst-Object
3f08.3b28: supR3HardenedWinIsDesiredRootCA: Adding 0x50bb81640c01cb00 C=TW, O=TAIWAN-CA, OU=Root CA, CN=TWCA Root Certification Authority
3f08.3b28: supR3HardenedWinIsDesiredRootCA: Adding 0x6b7bdc34cd37bb00 C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root G2
3f08.3b28: supR3HardenedWinIsDesiredRootCA: Adding 0x57ba5395b561bf00 C=BM, O=QuoVadis Limited, OU=Root Certification Authority, CN=QuoVadis Root Certification Authority
3f08.3b28: supR3HardenedWinIsDesiredRootCA: Adding 0xf4fd306318ccda00 C=US, O=GeoTrust Inc., CN=GeoTrust Global CA
3f08.3b28: supR3HardenedWinIsDesiredRootCA: Adding 0x83085097e9afdf00 O=Digital Signature Trust Co., CN=DST Root CA X3
3f08.3b28: supR3HardenedWinIsDesiredRootCA: Adding 0x780679907625cc00 OU=GlobalSign Root CA - R3, O=GlobalSign, CN=GlobalSign
3f08.3b28: supR3HardenedWinIsDesiredRootCA: Adding 0x3d98ab22bb04a300 C=IE, O=Baltimore, OU=CyberTrust, CN=Baltimore CyberTrust Root
3f08.3b28: supR3HardenedWinIsDesiredRootCA: Adding 0xa0ee62086758b15d C=US, O=Equifax, OU=Equifax Secure Certificate Authority
3f08.3b28: supR3HardenedWinIsDesiredRootCA: Adding 0xeae16ef49d40be00 C=GB, ST=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services
3f08.3b28: supR3HardenedWinIsDesiredRootCA: Adding 0x9403a4b8727eb000 C=TW, O=TAIWAN-CA, OU=Root CA, CN=TWCA Root Certification Authority
3f08.3b28: supR3HardenedWinIsDesiredRootCA: Adding 0xd944bca189a00 C=BM, O=QuoVadis Limited, CN=QuoVadis Root CA 2
3f08.3b28: supR3HardenedWinIsDesiredRootCA: Adding 0x8ff6fc03c1edbd00 C=US, ST=Arizona, L=Scottsdale, O=Starfield Technologies, Inc., CN=Starfield Root Certificate Authority - G2
3f08.3b28: supR3HardenedWinIsDesiredRootCA: Adding 0xc6fa4243b695b600 C=US, O=Entrust, Inc., OU=www.entrust.net/CPS is incorporated by reference, OU=(c) 2006 Entrust, Inc., CN=Entrust Root Certification Authority
3f08.3b28: supR3HardenedWinIsDesiredRootCA: Adding 0xa3ce8d99e60eda00 C=BE, O=GlobalSign nv-sa, OU=Root CA, CN=GlobalSign Root CA
3f08.3b28: supR3HardenedWinIsDesiredRootCA: Adding 0x560ad29254e89100 C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO RSA Certification Authority
3f08.3b28: supR3HardenedWinIsDesiredRootCA: Adding 0xa671e9fec832b700 C=US, O=Starfield Technologies, Inc., OU=Starfield Class 2 Certification Authority
3f08.3b28: supR3HardenedWinIsDesiredRootCA: Adding 0xa8de7211e13be200 C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root CA
3f08.3b28: supR3HardenedWinIsDesiredRootCA: Adding 0x7ae89c50f0b6a00f C=US, O=GTE Corporation, OU=GTE CyberTrust Solutions, Inc., CN=GTE CyberTrust Global Root
3f08.3b28: supR3HardenedWinIsDesiredRootCA: Adding 0xd45980fbf0a0ac00 C=US, O=thawte, Inc., OU=Certification Services Division, OU=(c) 2006 thawte, Inc. - For authorized use only, CN=thawte Primary Root CA
3f08.3b28: supR3HardenedWinIsDesiredRootCA: Adding 0x4d3835aa4180b200 C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Root Certificate Authority 2011
3f08.3b28: supR3HardenedWinIsDesiredRootCA: Adding 0xc9edb72b684ba00 C=US, O=Entrust, Inc., OU=See www.entrust.net/legal-terms, OU=(c) 2009 Entrust, Inc. - for authorized use only, CN=Entrust Root Certification Authority - G2
3f08.3b28: supR3HardenedWinIsDesiredRootCA: Adding 0xf5cd95e581a4ab00 C=US, O=SecureTrust Corporation, CN=SecureTrust CA
3f08.3b28: supR3HardenedWinIsDesiredRootCA: Adding 0x6f2ebe0e24cfa600 OU=GlobalSign Root CA - R2, O=GlobalSign, CN=GlobalSign
3f08.3b28: supR3HardenedWinIsDesiredRootCA: Adding 0x14018a1bf29e595c C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification Authority
3f08.3b28: supR3HardenedWinIsDesiredRootCA: Adding 0x9e5bc2d78b6a3636 C=ZA, ST=Western Cape, L=Cape Town, O=Thawte Consulting cc, OU=Certification Services Division, CN=Thawte Premium Server CA, Email=premium-server@thawte.com
3f08.3b28: supR3HardenedWinIsDesiredRootCA: Adding 0x7c4fd32ec1b1ce00 C=PL, O=Unizeto Sp. z o.o., CN=Certum CA
3f08.3b28: supR3HardenedWinIsDesiredRootCA: Adding 0xd4fbe673e5ccc600 C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert High Assurance EV Root CA
3f08.3b28: supR3HardenedWinIsDesiredRootCA: Adding 0x16e64d2a56ccf200 C=US, ST=Arizona, L=Scottsdale, O=Starfield Technologies, Inc., OU=http://certificates.starfieldtech.com/repository/, CN=Starfield Services Root Certificate Authority
3f08.3b28: supR3HardenedWinIsDesiredRootCA: Adding 0x1b8578514b74ac00 C=US, O=WFA Hotspot 2.0, CN=Hotspot 2.0 Trust Root CA - 03
3f08.3b28: supR3HardenedWinIsDesiredRootCA: Adding 0xb28612a94b4dad00 O=Entrust.net, OU=www.entrust.net/CPS_2048 incorp. by ref. (limits liab.), OU=(c) 1999 Entrust.net Limited, CN=Entrust.net Certification Authority (2048)
3f08.3b28: supR3HardenedWinIsDesiredRootCA: Adding 0x357a29080824af00 C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. - For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority - G5
3f08.3b28: supR3HardenedWinIsDesiredRootCA: Adding 0x59faf1086271bf00 C=US, ST=Arizona, L=Scottsdale, O=GoDaddy.com, Inc., CN=Go Daddy Root Certificate Authority - G2
3f08.3b28: supR3HardenedWinIsDesiredRootCA: Adding 0x466cbc09db88c100 C=IL, O=StartCom Ltd., OU=Secure Digital Certificate Signing, CN=StartCom Certification Authority
3f08.3b28: supR3HardenedWinIsDesiredRootCA: Adding 0xb16dd37ffeb3b300 C=JP, O=SECOM Trust.net, OU=Security Communication RootCA1
3f08.3b28: supR3HardenedWinIsDesiredRootCA: Adding 0x3401b15e3761c700 C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2008 VeriSign, Inc. - For authorized use only, CN=VeriSign Universal Root Certification Authority
3f08.3b28: supR3HardenedWinIsDesiredRootCA: Adding 0x7cd4ff7b15b8be00 C=US, O=GeoTrust Inc., CN=GeoTrust Primary Certification Authority
3f08.3b28: supR3HardenedWinIsDesiredRootCA: Adding 0xc30e361765128000 C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority
3f08.3b28: supR3HardenedWinIsDesiredRootCA: Adding 0x491857ead79dde00 C=US, O=The Go Daddy Group, Inc., OU=Go Daddy Class 2 Certification Authority
3f08.3b28: supR3HardenedWinIsDesiredRootCA: Adding 0xab549401526569d3 L=Internet, O=VeriSign, Inc., OU=VeriSign Commercial Software Publishers CA
3f08.3b28: supR3HardenedWinIsDesiredRootCA: Adding 0x1f78fc529cbacb00 C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 1999 VeriSign, Inc. - For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority - G3
3f08.3b28: supR3HardenedWinIsDesiredRootCA: Adding 0xdc1801b225aea100 C=BM, O=QuoVadis Limited, CN=QuoVadis Root CA 2 G3
3f08.3b28: supR3HardenedWinIsDesiredRootCA: Adding 0xc2ba72a37dfbe300 C=PL, O=Unizeto Technologies S.A., OU=Certum Certification Authority, CN=Certum Trusted Network CA
3f08.3b28: supR3HardenedWinIsDesiredRootCA: Adding 0xcec3d46562b9be8e C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft ECC Product Root Certificate Authority 2018
3f08.3b28: supR3HardenedWinIsDesiredRootCA: Adding 0x8043e4ce150ead00 C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Assured ID Root CA
3f08.3b28: supR3HardenedWinIsDesiredRootCA: Adding 0x331d58625ee2dc00 C=US, O=GeoTrust Inc., OU=(c) 2008 GeoTrust Inc. - For authorized use only, CN=GeoTrust Primary Certification Authority - G3
3f08.3b28: supR3HardenedWinIsDesiredRootCA: Adding 0xf2e6331af7b700 C=SE, O=AddTrust AB, OU=AddTrust External TTP Network, CN=AddTrust External CA Root
3f08.3b28: supR3HardenedWinRetrieveTrustedRootCAs: cAdded=70
3f08.3b28: SUPR3HardenedMain: Load Runtime...
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdd0e0000 'C:\WINDOWS\system32\rsaenh.dll'
3f08.3b28: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp100.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'rpcrt4.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'ws2_32.dll'.
3f08.3b28: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll) WinVerifyTrust
3f08.3b28: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdd0e0000 'C:\WINDOWS\system32\rsaenh.dll'
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdece0000 'C:\WINDOWS\System32\crypt32.dll'
3f08.3b28: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #26 'rpcrt4.dll'.
3f08.3b28: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\ws2_32.dll) WinVerifyTrust
3f08.3b28: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\ws2_32.dll
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
3f08.3b28: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
3f08.3b28: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdd0e0000 'C:\WINDOWS\system32\rsaenh.dll'
3f08.3b28: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
3f08.3b28: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll) WinVerifyTrust
3f08.3b28: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
3f08.3b28: Detected WinVerifyTrust recursion: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'.
3f08.3b28: supHardenedWinVerifyImageByHandle: -> 24202 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll)
3f08.3b28: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdd0e0000 'C:\WINDOWS\system32\rsaenh.dll'
3f08.3b28: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll) WinVerifyTrust
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000a01:<flags> [calling]
3f08.3b28: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll
3f08.3b28: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll [avoiding WinVerifyTrust]
3f08.3b28: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll
3f08.3b28: supR3HardenedDllNotificationCallback: load 0000000053210000 LB 0x000d2000 C:\Program Files\Oracle\VirtualBox\MSVCR100.dll [fFlags=0x0]
3f08.3b28: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 24202 (0x5e8a)) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll [avoiding WinVerifyTrust]
3f08.3b28: supR3HardenedDllNotificationCallback: load 00000000532f0000 LB 0x00098000 C:\Program Files\Oracle\VirtualBox\MSVCP100.dll [fFlags=0x0]
3f08.3b28: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll
3f08.3b28: supR3HardenedDllNotificationCallback: load 00007fffe08f0000 LB 0x0006f000 C:\WINDOWS\System32\WS2_32.dll [fFlags=0x0]
3f08.3b28: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ws2_32.dll
3f08.3b28: supR3HardenedDllNotificationCallback: load 00007fffbfa20000 LB 0x005d6000 C:\Program Files\Oracle\VirtualBox\VBoxRT.dll [fFlags=0x0]
3f08.3b28: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll
3f08.3b28: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
3f08.3b28: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffbfa20000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
3f08.3b28: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
3f08.3b28: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
3f08.3b28: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffbfa20000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
3f08.3b28: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
3f08.3b28: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
3f08.3b28: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffbfa20000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
3f08.3b28: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
3f08.3b28: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
3f08.3b28: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffbfa20000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
3f08.3b28: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
3f08.3b28: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
3f08.3b28: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffbfa20000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
3f08.3b28: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
3f08.3b28: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
3f08.3b28: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffbfa20000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
3f08.3b28: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
3f08.3b28: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffbfa20000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
3f08.3b28: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
3f08.3b28: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffbfa20000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
3f08.3b28: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
3f08.3b28: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffbfa20000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
3f08.3b28: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
3f08.3b28: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffbfa20000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
3f08.3b28: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
3f08.3b28: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffbfa20000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
3f08.3b28: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
3f08.3b28: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffbfa20000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
3f08.3b28: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
3f08.3b28: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffbfa20000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
3f08.3b28: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
3f08.3b28: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
3f08.3b28: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffbfa20000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
3f08.3b28: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
3f08.3b28: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffbfa20000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
3f08.3b28: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
3f08.3b28: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffbfa20000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
3f08.3b28: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
3f08.3b28: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffbfa20000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
3f08.3b28: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
3f08.3b28: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffbfa20000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
3f08.3b28: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
3f08.3b28: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffbfa20000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
3f08.3b28: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
3f08.3b28: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffbfa20000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
3f08.3b28: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
3f08.3b28: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffbfa20000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
3f08.3b28: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
3f08.3b28: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffbfa20000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
3f08.3b28: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
3f08.3b28: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffbfa20000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
3f08.3b28: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
3f08.3b28: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffbfa20000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
3f08.3b28: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
3f08.3b28: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffbfa20000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
3f08.3b28: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
3f08.3b28: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffbfa20000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
3f08.3b28: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
3f08.3b28: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffbfa20000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
3f08.3b28: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
3f08.3b28: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffbfa20000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
3f08.3b28: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
3f08.3b28: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffbfa20000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
3f08.3b28: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
3f08.3b28: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
3f08.3b28: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffbfa20000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
3f08.3b28: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
3f08.3b28: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffbfa20000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
3f08.3b28: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
3f08.3b28: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffbfa20000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
3f08.3b28: Detected loader lock ownership: rc=Unknown Status 24202 (0x5e8a) '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheProcessWvtTodos: 24202 (was 24202) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rescheduled]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffbfa20000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdd0e0000 'C:\WINDOWS\system32\rsaenh.dll'
3f08.3b28: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 24202) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll'
3f08.3b28: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\wintrust.dll
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\Wintrust.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffde000000 'C:\WINDOWS\system32\Wintrust.dll'
3f08.3b28: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rsaenh.dll
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdd0e0000 'C:\WINDOWS\system32\rsaenh.dll'
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdece0000 'C:\WINDOWS\System32\crypt32.dll'
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdd0e0000 'C:\WINDOWS\system32\rsaenh.dll'
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdece0000 'C:\WINDOWS\System32\crypt32.dll'
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdece0000 'C:\WINDOWS\system32\crypt32.dll'
3f08.3b28: SUPR3HardenedMain: Load TrustedMain...
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdd0e0000 'C:\WINDOWS\system32\rsaenh.dll'
3f08.3b28: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'ole32.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'oleaut32.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'vboxrt.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'advapi32.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'rpcrt4.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'user32.dll'.
3f08.3b28: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxHeadless.dll) WinVerifyTrust
3f08.3b28: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxHeadless.dll
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdd0e0000 'C:\WINDOWS\system32\rsaenh.dll'
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdece0000 'C:\WINDOWS\System32\crypt32.dll'
3f08.3b28: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'win32u.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #34 'gdi32.dll'.
3f08.3b28: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\user32.dll) WinVerifyTrust
3f08.3b28: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\user32.dll
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
3f08.3b28: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume2\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
3f08.3b28: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\gdi32.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'win32u.dll'.
3f08.3b28: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\gdi32.dll)
3f08.3b28: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\gdi32.dll
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume2\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
3f08.3b28: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\win32u.dll'.
3f08.3b28: '\Device\HarddiskVolume2\Windows\System32\win32u.dll' has no imports
3f08.3b28: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\win32u.dll)
3f08.3b28: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\win32u.dll
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume2\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
3f08.3b28: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\win32u.dll [lacks WinVerifyTrust]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdd0e0000 'C:\WINDOWS\system32\rsaenh.dll'
3f08.3b28: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\crypt32.dll
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\crypt32.dll (Input=crypt32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdece0000 'C:\WINDOWS\System32\crypt32.dll'
3f08.3b28: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcp_win.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'combase.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #23 'rpcrt4.dll'.
3f08.3b28: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\oleaut32.dll) WinVerifyTrust
3f08.3b28: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\oleaut32.dll
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume2\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
3f08.3b28: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\combase.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'rpcrt4.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #45 'bcryptprimitives.dll'.
3f08.3b28: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\combase.dll)
3f08.3b28: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\combase.dll
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
3f08.3b28: Detected WinVerifyTrust recursion: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\msvcp_win.dll'.
3f08.3b28: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\msvcp_win.dll)
3f08.3b28: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\msvcp_win.dll
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcryptprimitives.dll'...
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcryptprimitives.dll' -> '\Device\HarddiskVolume2\Windows\System32\bcryptprimitives.dll' [rcNtRedir=0xc0150008]
3f08.3b28: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\bcryptprimitives.dll
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdd0e0000 'C:\WINDOWS\system32\rsaenh.dll'
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdece0000 'C:\WINDOWS\System32\crypt32.dll'
3f08.3b28: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #22 'rpcrt4.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #56 'gdi32.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #57 'user32.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #58 'combase.dll'.
3f08.3b28: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\ole32.dll) WinVerifyTrust
3f08.3b28: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\ole32.dll
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
3f08.3b28: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume2\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
3f08.3b28: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\combase.dll [redoing WinVerifyTrust]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdd0e0000 'C:\WINDOWS\system32\rsaenh.dll'
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdece0000 'C:\WINDOWS\System32\crypt32.dll'
3f08.3b28: supR3HardenedScreenImage/Imports: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\combase.dll'
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
3f08.3b28: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
3f08.3b28: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [redoing WinVerifyTrust]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdd0e0000 'C:\WINDOWS\system32\rsaenh.dll'
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdece0000 'C:\WINDOWS\System32\crypt32.dll'
3f08.3b28: supR3HardenedScreenImage/Imports: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\gdi32.dll'
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxHeadless.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000a01:<flags> [calling]
3f08.3b28: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxHeadless.dll
3f08.3b28: supR3HardenedDllNotificationCallback: load 00007fffe0b20000 LB 0x00336000 C:\WINDOWS\System32\combase.dll [fFlags=0x0]
3f08.3b28: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\combase.dll
3f08.3b28: supR3HardenedDllNotificationCallback: load 00007fffdde30000 LB 0x00021000 C:\WINDOWS\System32\win32u.dll [fFlags=0x0]
3f08.3b28: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\win32u.dll [avoiding WinVerifyTrust]
3f08.3b28: supR3HardenedDllNotificationCallback: load 00007fffdeeb0000 LB 0x0009e000 C:\WINDOWS\System32\msvcp_win.dll [fFlags=0x0]
3f08.3b28: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcp_win.dll [avoiding WinVerifyTrust]
3f08.3b28: supR3HardenedDllNotificationCallback: load 00007fffe0170000 LB 0x00194000 C:\WINDOWS\System32\USER32.dll [fFlags=0x0]
3f08.3b28: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll
3f08.3b28: supR3HardenedDllNotificationCallback: load 00007fffdde60000 LB 0x00194000 C:\WINDOWS\System32\gdi32full.dll [fFlags=0x0]
3f08.3b28: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcp_win.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #33 'gdi32.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #35 'user32.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #36 'win32u.dll'.
3f08.3b28: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\gdi32full.dll)
3f08.3b28: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\gdi32full.dll
3f08.3b28: supR3HardenedDllNotificationCallback: load 00007fffe07a0000 LB 0x00026000 C:\WINDOWS\System32\GDI32.dll [fFlags=0x0]
3f08.3b28: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll
3f08.3b28: supR3HardenedDllNotificationCallback: load 00007fffdef50000 LB 0x00157000 C:\WINDOWS\System32\ole32.dll [fFlags=0x0]
3f08.3b28: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ole32.dll
3f08.3b28: supR3HardenedDllNotificationCallback: load 00007fffdfc10000 LB 0x000c4000 C:\WINDOWS\System32\OLEAUT32.dll [fFlags=0x0]
3f08.3b28: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\oleaut32.dll
3f08.3b28: supR3HardenedDllNotificationCallback: load 00007fffbf250000 LB 0x00052000 C:\Program Files\Oracle\VirtualBox\VBoxHeadless.dll [fFlags=0x0]
3f08.3b28: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxHeadless.dll
3f08.3b28: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\gdi32full.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\gdi32full.dll' [rescheduled]
3f08.3b28: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\msvcp_win.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\msvcp_win.dll' [rescheduled]
3f08.3b28: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\win32u.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\win32u.dll' [rescheduled]
3f08.3b28: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\kernel32.dll
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume2\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
3f08.3b28: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\win32u.dll [redoing WinVerifyTrust]
3f08.3b28: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\win32u.dll'.
3f08.3b28: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume2\Windows\System32\win32u.dll
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
3f08.3b28: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
3f08.3b28: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
3f08.3b28: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcp_win.dll [redoing WinVerifyTrust]
3f08.3b28: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\msvcp_win.dll'.
3f08.3b28: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume2\Windows\System32\msvcp_win.dll
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\kernel32.dll (Input=kernel32, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdfed0000 'C:\WINDOWS\System32\kernel32.dll'
3f08.3b28: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\gdi32full.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\gdi32full.dll' [rescheduled]
3f08.3b28: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\msvcp_win.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\msvcp_win.dll' [rescheduled]
3f08.3b28: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\win32u.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\win32u.dll' [rescheduled]
3f08.3b28: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\gdi32full.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\gdi32full.dll' [rescheduled]
3f08.3b28: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\msvcp_win.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\msvcp_win.dll' [rescheduled]
3f08.3b28: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\win32u.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\win32u.dll' [rescheduled]
3f08.3b28: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-string-l1-1-0) -> 0x0, fPresent=1
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-string-l1-1-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffde160000 'api-ms-win-core-string-l1-1-0'
3f08.3b28: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\gdi32full.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\gdi32full.dll' [rescheduled]
3f08.3b28: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\msvcp_win.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\msvcp_win.dll' [rescheduled]
3f08.3b28: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\win32u.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\win32u.dll' [rescheduled]
3f08.3b28: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\gdi32full.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\gdi32full.dll' [rescheduled]
3f08.3b28: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\msvcp_win.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\msvcp_win.dll' [rescheduled]
3f08.3b28: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\win32u.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\win32u.dll' [rescheduled]
3f08.3b28: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-datetime-l1-1-1) -> 0x0, fPresent=1
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-datetime-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffde160000 'api-ms-win-core-datetime-l1-1-1'
3f08.3b28: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\gdi32full.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\gdi32full.dll' [rescheduled]
3f08.3b28: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\msvcp_win.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\msvcp_win.dll' [rescheduled]
3f08.3b28: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\win32u.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\win32u.dll' [rescheduled]
3f08.3b28: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\gdi32full.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\gdi32full.dll' [rescheduled]
3f08.3b28: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\msvcp_win.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\msvcp_win.dll' [rescheduled]
3f08.3b28: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\win32u.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\win32u.dll' [rescheduled]
3f08.3b28: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-localization-obsolete-l1-2-0) -> 0x0, fPresent=1
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-obsolete-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffde160000 'api-ms-win-core-localization-obsolete-l1-2-0'
3f08.3b28: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\gdi32full.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\gdi32full.dll' [rescheduled]
3f08.3b28: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\msvcp_win.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\msvcp_win.dll' [rescheduled]
3f08.3b28: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\win32u.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\win32u.dll' [rescheduled]
3f08.3b28: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\gdi32full.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\gdi32full.dll' [rescheduled]
3f08.3b28: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\msvcp_win.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\msvcp_win.dll' [rescheduled]
3f08.3b28: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\win32u.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\win32u.dll' [rescheduled]
3f08.3b28: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\imm32.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'user32.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #25 'win32u.dll'.
3f08.3b28: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\imm32.dll)
3f08.3b28: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\imm32.dll
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'win32u.dll'...
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: 'win32u.dll' -> '\Device\HarddiskVolume2\Windows\System32\win32u.dll' [rcNtRedir=0xc0150008]
3f08.3b28: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\win32u.dll [redoing WinVerifyTrust]
3f08.3b28: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\win32u.dll'.
3f08.3b28: supR3HardenedScreenImage/Imports: WinVerifyTrust not available, rescheduling \Device\HarddiskVolume2\Windows\System32\win32u.dll
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
3f08.3b28: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\IMM32.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
3f08.3b28: supR3HardenedDllNotificationCallback: load 00007fffdf180000 LB 0x0002e000 C:\WINDOWS\System32\IMM32.DLL [fFlags=0x0]
3f08.3b28: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\imm32.dll [avoiding WinVerifyTrust]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdf180000 'C:\WINDOWS\system32\IMM32.DLL'
3f08.3b28: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\imm32.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\imm32.dll' [rescheduled]
3f08.3b28: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\gdi32full.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\gdi32full.dll' [rescheduled]
3f08.3b28: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\msvcp_win.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\msvcp_win.dll' [rescheduled]
3f08.3b28: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\win32u.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\win32u.dll' [rescheduled]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffbf250000 'C:\Program Files\Oracle\VirtualBox\VBoxHeadless.dll'
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdd0e0000 'C:\WINDOWS\system32\rsaenh.dll'
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdece0000 'C:\WINDOWS\System32\crypt32.dll'
3f08.3b28: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\imm32.dll'
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdd0e0000 'C:\WINDOWS\system32\rsaenh.dll'
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdece0000 'C:\WINDOWS\System32\crypt32.dll'
3f08.3b28: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\gdi32full.dll'
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdd0e0000 'C:\WINDOWS\system32\rsaenh.dll'
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdece0000 'C:\WINDOWS\System32\crypt32.dll'
3f08.3b28: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\msvcp_win.dll'
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdd0e0000 'C:\WINDOWS\system32\rsaenh.dll'
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdece0000 'C:\WINDOWS\System32\crypt32.dll'
3f08.3b28: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\win32u.dll'
3f08.3b28: SUPR3HardenedMain: Calling TrustedMain (00007fffbf252ae0)...
3f08.3b28: supR3HardenedDllNotificationCallback: load 00007fffdde10000 LB 0x00011000 C:\WINDOWS\System32\kernel.appcore.dll [fFlags=0x0]
3f08.3b28: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'msvcrt.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'rpcrt4.dll'.
3f08.3b28: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\kernel.appcore.dll)
3f08.3b28: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\kernel.appcore.dll
3f08.3b28: supR3HardenedDllNotificationCallback: load 00007fffe0040000 LB 0x000a2000 C:\WINDOWS\System32\clbcatq.dll [fFlags=0x0]
3f08.3b28: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #30 'rpcrt4.dll'.
3f08.3b28: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\clbcatq.dll)
3f08.3b28: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\clbcatq.dll
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
3f08.3b28: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
3f08.3b28: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdd0e0000 'C:\WINDOWS\system32\rsaenh.dll'
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdece0000 'C:\WINDOWS\System32\crypt32.dll'
3f08.3b28: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\clbcatq.dll'
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdd0e0000 'C:\WINDOWS\system32\rsaenh.dll'
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdece0000 'C:\WINDOWS\System32\crypt32.dll'
3f08.3b28: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\kernel.appcore.dll'
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdd0e0000 'C:\WINDOWS\system32\rsaenh.dll'
3f08.3b28: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp100.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxrt.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'advapi32.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'ole32.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'oleaut32.dll'.
3f08.3b28: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxC.dll) WinVerifyTrust
3f08.3b28: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxC.dll
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume2\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
3f08.3b28: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\oleaut32.dll
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
3f08.3b28: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ole32.dll
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
3f08.3b28: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
3f08.3b28: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
3f08.3b28: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxC.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
3f08.3b28: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxC.dll
3f08.3b28: supR3HardenedDllNotificationCallback: load 00007fffbf580000 LB 0x003b0000 C:\Program Files\Oracle\VirtualBox\VBoxC.dll [fFlags=0x0]
3f08.3b28: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxC.dll
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffbf580000 'C:\Program Files\Oracle\VirtualBox\VBoxC.dll'
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdd0e0000 'C:\WINDOWS\system32\rsaenh.dll'
3f08.3b28: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'advapi32.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'shlwapi.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'ole32.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'oleaut32.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'rpcrt4.dll'.
3f08.3b28: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxProxyStub.dll) WinVerifyTrust
3f08.3b28: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxProxyStub.dll
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume2\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
3f08.3b28: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\oleaut32.dll
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
3f08.3b28: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ole32.dll
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shlwapi.dll'...
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: 'shlwapi.dll' -> '\Device\HarddiskVolume2\Windows\System32\shlwapi.dll' [rcNtRedir=0xc0150008]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdd0e0000 'C:\WINDOWS\system32\rsaenh.dll'
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdece0000 'C:\WINDOWS\System32\crypt32.dll'
3f08.3b28: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcrt.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #44 'gdi32.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #45 'user32.dll'.
3f08.3b28: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\shlwapi.dll) WinVerifyTrust
3f08.3b28: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\shlwapi.dll
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
3f08.3b28: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
3f08.3b28: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
3f08.3b28: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
3f08.3b28: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
3f08.3b28: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxProxyStub.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
3f08.3b28: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxProxyStub.dll
3f08.3b28: supR3HardenedDllNotificationCallback: load 00007fffdfce0000 LB 0x00052000 C:\WINDOWS\System32\SHLWAPI.dll [fFlags=0x0]
3f08.3b28: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\shlwapi.dll
3f08.3b28: supR3HardenedDllNotificationCallback: load 00007fffbf930000 LB 0x000ed000 C:\Program Files\Oracle\VirtualBox\VBoxProxyStub.dll [fFlags=0x0]
3f08.3b28: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxProxyStub.dll
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffbf930000 'C:\Program Files\Oracle\VirtualBox\VBoxProxyStub.dll'
3f08.3b28: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\oleaut32.dll
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\System32\oleaut32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdfc10000 'C:\Windows\System32\oleaut32.dll'
3f08.3b20: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdd0e0000 'C:\WINDOWS\system32\rsaenh.dll'
3f08.3b20: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdd0e0000 'C:\WINDOWS\system32\rsaenh.dll'
3f08.3b20: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdd0e0000 'C:\WINDOWS\system32\rsaenh.dll'
3f08.3b20: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
3f08.3b20: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
3f08.3b20: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxPuelMainVM.dll) WinVerifyTrust
3f08.3b20: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxPuelMainVM.dll
3f08.3b20: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
3f08.3b20: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
3f08.3b20: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
3f08.3b20: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
3f08.3b20: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll
3f08.3b20: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxPuelMainVM.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
3f08.3b20: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxPuelMainVM.dll
3f08.3b20: supR3HardenedDllNotificationCallback: load 00007fffda6b0000 LB 0x0000e000 C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxPuelMainVM.DLL [fFlags=0x0]
3f08.3b20: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxPuelMainVM.dll
3f08.3b20: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffda6b0000 'C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxPuelMainVM.DLL'
3f08.3b28: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ole32.dll
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\ole32.dll (Input=ole32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdef50000 'C:\WINDOWS\System32\ole32.dll'
3f08.3b28: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\oleaut32.dll
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\OLEAUT32.dll (Input=OLEAUT32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdfc10000 'C:\WINDOWS\System32\OLEAUT32.dll'
3f08.3b28: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000798 pwszName=\Device\HarddiskVolume2\Windows\System32\wbem\wbemprox.dll
3f08.3b28: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000000a32770
3f08.3b28: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000a32770
3f08.3b28: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=DB1AA7E2E4704C908EC9382E1F9E64808B9E5E1D
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdd0e0000 'C:\WINDOWS\system32\rsaenh.dll'
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdece0000 'C:\WINDOWS\System32\crypt32.dll'
3f08.3b28: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package03~31bf3856ad364e35~amd64~~10.0.18362.778.cat'; file='\Device\HarddiskVolume2\Windows\System32\wbem\wbemprox.dll'
3f08.3b28: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
3f08.3b28: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'ws2_32.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #18 'wbemcomn.dll'.
3f08.3b28: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\wbem\wbemprox.dll) WinVerifyTrust
3f08.3b28: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\wbem\wbemprox.dll
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'wbemcomn.dll'...
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: 'wbemcomn.dll' -> '\Device\HarddiskVolume2\Windows\System32\wbemcomn.dll' [rcNtRedir=0xc0150008]
3f08.3b28: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000404 pwszName=\Device\HarddiskVolume2\Windows\System32\wbemcomn.dll
3f08.3b28: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000000a32770
3f08.3b28: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000a32770
3f08.3b28: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=22EAF38FA276D7A374D3945ACD556FA0953D3440
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdd0e0000 'C:\WINDOWS\system32\rsaenh.dll'
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdece0000 'C:\WINDOWS\System32\crypt32.dll'
3f08.3b28: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package03~31bf3856ad364e35~amd64~~10.0.18362.778.cat'; file='\Device\HarddiskVolume2\Windows\System32\wbemcomn.dll'
3f08.3b28: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
3f08.3b28: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #14 'bcrypt.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #18 'ws2_32.dll'.
3f08.3b28: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\wbemcomn.dll) WinVerifyTrust
3f08.3b28: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\wbemcomn.dll
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
3f08.3b28: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ws2_32.dll
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
3f08.3b28: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
3f08.3b28: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ws2_32.dll
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcrypt.dll'...
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcrypt.dll' -> '\Device\HarddiskVolume2\Windows\System32\bcrypt.dll' [rcNtRedir=0xc0150008]
3f08.3b28: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\bcrypt.dll
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\wbem\wbemprox.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
3f08.3b28: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\wbem\wbemprox.dll
3f08.3b28: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\wbemcomn.dll
3f08.3b28: supR3HardenedDllNotificationCallback: load 00007fffd33d0000 LB 0x00084000 C:\WINDOWS\SYSTEM32\wbemcomn.dll [fFlags=0x0]
3f08.3b28: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\wbemcomn.dll
3f08.3b28: supR3HardenedDllNotificationCallback: load 00007fffd35d0000 LB 0x00011000 C:\WINDOWS\system32\wbem\wbemprox.dll [fFlags=0x0]
3f08.3b28: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\wbem\wbemprox.dll
3f08.3b28: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(API-MS-Win-Core-LocalRegistry-L1-1-0.dll) -> 0x0, fPresent=1
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: pName=API-MS-Win-Core-LocalRegistry-L1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffde160000 'API-MS-Win-Core-LocalRegistry-L1-1-0.dll'
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffd35d0000 'C:\WINDOWS\system32\wbem\wbemprox.dll'
3f08.3b28: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000000000007c8 pwszName=\Device\HarddiskVolume2\Windows\System32\wbem\wbemsvc.dll
3f08.3b28: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000000a32770
3f08.3b28: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000a32770
3f08.3b28: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=00C864D7F76A7AD25E7D0DA164B0B66188F5B7FF
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdd0e0000 'C:\WINDOWS\system32\rsaenh.dll'
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdece0000 'C:\WINDOWS\System32\crypt32.dll'
3f08.3b28: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package03~31bf3856ad364e35~amd64~~10.0.18362.778.cat'; file='\Device\HarddiskVolume2\Windows\System32\wbem\wbemsvc.dll'
3f08.3b28: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
3f08.3b28: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'rpcrt4.dll'.
3f08.3b28: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\wbem\wbemsvc.dll) WinVerifyTrust
3f08.3b28: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\wbem\wbemsvc.dll
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
3f08.3b28: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\wbem\wbemsvc.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
3f08.3b28: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\wbem\wbemsvc.dll
3f08.3b28: supR3HardenedDllNotificationCallback: load 00007fffd2730000 LB 0x00014000 C:\WINDOWS\system32\wbem\wbemsvc.dll [fFlags=0x0]
3f08.3b28: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\wbem\wbemsvc.dll
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffd2730000 'C:\WINDOWS\system32\wbem\wbemsvc.dll'
3f08.3b28: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-localization-l1-2-0.dll) -> 0x0, fPresent=1
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-l1-2-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffde160000 'api-ms-win-core-localization-l1-2-0.dll'
3f08.3b28: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-localization-obsolete-l1-1-0.dll) -> 0x0, fPresent=1
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-obsolete-l1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffde160000 'api-ms-win-core-localization-obsolete-l1-1-0.dll'
3f08.3b28: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000000000007d4 pwszName=\Device\HarddiskVolume2\Windows\System32\wbem\fastprox.dll
3f08.3b28: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000000a32770
3f08.3b28: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000a32770
3f08.3b28: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=0708A64F48237CD4D5092546CE9C373F20B30CA1
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdd0e0000 'C:\WINDOWS\system32\rsaenh.dll'
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdece0000 'C:\WINDOWS\System32\crypt32.dll'
3f08.3b28: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package03~31bf3856ad364e35~amd64~~10.0.18362.778.cat'; file='\Device\HarddiskVolume2\Windows\System32\wbem\fastprox.dll'
3f08.3b28: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
3f08.3b28: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #20 'wbemcomn.dll'.
3f08.3b28: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\wbem\fastprox.dll) WinVerifyTrust
3f08.3b28: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\wbem\fastprox.dll
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'wbemcomn.dll'...
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: 'wbemcomn.dll' -> '\Device\HarddiskVolume2\Windows\System32\wbemcomn.dll' [rcNtRedir=0xc0150008]
3f08.3b28: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\wbemcomn.dll
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\wbem\fastprox.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
3f08.3b28: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\wbem\fastprox.dll
3f08.3b28: supR3HardenedDllNotificationCallback: load 00007fffd2750000 LB 0x00101000 C:\WINDOWS\system32\wbem\fastprox.dll [fFlags=0x0]
3f08.3b28: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\wbem\fastprox.dll
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffd2750000 'C:\WINDOWS\system32\wbem\fastprox.dll'
3f08.3b28: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000000000007e8 pwszName=\Device\HarddiskVolume2\Windows\System32\amsi.dll
3f08.3b28: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000000a32770
3f08.3b28: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000a32770
3f08.3b28: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=B5D4D58A583ACAD5AA76D7DD0F2DB8ADE903942B
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdd0e0000 'C:\WINDOWS\system32\rsaenh.dll'
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdece0000 'C:\WINDOWS\System32\crypt32.dll'
3f08.3b28: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package04~31bf3856ad364e35~amd64~~10.0.18362.778.cat'; file='\Device\HarddiskVolume2\Windows\System32\amsi.dll'
3f08.3b28: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
3f08.3b28: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #14 'rpcrt4.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #16 'userenv.dll'.
3f08.3b28: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\amsi.dll) WinVerifyTrust
3f08.3b28: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\amsi.dll
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'userenv.dll'...
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: 'userenv.dll' -> '\Device\HarddiskVolume2\Windows\System32\userenv.dll' [rcNtRedir=0xc0150008]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdd0e0000 'C:\WINDOWS\system32\rsaenh.dll'
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdece0000 'C:\WINDOWS\System32\crypt32.dll'
3f08.3b28: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #13 'rpcrt4.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #30 'profapi.dll'.
3f08.3b28: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\userenv.dll) WinVerifyTrust
3f08.3b28: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\userenv.dll
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'profapi.dll'...
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: 'profapi.dll' -> '\Device\HarddiskVolume2\Windows\System32\profapi.dll' [rcNtRedir=0xc0150008]
3f08.3b28: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\profapi.dll
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\amsi.dll (Input=amsi.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
3f08.3b28: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\amsi.dll
3f08.3b28: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\userenv.dll
3f08.3b28: supR3HardenedDllNotificationCallback: load 00007fffddc80000 LB 0x00025000 C:\WINDOWS\SYSTEM32\USERENV.dll [fFlags=0x0]
3f08.3b28: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\userenv.dll
3f08.3b28: supR3HardenedDllNotificationCallback: load 00007fffd23c0000 LB 0x00015000 C:\WINDOWS\System32\amsi.dll [fFlags=0x0]
3f08.3b28: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\amsi.dll
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffd23c0000 'C:\WINDOWS\System32\amsi.dll'
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdd0e0000 'C:\WINDOWS\system32\rsaenh.dll'
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdece0000 'C:\WINDOWS\System32\crypt32.dll'
3f08.3b28: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'advapi32.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'ole32.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'oleaut32.dll'.
3f08.3b28: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\ProgramData\Microsoft\Windows Defender\Platform\4.18.2004.6-0\MpOAV.dll) WinVerifyTrust
3f08.3b28: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\ProgramData\Microsoft\Windows Defender\Platform\4.18.2004.6-0\MpOAV.dll
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume2\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
3f08.3b28: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\oleaut32.dll
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
3f08.3b28: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ole32.dll
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
3f08.3b28: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: pName=C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2004.6-0\MpOav.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
3f08.3b28: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\ProgramData\Microsoft\Windows Defender\Platform\4.18.2004.6-0\MpOAV.dll
3f08.3b28: supR3HardenedDllNotificationCallback: load 00007fffd2370000 LB 0x00046000 C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2004.6-0\MpOav.dll [fFlags=0x0]
3f08.3b28: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\ProgramData\Microsoft\Windows Defender\Platform\4.18.2004.6-0\MpOAV.dll
3f08.3b28: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-synch-l1-2-0) -> 0x0, fPresent=1
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-synch-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffde160000 'api-ms-win-core-synch-l1-2-0'
3f08.3b28: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-fibers-l1-1-1) -> 0x0, fPresent=1
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-fibers-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffde160000 'api-ms-win-core-fibers-l1-1-1'
3f08.3b28: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-synch-l1-2-0) -> 0x0, fPresent=1
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-synch-l1-2-0 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffde160000 'api-ms-win-core-synch-l1-2-0'
3f08.3b28: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-fibers-l1-1-1) -> 0x0, fPresent=1
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-fibers-l1-1-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffde160000 'api-ms-win-core-fibers-l1-1-1'
3f08.3b28: supR3HardenedIsApiSetDll: ApiSetQueryApiSetPresence(api-ms-win-core-localization-l1-2-1) -> 0x0, fPresent=1
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: pName=api-ms-win-core-localization-l1-2-1 (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffde160000 'api-ms-win-core-localization-l1-2-1'
3f08.3b28: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\version.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
3f08.3b28: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\version.dll)
3f08.3b28: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\version.dll
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
3f08.3b28: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\version.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000009:<flags> [calling]
3f08.3b28: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\version.dll [avoiding WinVerifyTrust]
3f08.3b28: supR3HardenedDllNotificationCallback: load 00007fffd8460000 LB 0x0000a000 C:\WINDOWS\system32\version.dll [fFlags=0x0]
3f08.3b28: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\version.dll [avoiding WinVerifyTrust]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffd8460000 'C:\WINDOWS\system32\version.dll'
3f08.3b28: Detected loader lock ownership: rc=VINF_SUCCESS '\Device\HarddiskVolume2\Windows\System32\version.dll'.
3f08.3b28: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\System32\version.dll' [rescheduled]
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffd2370000 'C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2004.6-0\MpOav.dll'
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdd0e0000 'C:\WINDOWS\system32\rsaenh.dll'
3f08.3b28: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdece0000 'C:\WINDOWS\System32\crypt32.dll'
3f08.3b28: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\version.dll'
3f08.3b30: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdd0e0000 'C:\WINDOWS\system32\rsaenh.dll'
3f08.3b30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
3f08.3b30: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
3f08.3b30: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxVMM.dll) WinVerifyTrust
3f08.3b30: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxVMM.dll
3f08.3b30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
3f08.3b30: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
3f08.3b30: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
3f08.3b30: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
3f08.3b30: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll
3f08.3b30: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxVMM.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
3f08.3b30: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxVMM.dll
3f08.3b30: supR3HardenedDllNotificationCallback: load 00007fff91ed0000 LB 0x0037d000 C:\Program Files\Oracle\VirtualBox\VBoxVMM.DLL [fFlags=0x0]
3f08.3b30: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxVMM.dll
3f08.3b30: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff91ed0000 'C:\Program Files\Oracle\VirtualBox\VBoxVMM.DLL'
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdd0e0000 'C:\WINDOWS\system32\rsaenh.dll'
3f08.3efc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdd0e0000 'C:\WINDOWS\system32\rsaenh.dll'
3f08.3efc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
3f08.3efc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp100.dll'.
3f08.3efc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxvmm.dll'.
3f08.3efc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'vboxrt.dll'.
3f08.3efc: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'user32.dll'.
3f08.3efc: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxSharedClipboard.dll) WinVerifyTrust
3f08.3efc: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxSharedClipboard.dll
3f08.3efc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
3f08.3efc: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
3f08.3efc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll
3f08.3efc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
3f08.3efc: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
3f08.3efc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxvmm.dll'...
3f08.3efc: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxvmm.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\vboxvmm.dll' [rcNtRedir=0xc0150008]
3f08.3efc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxVMM.dll
3f08.3efc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
3f08.3efc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
3f08.3efc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll
3f08.3efc: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
3f08.3efc: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
3f08.3efc: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll
3f08.3efc: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxSharedClipboard.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
3f08.3efc: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxSharedClipboard.dll
3f08.3efc: supR3HardenedDllNotificationCallback: load 00007fffda6a0000 LB 0x0000f000 C:\Program Files\Oracle\VirtualBox\VBoxSharedClipboard.DLL [fFlags=0x0]
3f08.3efc: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxSharedClipboard.dll
3f08.3efc: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffda6a0000 'C:\Program Files\Oracle\VirtualBox\VBoxSharedClipboard.DLL'
3f08.3bc0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdd0e0000 'C:\WINDOWS\system32\rsaenh.dll'
3f08.3bc0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
3f08.3bc0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp100.dll'.
3f08.3bc0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxrt.dll'.
3f08.3bc0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxDragAndDropSvc.dll) WinVerifyTrust
3f08.3bc0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxDragAndDropSvc.dll
3f08.3bc0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
3f08.3bc0: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
3f08.3bc0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
3f08.3bc0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
3f08.3bc0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll
3f08.3bc0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
3f08.3bc0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
3f08.3bc0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxDragAndDropSvc.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
3f08.3bc0: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxDragAndDropSvc.dll
3f08.3bc0: supR3HardenedDllNotificationCallback: load 00007fffda690000 LB 0x0000d000 C:\Program Files\Oracle\VirtualBox\VBoxDragAndDropSvc.DLL [fFlags=0x0]
3f08.3bc0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxDragAndDropSvc.dll
3f08.3bc0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffda690000 'C:\Program Files\Oracle\VirtualBox\VBoxDragAndDropSvc.DLL'
3f08.3f14: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rsaenh.dll
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdd0e0000 'C:\WINDOWS\system32\rsaenh.dll'
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdece0000 'C:\WINDOWS\System32\crypt32.dll'
3f08.3f14: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #77 'user32.dll'.
3f08.3f14: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #79 'gdi32.dll'.
3f08.3f14: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\shell32.dll) WinVerifyTrust
3f08.3f14: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\shell32.dll
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
3f08.3f14: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
3f08.3f14: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\Shell32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
3f08.3f14: supR3HardenedDllNotificationCallback: load 00007fffdec90000 LB 0x0004a000 C:\WINDOWS\System32\cfgmgr32.dll [fFlags=0x0]
3f08.3f14: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\cfgmgr32.dll)
3f08.3f14: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\cfgmgr32.dll
3f08.3f14: supR3HardenedDllNotificationCallback: load 00007fffdfdb0000 LB 0x000a9000 C:\WINDOWS\System32\shcore.dll [fFlags=0x0]
3f08.3f14: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
3f08.3f14: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #36 'rpcrt4.dll'.
3f08.3f14: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #43 'combase.dll'.
3f08.3f14: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\SHCore.dll)
3f08.3f14: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\SHCore.dll
3f08.3f14: supR3HardenedDllNotificationCallback: load 00007fffddd60000 LB 0x00010000 C:\WINDOWS\System32\UMPDC.dll [fFlags=0x0]
3f08.3f14: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\umpdc.dll)
3f08.3f14: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\umpdc.dll
3f08.3f14: supR3HardenedDllNotificationCallback: load 00007fffddd70000 LB 0x0004a000 C:\WINDOWS\System32\powrprof.dll [fFlags=0x0]
3f08.3f14: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'rpcrt4.dll'.
3f08.3f14: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #19 'umpdc.dll'.
3f08.3f14: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\powrprof.dll)
3f08.3f14: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\powrprof.dll
3f08.3f14: supR3HardenedDllNotificationCallback: load 00007fffde510000 LB 0x0077e000 C:\WINDOWS\System32\windows.storage.dll [fFlags=0x0]
3f08.3f14: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #31 'combase.dll'.
3f08.3f14: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #32 'msvcp_win.dll'.
3f08.3f14: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #39 'rpcrt4.dll'.
3f08.3f14: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #56 'profapi.dll'.
3f08.3f14: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\windows.storage.dll)
3f08.3f14: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\windows.storage.dll
3f08.3f14: supR3HardenedDllNotificationCallback: load 00007fffdf2d0000 LB 0x006e4000 C:\WINDOWS\System32\Shell32.dll [fFlags=0x0]
3f08.3f14: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\shell32.dll
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdf2d0000 'C:\WINDOWS\system32\Shell32.dll'
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'profapi.dll'...
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: 'profapi.dll' -> '\Device\HarddiskVolume2\Windows\System32\profapi.dll' [rcNtRedir=0xc0150008]
3f08.3f14: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\profapi.dll
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
3f08.3f14: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcp_win.dll
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume2\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
3f08.3f14: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\combase.dll
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'umpdc.dll'...
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: 'umpdc.dll' -> '\Device\HarddiskVolume2\Windows\System32\umpdc.dll' [rcNtRedir=0xc0150008]
3f08.3f14: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\umpdc.dll [lacks WinVerifyTrust]
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume2\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
3f08.3f14: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\combase.dll
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdd0e0000 'C:\WINDOWS\system32\rsaenh.dll'
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdece0000 'C:\WINDOWS\System32\crypt32.dll'
3f08.3f14: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\windows.storage.dll'
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdd0e0000 'C:\WINDOWS\system32\rsaenh.dll'
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdece0000 'C:\WINDOWS\System32\crypt32.dll'
3f08.3f14: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\powrprof.dll'
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdd0e0000 'C:\WINDOWS\system32\rsaenh.dll'
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdece0000 'C:\WINDOWS\System32\crypt32.dll'
3f08.3f14: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\umpdc.dll'
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdd0e0000 'C:\WINDOWS\system32\rsaenh.dll'
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdece0000 'C:\WINDOWS\System32\crypt32.dll'
3f08.3f14: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\SHCore.dll'
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdd0e0000 'C:\WINDOWS\system32\rsaenh.dll'
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdece0000 'C:\WINDOWS\System32\crypt32.dll'
3f08.3f14: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\cfgmgr32.dll'
3f08.3f14: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxVMM.dll
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxVMM.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff91ed0000 'C:\Program Files\Oracle\VirtualBox\VBoxVMM.DLL'
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdd0e0000 'C:\WINDOWS\system32\rsaenh.dll'
3f08.3f14: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
3f08.3f14: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
3f08.3f14: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
3f08.3f14: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'ole32.dll'.
3f08.3f14: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'oleaut32.dll'.
3f08.3f14: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.dll) WinVerifyTrust
3f08.3f14: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.dll
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume2\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
3f08.3f14: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\oleaut32.dll
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
3f08.3f14: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ole32.dll
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
3f08.3f14: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\user32.dll
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
3f08.3f14: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.dll
3f08.3f14: supR3HardenedDllNotificationCallback: load 00007fffbf200000 LB 0x00041000 C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.DLL [fFlags=0x0]
3f08.3f14: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.dll
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffbf200000 'C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.DLL'
3f08.3f14: supR3HardenedDllNotificationCallback: Unload 00007fffbf200000 LB 0x00041000 C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.DLL [flags=0x0]
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdd0e0000 'C:\WINDOWS\system32\rsaenh.dll'
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdd0e0000 'C:\WINDOWS\system32\rsaenh.dll'
3f08.3f14: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
3f08.3f14: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxvmm.dll'.
3f08.3f14: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxrt.dll'.
3f08.3f14: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'vboxddu.dll'.
3f08.3f14: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'vboxdd2.dll'.
3f08.3f14: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'user32.dll'.
3f08.3f14: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'setupapi.dll'.
3f08.3f14: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'ws2_32.dll'.
3f08.3f14: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'ole32.dll'.
3f08.3f14: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'iphlpapi.dll'.
3f08.3f14: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxDD.dll) WinVerifyTrust
3f08.3f14: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxDD.dll
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'iphlpapi.dll'...
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: 'iphlpapi.dll' -> '\Device\HarddiskVolume2\Windows\System32\iphlpapi.dll' [rcNtRedir=0xc0150008]
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdd0e0000 'C:\WINDOWS\system32\rsaenh.dll'
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdece0000 'C:\WINDOWS\System32\crypt32.dll'
3f08.3f14: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\IPHLPAPI.DLL) WinVerifyTrust
3f08.3f14: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\IPHLPAPI.DLL
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
3f08.3f14: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ole32.dll
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
3f08.3f14: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ws2_32.dll
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'setupapi.dll'...
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: 'setupapi.dll' -> '\Device\HarddiskVolume2\Windows\System32\setupapi.dll' [rcNtRedir=0xc0150008]
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdd0e0000 'C:\WINDOWS\system32\rsaenh.dll'
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdece0000 'C:\WINDOWS\System32\crypt32.dll'
3f08.3f14: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
3f08.3f14: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #29 'rpcrt4.dll'.
3f08.3f14: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #36 'cfgmgr32.dll'.
3f08.3f14: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #41 'bcrypt.dll'.
3f08.3f14: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\setupapi.dll) WinVerifyTrust
3f08.3f14: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\setupapi.dll
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxdd2.dll'...
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxdd2.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\vboxdd2.dll' [rcNtRedir=0xc0150008]
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcrypt.dll'...
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcrypt.dll' -> '\Device\HarddiskVolume2\Windows\System32\bcrypt.dll' [rcNtRedir=0xc0150008]
3f08.3f14: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\bcrypt.dll
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'cfgmgr32.dll'...
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: 'cfgmgr32.dll' -> '\Device\HarddiskVolume2\Windows\System32\cfgmgr32.dll' [rcNtRedir=0xc0150008]
3f08.3f14: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\cfgmgr32.dll
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdd0e0000 'C:\WINDOWS\system32\rsaenh.dll'
3f08.3f14: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
3f08.3f14: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
3f08.3f14: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxDD2.dll) WinVerifyTrust
3f08.3f14: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxDD2.dll
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxddu.dll'...
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxddu.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\vboxddu.dll' [rcNtRedir=0xc0150008]
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdd0e0000 'C:\WINDOWS\system32\rsaenh.dll'
3f08.3f14: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
3f08.3f14: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
3f08.3f14: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
3f08.3f14: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'setupapi.dll'.
3f08.3f14: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'advapi32.dll'.
3f08.3f14: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxDDU.dll) WinVerifyTrust
3f08.3f14: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxDDU.dll
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxvmm.dll'...
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxvmm.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\vboxvmm.dll' [rcNtRedir=0xc0150008]
3f08.3f14: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxVMM.dll
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
3f08.3f14: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'setupapi.dll'...
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: 'setupapi.dll' -> '\Device\HarddiskVolume2\Windows\System32\setupapi.dll' [rcNtRedir=0xc0150008]
3f08.3f14: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\setupapi.dll
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxDD.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
3f08.3f14: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxDD.dll
3f08.3f14: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxDDU.dll
3f08.3f14: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxDD2.dll
3f08.3f14: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\IPHLPAPI.DLL
3f08.3f14: supR3HardenedDllNotificationCallback: load 00007fffe0310000 LB 0x00470000 C:\WINDOWS\System32\SETUPAPI.dll [fFlags=0x0]
3f08.3f14: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\setupapi.dll
3f08.3f14: supR3HardenedDllNotificationCallback: load 00007fffda5e0000 LB 0x00066000 C:\Program Files\Oracle\VirtualBox\VBoxDDU.dll [fFlags=0x0]
3f08.3f14: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxDDU.dll
3f08.3f14: supR3HardenedDllNotificationCallback: load 00007fff84910000 LB 0x0085c000 C:\Program Files\Oracle\VirtualBox\VBoxDD2.dll [fFlags=0x0]
3f08.3f14: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxDD2.dll
3f08.3f14: supR3HardenedDllNotificationCallback: load 00007fffdd280000 LB 0x0003a000 C:\WINDOWS\SYSTEM32\IPHLPAPI.DLL [fFlags=0x0]
3f08.3f14: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\IPHLPAPI.DLL
3f08.3f14: supR3HardenedDllNotificationCallback: load 00007fff85170000 LB 0x009e6000 C:\Program Files\Oracle\VirtualBox\VBoxDD.DLL [fFlags=0x0]
3f08.3f14: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxDD.dll
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff85170000 'C:\Program Files\Oracle\VirtualBox\VBoxDD.DLL'
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdd0e0000 'C:\WINDOWS\system32\rsaenh.dll'
3f08.3f14: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.dll
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
3f08.3f14: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.dll
3f08.3f14: supR3HardenedDllNotificationCallback: load 00007fffbf200000 LB 0x00041000 C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.DLL [fFlags=0x0]
3f08.3f14: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.dll
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffbf200000 'C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxHostWebcam.DLL'
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdd0e0000 'C:\WINDOWS\system32\rsaenh.dll'
3f08.3f14: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxC.dll
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxC.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffbf580000 'C:\Program Files\Oracle\VirtualBox\VBoxC.DLL'
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdd0e0000 'C:\WINDOWS\system32\rsaenh.dll'
3f08.3f14: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxDD2.dll
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxDD2.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff84910000 'C:\Program Files\Oracle\VirtualBox\VBoxDD2.DLL'
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdd0e0000 'C:\WINDOWS\system32\rsaenh.dll'
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdd0e0000 'C:\WINDOWS\system32\rsaenh.dll'
3f08.3f14: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
3f08.3f14: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
3f08.3f14: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxEhciR3.dll) WinVerifyTrust
3f08.3f14: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxEhciR3.dll
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxEhciR3.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
3f08.3f14: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxEhciR3.dll
3f08.3f14: supR3HardenedDllNotificationCallback: load 00007fffda670000 LB 0x00018000 C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxEhciR3.DLL [fFlags=0x0]
3f08.3f14: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxEhciR3.dll
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffda670000 'C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxEhciR3.DLL'
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdd0e0000 'C:\WINDOWS\system32\rsaenh.dll'
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdd0e0000 'C:\WINDOWS\system32\rsaenh.dll'
3f08.3f14: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
3f08.3f14: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
3f08.3f14: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxNvmeR3.dll) WinVerifyTrust
3f08.3f14: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxNvmeR3.dll
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxNvmeR3.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
3f08.3f14: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxNvmeR3.dll
3f08.3f14: supR3HardenedDllNotificationCallback: load 00007fffda5c0000 LB 0x00012000 C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxNvmeR3.DLL [fFlags=0x0]
3f08.3f14: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxNvmeR3.dll
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffda5c0000 'C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxNvmeR3.DLL'
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdd0e0000 'C:\WINDOWS\system32\rsaenh.dll'
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdd0e0000 'C:\WINDOWS\system32\rsaenh.dll'
3f08.3f14: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
3f08.3f14: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
3f08.3f14: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbCardReaderR3.dll) WinVerifyTrust
3f08.3f14: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbCardReaderR3.dll
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
3f08.3f14: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbCardReaderR3.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
3f08.3f14: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbCardReaderR3.dll
3f08.3f14: supR3HardenedDllNotificationCallback: load 00007fffda1e0000 LB 0x00018000 C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbCardReaderR3.DLL [fFlags=0x0]
3f08.3f14: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbCardReaderR3.dll
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffda1e0000 'C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbCardReaderR3.DLL'
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdd0e0000 'C:\WINDOWS\system32\rsaenh.dll'
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdd0e0000 'C:\WINDOWS\system32\rsaenh.dll'
3f08.3f14: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
3f08.3f14: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
3f08.3f14: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbWebcamR3.dll) WinVerifyTrust
3f08.3f14: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbWebcamR3.dll
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbWebcamR3.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
3f08.3f14: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbWebcamR3.dll
3f08.3f14: supR3HardenedDllNotificationCallback: load 00007fffbf1e0000 LB 0x00019000 C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbWebcamR3.DLL [fFlags=0x0]
3f08.3f14: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbWebcamR3.dll
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffbf1e0000 'C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VBoxUsbWebcamR3.DLL'
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdd0e0000 'C:\WINDOWS\system32\rsaenh.dll'
3f08.3bb4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdd0e0000 'C:\WINDOWS\system32\rsaenh.dll'
3f08.3bb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
3f08.3bb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxvmm.dll'.
3f08.3bb4: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxrt.dll'.
3f08.3bb4: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxSharedFolders.dll) WinVerifyTrust
3f08.3bb4: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxSharedFolders.dll
3f08.3bb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
3f08.3bb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
3f08.3bb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxvmm.dll'...
3f08.3bb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxvmm.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\vboxvmm.dll' [rcNtRedir=0xc0150008]
3f08.3bb4: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxVMM.dll
3f08.3bb4: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
3f08.3bb4: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
3f08.3bb4: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxSharedFolders.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
3f08.3bb4: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxSharedFolders.dll
3f08.3bb4: supR3HardenedDllNotificationCallback: load 00007fffae8b0000 LB 0x00014000 C:\Program Files\Oracle\VirtualBox\VBoxSharedFolders.DLL [fFlags=0x0]
3f08.3bb4: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxSharedFolders.dll
3f08.3bb4: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffae8b0000 'C:\Program Files\Oracle\VirtualBox\VBoxSharedFolders.DLL'
3f08.3bb0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdd0e0000 'C:\WINDOWS\system32\rsaenh.dll'
3f08.3bb0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
3f08.3bb0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp100.dll'.
3f08.3bb0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxvmm.dll'.
3f08.3bb0: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'vboxrt.dll'.
3f08.3bb0: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxGuestControlSvc.dll) WinVerifyTrust
3f08.3bb0: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxGuestControlSvc.dll
3f08.3bb0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
3f08.3bb0: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
3f08.3bb0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxvmm.dll'...
3f08.3bb0: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxvmm.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\vboxvmm.dll' [rcNtRedir=0xc0150008]
3f08.3bb0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxVMM.dll
3f08.3bb0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
3f08.3bb0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
3f08.3bb0: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll
3f08.3bb0: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
3f08.3bb0: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
3f08.3bb0: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxGuestControlSvc.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
3f08.3bb0: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxGuestControlSvc.dll
3f08.3bb0: supR3HardenedDllNotificationCallback: load 00007fffda5b0000 LB 0x0000c000 C:\Program Files\Oracle\VirtualBox\VBoxGuestControlSvc.DLL [fFlags=0x0]
3f08.3bb0: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxGuestControlSvc.dll
3f08.3bb0: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffda5b0000 'C:\Program Files\Oracle\VirtualBox\VBoxGuestControlSvc.DLL'
3f08.3bb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdd0e0000 'C:\WINDOWS\system32\rsaenh.dll'
3f08.3bb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
3f08.3bb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp100.dll'.
3f08.3bb8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'vboxrt.dll'.
3f08.3bb8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxGuestPropSvc.dll) WinVerifyTrust
3f08.3bb8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxGuestPropSvc.dll
3f08.3bb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
3f08.3bb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
3f08.3bb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
3f08.3bb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
3f08.3bb8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll
3f08.3bb8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
3f08.3bb8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
3f08.3bb8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxGuestPropSvc.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
3f08.3bb8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxGuestPropSvc.dll
3f08.3bb8: supR3HardenedDllNotificationCallback: load 00007fffda1d0000 LB 0x0000d000 C:\Program Files\Oracle\VirtualBox\VBoxGuestPropSvc.DLL [fFlags=0x0]
3f08.3bb8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxGuestPropSvc.dll
3f08.3bb8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffda1d0000 'C:\Program Files\Oracle\VirtualBox\VBoxGuestPropSvc.DLL'
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdd0e0000 'C:\WINDOWS\system32\rsaenh.dll'
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdd0e0000 'C:\WINDOWS\system32\rsaenh.dll'
3f08.3f14: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
3f08.3f14: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
3f08.3f14: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VDPluginCrypt.dll) WinVerifyTrust
3f08.3f14: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VDPluginCrypt.dll
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VDPluginCrypt.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
3f08.3f14: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VDPluginCrypt.dll
3f08.3f14: supR3HardenedDllNotificationCallback: load 00007fffda6e0000 LB 0x0000a000 C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VDPluginCrypt.DLL [fFlags=0x0]
3f08.3f14: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VDPluginCrypt.dll
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffda6e0000 'C:\Program Files\Oracle\VirtualBox\ExtensionPacks\Oracle_VM_VirtualBox_Extension_Pack\win.amd64\VDPluginCrypt.DLL'
3f08.3f14: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\IPHLPAPI.DLL
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\Iphlpapi.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdd280000 'C:\WINDOWS\system32\Iphlpapi.dll'
3f08.3f14: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'rpcrt4.dll'.
3f08.3f14: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'nsi.dll'.
3f08.3f14: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\winnsi.dll)
3f08.3f14: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\winnsi.dll
3f08.3f14: supR3HardenedDllNotificationCallback: load 00007fffe0030000 LB 0x00008000 C:\WINDOWS\System32\NSI.dll [fFlags=0x0]
3f08.3f14: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\nsi.dll)
3f08.3f14: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\nsi.dll
3f08.3f14: supR3HardenedDllNotificationCallback: load 00007fffd0da0000 LB 0x0000b000 C:\WINDOWS\SYSTEM32\WINNSI.DLL [fFlags=0x0]
3f08.3f14: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\winnsi.dll [avoiding WinVerifyTrust]
3f08.3f14: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'rpcrt4.dll'.
3f08.3f14: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\dhcpcsvc6.dll)
3f08.3f14: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\dhcpcsvc6.dll
3f08.3f14: supR3HardenedDllNotificationCallback: load 00007fffcf750000 LB 0x00016000 C:\WINDOWS\SYSTEM32\dhcpcsvc6.DLL [fFlags=0x0]
3f08.3f14: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\dhcpcsvc6.dll [avoiding WinVerifyTrust]
3f08.3f14: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'rpcrt4.dll'.
3f08.3f14: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'ws2_32.dll'.
3f08.3f14: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'nsi.dll'.
3f08.3f14: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\dhcpcsvc.dll)
3f08.3f14: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\dhcpcsvc.dll
3f08.3f14: supR3HardenedDllNotificationCallback: load 00007fffcf680000 LB 0x0001c000 C:\WINDOWS\SYSTEM32\dhcpcsvc.DLL [fFlags=0x0]
3f08.3f14: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\dhcpcsvc.dll [avoiding WinVerifyTrust]
3f08.3f14: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #21 'ws2_32.dll'.
3f08.3f14: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #23 'nsi.dll'.
3f08.3f14: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\dnsapi.dll)
3f08.3f14: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\dnsapi.dll
3f08.3f14: supR3HardenedDllNotificationCallback: load 00007fffdd2c0000 LB 0x000cb000 C:\WINDOWS\SYSTEM32\DNSAPI.dll [fFlags=0x0]
3f08.3f14: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\dnsapi.dll [avoiding WinVerifyTrust]
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'nsi.dll'...
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: 'nsi.dll' -> '\Device\HarddiskVolume2\Windows\System32\nsi.dll' [rcNtRedir=0xc0150008]
3f08.3f14: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\nsi.dll [lacks WinVerifyTrust]
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
3f08.3f14: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ws2_32.dll
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'nsi.dll'...
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: 'nsi.dll' -> '\Device\HarddiskVolume2\Windows\System32\nsi.dll' [rcNtRedir=0xc0150008]
3f08.3f14: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\nsi.dll [lacks WinVerifyTrust]
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
3f08.3f14: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ws2_32.dll
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'nsi.dll'...
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: 'nsi.dll' -> '\Device\HarddiskVolume2\Windows\System32\nsi.dll' [rcNtRedir=0xc0150008]
3f08.3f14: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\nsi.dll [lacks WinVerifyTrust]
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdd0e0000 'C:\WINDOWS\system32\rsaenh.dll'
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdece0000 'C:\WINDOWS\System32\crypt32.dll'
3f08.3f14: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\dnsapi.dll'
3f08.3f14: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000c64 pwszName=\Device\HarddiskVolume2\Windows\System32\dhcpcsvc.dll
3f08.3f14: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000000a32770
3f08.3f14: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000a32770
3f08.3f14: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=4046160B2B0DC0559D0AE96A25C912515D96829D
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdd0e0000 'C:\WINDOWS\system32\rsaenh.dll'
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdece0000 'C:\WINDOWS\System32\crypt32.dll'
3f08.3f14: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.18362.836.cat'; file='\Device\HarddiskVolume2\Windows\System32\dhcpcsvc.dll'
3f08.3f14: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
3f08.3f14: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\dhcpcsvc.dll'
3f08.3f14: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000c58 pwszName=\Device\HarddiskVolume2\Windows\System32\dhcpcsvc6.dll
3f08.3f14: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000000a32770
3f08.3f14: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000a32770
3f08.3f14: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=C8A4B35134FE83EA6C710EA68891208811F657FE
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdd0e0000 'C:\WINDOWS\system32\rsaenh.dll'
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdece0000 'C:\WINDOWS\System32\crypt32.dll'
3f08.3f14: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0416~31bf3856ad364e35~amd64~~10.0.18362.836.cat'; file='\Device\HarddiskVolume2\Windows\System32\dhcpcsvc6.dll'
3f08.3f14: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
3f08.3f14: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\dhcpcsvc6.dll'
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdd0e0000 'C:\WINDOWS\system32\rsaenh.dll'
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdece0000 'C:\WINDOWS\System32\crypt32.dll'
3f08.3f14: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\nsi.dll'
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdd0e0000 'C:\WINDOWS\system32\rsaenh.dll'
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdece0000 'C:\WINDOWS\System32\crypt32.dll'
3f08.3f14: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\winnsi.dll'
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdd0e0000 'C:\WINDOWS\system32\rsaenh.dll'
3f08.3f14: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\crypt32.dll
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\crypt32.dll (Input=crypt32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdece0000 'C:\WINDOWS\System32\crypt32.dll'
3f08.3f14: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'ws2_32.dll'.
3f08.3f14: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #22 'rpcrt4.dll'.
3f08.3f14: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\mswsock.dll) WinVerifyTrust
3f08.3f14: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\mswsock.dll
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
3f08.3f14: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ws2_32.dll
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\mswsock.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
3f08.3f14: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\mswsock.dll
3f08.3f14: supR3HardenedDllNotificationCallback: load 00007fffdd570000 LB 0x00067000 C:\WINDOWS\system32\mswsock.dll [fFlags=0x0]
3f08.3f14: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\mswsock.dll
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdd570000 'C:\WINDOWS\system32\mswsock.dll'
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdd0e0000 'C:\WINDOWS\system32\rsaenh.dll'
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdece0000 'C:\WINDOWS\System32\crypt32.dll'
3f08.3f14: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcp_win.dll'.
3f08.3f14: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #16 'rpcrt4.dll'.
3f08.3f14: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #28 'devobj.dll'.
3f08.3f14: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\MMDevAPI.dll) WinVerifyTrust
3f08.3f14: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\MMDevAPI.dll
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'devobj.dll'...
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: 'devobj.dll' -> '\Device\HarddiskVolume2\Windows\System32\devobj.dll' [rcNtRedir=0xc0150008]
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdd0e0000 'C:\WINDOWS\system32\rsaenh.dll'
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdece0000 'C:\WINDOWS\System32\crypt32.dll'
3f08.3f14: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #18 'cfgmgr32.dll'.
3f08.3f14: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\devobj.dll) WinVerifyTrust
3f08.3f14: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\devobj.dll
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
3f08.3f14: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcp_win.dll
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'cfgmgr32.dll'...
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: 'cfgmgr32.dll' -> '\Device\HarddiskVolume2\Windows\System32\cfgmgr32.dll' [rcNtRedir=0xc0150008]
3f08.3f14: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\cfgmgr32.dll
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\MMDevApi.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
3f08.3f14: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\MMDevAPI.dll
3f08.3f14: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\devobj.dll
3f08.3f14: supR3HardenedDllNotificationCallback: load 00007fffddb00000 LB 0x0002a000 C:\WINDOWS\System32\DEVOBJ.dll [fFlags=0x0]
3f08.3f14: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\devobj.dll
3f08.3f14: supR3HardenedDllNotificationCallback: load 00007fffd8d50000 LB 0x00072000 C:\WINDOWS\System32\MMDevApi.dll [fFlags=0x0]
3f08.3f14: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\MMDevAPI.dll
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffd8d50000 'C:\WINDOWS\System32\MMDevApi.dll'
3f08.3f14: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000d4c pwszName=\Device\HarddiskVolume2\Windows\System32\dsound.dll
3f08.3f14: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000000a32770
3f08.3f14: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000a32770
3f08.3f14: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=8184043CF3F3DF1E3CF96E74DBBF7D0836417373
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdd0e0000 'C:\WINDOWS\system32\rsaenh.dll'
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdece0000 'C:\WINDOWS\System32\crypt32.dll'
3f08.3f14: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.18362.778.cat'; file='\Device\HarddiskVolume2\Windows\System32\dsound.dll'
3f08.3f14: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
3f08.3f14: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
3f08.3f14: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #32 'winmm.dll'.
3f08.3f14: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\dsound.dll) WinVerifyTrust
3f08.3f14: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\dsound.dll
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume2\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008]
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdd0e0000 'C:\WINDOWS\system32\rsaenh.dll'
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdece0000 'C:\WINDOWS\System32\crypt32.dll'
3f08.3f14: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'winmmbase.dll'.
3f08.3f14: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'msvcrt.dll'.
3f08.3f14: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\winmm.dll) WinVerifyTrust
3f08.3f14: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\winmm.dll
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
3f08.3f14: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmmbase.dll'...
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmmbase.dll' -> '\Device\HarddiskVolume2\Windows\System32\winmmbase.dll' [rcNtRedir=0xc0150008]
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdd0e0000 'C:\WINDOWS\system32\rsaenh.dll'
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdece0000 'C:\WINDOWS\System32\crypt32.dll'
3f08.3f14: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
3f08.3f14: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\winmmbase.dll) WinVerifyTrust
3f08.3f14: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\winmmbase.dll
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\dsound.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000002009:<flags> [calling]
3f08.3f14: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\dsound.dll
3f08.3f14: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\winmm.dll
3f08.3f14: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\winmmbase.dll
3f08.3f14: supR3HardenedDllNotificationCallback: load 00007fffdb900000 LB 0x0002d000 C:\WINDOWS\System32\WINMMBASE.dll [fFlags=0x0]
3f08.3f14: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\winmmbase.dll
3f08.3f14: supR3HardenedDllNotificationCallback: load 00007fffdbd80000 LB 0x00024000 C:\WINDOWS\System32\WINMM.dll [fFlags=0x0]
3f08.3f14: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\winmm.dll
3f08.3f14: supR3HardenedDllNotificationCallback: load 00007fff973f0000 LB 0x00099000 C:\WINDOWS\System32\dsound.dll [fFlags=0x0]
3f08.3f14: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\dsound.dll
3f08.3f14: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\dsound.dll
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\dsound.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff973f0000 'C:\WINDOWS\System32\dsound.dll'
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff973f0000 'C:\WINDOWS\System32\dsound.dll'
3f08.3f14: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\dsound.dll
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\dsound.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff973f0000 'C:\WINDOWS\system32\dsound.dll'
3f08.3f14: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\MMDevAPI.dll
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\MMDEVAPI.DLL (Input=MMDEVAPI.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffd8d50000 'C:\WINDOWS\System32\MMDEVAPI.DLL'
3f08.3104: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdd0e0000 'C:\WINDOWS\system32\rsaenh.dll'
3f08.3104: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdece0000 'C:\WINDOWS\System32\crypt32.dll'
3f08.3104: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcp_win.dll'.
3f08.3104: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'rpcrt4.dll'.
3f08.3104: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'oleaut32.dll'.
3f08.3104: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #29 'mmdevapi.dll'.
3f08.3104: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\AudioSes.dll) WinVerifyTrust
3f08.3104: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\AudioSes.dll
3f08.3104: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mmdevapi.dll'...
3f08.3104: supR3HardenedWinVerifyCacheProcessImportTodos: 'mmdevapi.dll' -> '\Device\HarddiskVolume2\Windows\System32\mmdevapi.dll' [rcNtRedir=0xc0150008]
3f08.3104: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\MMDevAPI.dll
3f08.3104: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
3f08.3104: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume2\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
3f08.3104: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\oleaut32.dll
3f08.3104: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
3f08.3104: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
3f08.3104: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp_win.dll'...
3f08.3104: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp_win.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcp_win.dll' [rcNtRedir=0xc0150008]
3f08.3104: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcp_win.dll
3f08.3104: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\AUDIOSES.DLL (Input=AUDIOSES.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
3f08.3104: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\AudioSes.dll
3f08.3104: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'combase.dll'.
3f08.3104: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #24 'rpcrt4.dll'.
3f08.3104: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #32 'bcryptprimitives.dll'.
3f08.3104: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\WinTypes.dll)
3f08.3104: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\WinTypes.dll
3f08.3104: supR3HardenedDllNotificationCallback: load 00007fffd9a30000 LB 0x00153000 C:\WINDOWS\SYSTEM32\wintypes.dll [fFlags=0x0]
3f08.3104: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\WinTypes.dll [avoiding WinVerifyTrust]
3f08.3104: supR3HardenedDllNotificationCallback: load 00007fffd8df0000 LB 0x0015d000 C:\WINDOWS\System32\AUDIOSES.DLL [fFlags=0x0]
3f08.3104: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\AudioSes.dll
3f08.3104: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffd8df0000 'C:\WINDOWS\System32\AUDIOSES.DLL'
3f08.3104: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcryptprimitives.dll'...
3f08.3104: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcryptprimitives.dll' -> '\Device\HarddiskVolume2\Windows\System32\bcryptprimitives.dll' [rcNtRedir=0xc0150008]
3f08.3104: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\bcryptprimitives.dll
3f08.3104: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
3f08.3104: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
3f08.3104: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'combase.dll'...
3f08.3104: supR3HardenedWinVerifyCacheProcessImportTodos: 'combase.dll' -> '\Device\HarddiskVolume2\Windows\System32\combase.dll' [rcNtRedir=0xc0150008]
3f08.3104: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\combase.dll
3f08.3104: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdd0e0000 'C:\WINDOWS\system32\rsaenh.dll'
3f08.3104: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdece0000 'C:\WINDOWS\System32\crypt32.dll'
3f08.3104: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\WinTypes.dll'
3f08.3104: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
3f08.3104: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'rpcrt4.dll'.
3f08.3104: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\ResourcePolicyClient.dll)
3f08.3104: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\ResourcePolicyClient.dll
3f08.3104: supR3HardenedDllNotificationCallback: load 00007fffdc3e0000 LB 0x00014000 C:\WINDOWS\SYSTEM32\resourcepolicyclient.dll [fFlags=0x0]
3f08.3104: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ResourcePolicyClient.dll [avoiding WinVerifyTrust]
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdd0e0000 'C:\WINDOWS\system32\rsaenh.dll'
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdece0000 'C:\WINDOWS\System32\crypt32.dll'
3f08.3f14: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\ResourcePolicyClient.dll'
3f08.3f14: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\winmm.dll
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\winmm.dll (Input=winmm.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000801:<flags> [calling]
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdbd80000 'C:\WINDOWS\System32\winmm.dll'
3f08.3f14: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000d9c pwszName=\Device\HarddiskVolume2\Windows\System32\wdmaud.drv
3f08.3f14: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000000a32770
3f08.3f14: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000a32770
3f08.3f14: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=38EA8D6D625C6A0A9075DAE17FD33652FF8FC23A
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdd0e0000 'C:\WINDOWS\system32\rsaenh.dll'
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdece0000 'C:\WINDOWS\System32\crypt32.dll'
3f08.3f14: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.18362.778.cat'; file='\Device\HarddiskVolume2\Windows\System32\wdmaud.drv'
3f08.3f14: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
3f08.3f14: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
3f08.3f14: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'mmdevapi.dll'.
3f08.3f14: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #27 'ksuser.dll'.
3f08.3f14: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #28 'avrt.dll'.
3f08.3f14: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\wdmaud.drv) WinVerifyTrust
3f08.3f14: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\wdmaud.drv
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'avrt.dll'...
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: 'avrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\avrt.dll' [rcNtRedir=0xc0150008]
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdd0e0000 'C:\WINDOWS\system32\rsaenh.dll'
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdece0000 'C:\WINDOWS\System32\crypt32.dll'
3f08.3f14: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\avrt.dll) WinVerifyTrust
3f08.3f14: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\avrt.dll
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ksuser.dll'...
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: 'ksuser.dll' -> '\Device\HarddiskVolume2\Windows\System32\ksuser.dll' [rcNtRedir=0xc0150008]
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdd0e0000 'C:\WINDOWS\system32\rsaenh.dll'
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdece0000 'C:\WINDOWS\System32\crypt32.dll'
3f08.3f14: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
3f08.3f14: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\ksuser.dll) WinVerifyTrust
3f08.3f14: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\ksuser.dll
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mmdevapi.dll'...
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: 'mmdevapi.dll' -> '\Device\HarddiskVolume2\Windows\System32\mmdevapi.dll' [rcNtRedir=0xc0150008]
3f08.3f14: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\MMDevAPI.dll
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
3f08.3f14: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\wdmaud.drv
3f08.3f14: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ksuser.dll
3f08.3f14: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\avrt.dll
3f08.3f14: supR3HardenedDllNotificationCallback: load 00007fffbf1d0000 LB 0x00009000 C:\WINDOWS\SYSTEM32\ksuser.dll [fFlags=0x0]
3f08.3f14: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ksuser.dll
3f08.3f14: supR3HardenedDllNotificationCallback: load 00007fffda210000 LB 0x0000a000 C:\WINDOWS\SYSTEM32\AVRT.dll [fFlags=0x0]
3f08.3f14: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\avrt.dll
3f08.3f14: supR3HardenedDllNotificationCallback: load 00007fffae860000 LB 0x00044000 C:\WINDOWS\System32\wdmaud.drv [fFlags=0x0]
3f08.3f14: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\wdmaud.drv
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffae860000 'C:\WINDOWS\System32\wdmaud.drv'
3f08.3f14: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\wdmaud.drv
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffae860000 'C:\WINDOWS\System32\wdmaud.drv'
3f08.3f14: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\wdmaud.drv
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffae860000 'C:\WINDOWS\System32\wdmaud.drv'
3f08.3f14: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\wdmaud.drv
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffae860000 'C:\WINDOWS\System32\wdmaud.drv'
3f08.3f14: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\wdmaud.drv
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffae860000 'C:\WINDOWS\System32\wdmaud.drv'
3f08.3f14: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\wdmaud.drv
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffae860000 'C:\WINDOWS\System32\wdmaud.drv'
3f08.3f14: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\wdmaud.drv
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffae860000 'C:\WINDOWS\System32\wdmaud.drv'
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffae860000 'C:\WINDOWS\System32\wdmaud.drv'
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffae860000 'C:\WINDOWS\System32\wdmaud.drv'
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffae860000 'C:\WINDOWS\System32\wdmaud.drv'
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffae860000 'C:\WINDOWS\System32\wdmaud.drv'
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffae860000 'C:\WINDOWS\System32\wdmaud.drv'
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffae860000 'C:\WINDOWS\System32\wdmaud.drv'
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffae860000 'C:\WINDOWS\System32\wdmaud.drv'
3f08.3f14: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\wdmaud.drv
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\wdmaud.drv (Input=wdmaud.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffae860000 'C:\WINDOWS\System32\wdmaud.drv'
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffae860000 'C:\WINDOWS\System32\wdmaud.drv'
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffae860000 'C:\WINDOWS\System32\wdmaud.drv'
3f08.3f14: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000e90 pwszName=\Device\HarddiskVolume2\Windows\System32\msacm32.drv
3f08.3f14: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000000a32770
3f08.3f14: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000a32770
3f08.3f14: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=763C5E89A8DA653902990733D245B99CC7C40BEA
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdd0e0000 'C:\WINDOWS\system32\rsaenh.dll'
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdece0000 'C:\WINDOWS\System32\crypt32.dll'
3f08.3f14: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.18362.778.cat'; file='\Device\HarddiskVolume2\Windows\System32\msacm32.drv'
3f08.3f14: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
3f08.3f14: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
3f08.3f14: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'mmdevapi.dll'.
3f08.3f14: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #13 'msacm32.dll'.
3f08.3f14: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #14 'winmmbase.dll'.
3f08.3f14: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\msacm32.drv) WinVerifyTrust
3f08.3f14: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\msacm32.drv
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmmbase.dll'...
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmmbase.dll' -> '\Device\HarddiskVolume2\Windows\System32\winmmbase.dll' [rcNtRedir=0xc0150008]
3f08.3f14: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\winmmbase.dll
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msacm32.dll'...
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: 'msacm32.dll' -> '\Device\HarddiskVolume2\Windows\System32\msacm32.dll' [rcNtRedir=0xc0150008]
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdd0e0000 'C:\WINDOWS\system32\rsaenh.dll'
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdece0000 'C:\WINDOWS\System32\crypt32.dll'
3f08.3f14: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
3f08.3f14: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\msacm32.dll) WinVerifyTrust
3f08.3f14: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\msacm32.dll
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mmdevapi.dll'...
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: 'mmdevapi.dll' -> '\Device\HarddiskVolume2\Windows\System32\mmdevapi.dll' [rcNtRedir=0xc0150008]
3f08.3f14: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\MMDevAPI.dll
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
3f08.3f14: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msacm32.drv
3f08.3f14: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msacm32.dll
3f08.3f14: supR3HardenedDllNotificationCallback: load 00007fffae840000 LB 0x0001c000 C:\WINDOWS\SYSTEM32\MSACM32.dll [fFlags=0x0]
3f08.3f14: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msacm32.dll
3f08.3f14: supR3HardenedDllNotificationCallback: load 00007fffbd370000 LB 0x0000d000 C:\WINDOWS\System32\msacm32.drv [fFlags=0x0]
3f08.3f14: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msacm32.drv
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffbd370000 'C:\WINDOWS\System32\msacm32.drv'
3f08.3f14: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msacm32.drv
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffbd370000 'C:\WINDOWS\System32\msacm32.drv'
3f08.3f14: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msacm32.drv
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffbd370000 'C:\WINDOWS\System32\msacm32.drv'
3f08.3f14: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msacm32.drv
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffbd370000 'C:\WINDOWS\System32\msacm32.drv'
3f08.3f14: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msacm32.drv
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffbd370000 'C:\WINDOWS\System32\msacm32.drv'
3f08.3f14: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msacm32.drv
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffbd370000 'C:\WINDOWS\System32\msacm32.drv'
3f08.3f14: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msacm32.drv
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\msacm32.drv (Input=msacm32.drv, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffbd370000 'C:\WINDOWS\System32\msacm32.drv'
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffbd370000 'C:\WINDOWS\System32\msacm32.drv'
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffbd370000 'C:\WINDOWS\System32\msacm32.drv'
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffbd370000 'C:\WINDOWS\System32\msacm32.drv'
3f08.3f14: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000e9c pwszName=\Device\HarddiskVolume2\Windows\System32\midimap.dll
3f08.3f14: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000000a32770
3f08.3f14: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000a32770
3f08.3f14: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=EB34EC166C3F780657AB67E557E6C2E60C398D10
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdd0e0000 'C:\WINDOWS\system32\rsaenh.dll'
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdece0000 'C:\WINDOWS\System32\crypt32.dll'
3f08.3f14: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package~31bf3856ad364e35~amd64~~10.0.18362.778.cat'; file='\Device\HarddiskVolume2\Windows\System32\midimap.dll'
3f08.3f14: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
3f08.3f14: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
3f08.3f14: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'winmm.dll'.
3f08.3f14: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\midimap.dll) WinVerifyTrust
3f08.3f14: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\midimap.dll
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume2\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008]
3f08.3f14: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\winmm.dll
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
3f08.3f14: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\midimap.dll (Input=midimap.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
3f08.3f14: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\midimap.dll
3f08.3f14: supR3HardenedDllNotificationCallback: load 00007fffafe20000 LB 0x0000a000 C:\WINDOWS\System32\midimap.dll [fFlags=0x0]
3f08.3f14: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\midimap.dll
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffafe20000 'C:\WINDOWS\System32\midimap.dll'
3f08.3f14: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\midimap.dll
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\midimap.dll (Input=midimap.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffafe20000 'C:\WINDOWS\System32\midimap.dll'
3f08.3f14: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\midimap.dll
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\midimap.dll (Input=midimap.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffafe20000 'C:\WINDOWS\System32\midimap.dll'
3f08.3f14: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\midimap.dll
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\midimap.dll (Input=midimap.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000001001:<flags> [calling]
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffafe20000 'C:\WINDOWS\System32\midimap.dll'
3f08.3f14: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\winmm.dll
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\winmm.dll (Input=winmm.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdbd80000 'C:\WINDOWS\System32\winmm.dll'
3f08.3f14: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\winmm.dll
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\winmm.dll (Input=winmm.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdbd80000 'C:\WINDOWS\System32\winmm.dll'
3f08.3f14: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\winmm.dll
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\winmm.dll (Input=winmm.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdbd80000 'C:\WINDOWS\System32\winmm.dll'
3f08.3f14: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\dsound.dll
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\system32\dsound.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fff973f0000 'C:\WINDOWS\system32\dsound.dll'
3f08.3f14: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\winmm.dll
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: pName=C:\WINDOWS\System32\winmm.dll (Input=winmm.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000000001:<flags> [calling]
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdbd80000 'C:\WINDOWS\System32\winmm.dll'
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdbd80000 'C:\WINDOWS\System32\winmm.dll'
3f08.3f14: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=00007fffdbd80000 'C:\WINDOWS\System32\winmm.dll'
3f08.3108: '\Device\HarddiskVolume2\Windows\System32\tzres.dll' has no imports
3f08.3108: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\tzres.dll)
3f08.3108: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\tzres.dll
3f08.3108: supR3HardenedMonitor_NtCreateSection: NtMapViewOfSection failed on 00000000000003bc (hFile=0000000000000414) with 0xc0000022 -> STATUS_TRUST_FAILURE
3f08.3108: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\tzres.dll [avoiding WinVerifyTrust]
3f08.3108: supR3HardenedMonitor_NtCreateSection: NtMapViewOfSection failed on 0000000000000414 (hFile=00000000000003bc) with 0xc0000022 -> STATUS_TRUST_FAILURE
3f38.2e68: supR3HardNtChildWaitFor[2]: Quitting: ExitCode=0x1 (rcNtWait=0x0, rcNt1=0x0, rcNt2=0x103, rcNt3=0x103, 208849 ms, the end);
3f80.3c98: supR3HardNtChildWaitFor[1]: Quitting: ExitCode=0x1 (rcNtWait=0x0, rcNt1=0x0, rcNt2=0x103, rcNt3=0x103, 209261 ms, the end);
This file has been truncated, but you can view the full file.
INFO global: Vagrant version: 2.2.9
INFO global: Ruby version: 2.6.6
INFO global: RubyGems version: 3.0.3
INFO global: VAGRANT_WSL_WINDOWS_ACCESS_USER_HOME_PATH="/mnt/d/Code"
INFO global: VAGRANT_WSL_ENABLE_WINDOWS_ACCESS="1"
INFO global: VAGRANT_INSTALLER_ENV="1"
INFO global: VAGRANT_EXECUTABLE="/opt/vagrant/embedded/gems/2.2.9/gems/vagrant-2.2.9/bin/vagrant"
INFO global: VAGRANT_INSTALLER_EMBEDDED_DIR="/opt/vagrant/embedded"
INFO global: VAGRANT_INSTALLER_VERSION="2"
INFO global: VAGRANT_LOG="debug"
WARN global: resolv replacement has not been enabled!
DEBUG global: Loading core plugin: /opt/vagrant/embedded/gems/2.2.9/gems/vagrant-2.2.9/plugins/commands/box/plugin.rb
INFO manager: Registered plugin: box command
DEBUG global: Loading core plugin: /opt/vagrant/embedded/gems/2.2.9/gems/vagrant-2.2.9/plugins/commands/cap/plugin.rb
INFO manager: Registered plugin: cap command
DEBUG global: Loading core plugin: /opt/vagrant/embedded/gems/2.2.9/gems/vagrant-2.2.9/plugins/commands/cloud/plugin.rb
INFO manager: Registered plugin: vagrant-cloud
DEBUG global: Loading core plugin: /opt/vagrant/embedded/gems/2.2.9/gems/vagrant-2.2.9/plugins/commands/destroy/plugin.rb
INFO manager: Registered plugin: destroy command
DEBUG global: Loading core plugin: /opt/vagrant/embedded/gems/2.2.9/gems/vagrant-2.2.9/plugins/commands/global-status/plugin.rb
INFO manager: Registered plugin: global-status command
DEBUG global: Loading core plugin: /opt/vagrant/embedded/gems/2.2.9/gems/vagrant-2.2.9/plugins/commands/halt/plugin.rb
INFO manager: Registered plugin: halt command
DEBUG global: Loading core plugin: /opt/vagrant/embedded/gems/2.2.9/gems/vagrant-2.2.9/plugins/commands/help/plugin.rb
INFO manager: Registered plugin: help command
DEBUG global: Loading core plugin: /opt/vagrant/embedded/gems/2.2.9/gems/vagrant-2.2.9/plugins/commands/init/plugin.rb
INFO manager: Registered plugin: init command
DEBUG global: Loading core plugin: /opt/vagrant/embedded/gems/2.2.9/gems/vagrant-2.2.9/plugins/commands/list-commands/plugin.rb
INFO manager: Registered plugin: list-commands command
DEBUG global: Loading core plugin: /opt/vagrant/embedded/gems/2.2.9/gems/vagrant-2.2.9/plugins/commands/login/plugin.rb
INFO manager: Registered plugin: vagrant-login
DEBUG global: Loading core plugin: /opt/vagrant/embedded/gems/2.2.9/gems/vagrant-2.2.9/plugins/commands/package/plugin.rb
INFO manager: Registered plugin: package command
DEBUG global: Loading core plugin: /opt/vagrant/embedded/gems/2.2.9/gems/vagrant-2.2.9/plugins/commands/plugin/plugin.rb
INFO manager: Registered plugin: plugin command
DEBUG global: Loading core plugin: /opt/vagrant/embedded/gems/2.2.9/gems/vagrant-2.2.9/plugins/commands/port/plugin.rb
INFO manager: Registered plugin: port command
DEBUG global: Loading core plugin: /opt/vagrant/embedded/gems/2.2.9/gems/vagrant-2.2.9/plugins/commands/powershell/plugin.rb
INFO manager: Registered plugin: powershell command
DEBUG global: Loading core plugin: /opt/vagrant/embedded/gems/2.2.9/gems/vagrant-2.2.9/plugins/commands/provider/plugin.rb
INFO manager: Registered plugin: provider command
DEBUG global: Loading core plugin: /opt/vagrant/embedded/gems/2.2.9/gems/vagrant-2.2.9/plugins/commands/provision/plugin.rb
INFO manager: Registered plugin: provision command
DEBUG global: Loading core plugin: /opt/vagrant/embedded/gems/2.2.9/gems/vagrant-2.2.9/plugins/commands/push/plugin.rb
INFO manager: Registered plugin: push command
DEBUG global: Loading core plugin: /opt/vagrant/embedded/gems/2.2.9/gems/vagrant-2.2.9/plugins/commands/rdp/plugin.rb
INFO manager: Registered plugin: rdp command
DEBUG global: Loading core plugin: /opt/vagrant/embedded/gems/2.2.9/gems/vagrant-2.2.9/plugins/commands/reload/plugin.rb
INFO manager: Registered plugin: reload command
DEBUG global: Loading core plugin: /opt/vagrant/embedded/gems/2.2.9/gems/vagrant-2.2.9/plugins/commands/resume/plugin.rb
INFO manager: Registered plugin: resume command
DEBUG global: Loading core plugin: /opt/vagrant/embedded/gems/2.2.9/gems/vagrant-2.2.9/plugins/commands/snapshot/plugin.rb
INFO manager: Registered plugin: snapshot command
DEBUG global: Loading core plugin: /opt/vagrant/embedded/gems/2.2.9/gems/vagrant-2.2.9/plugins/commands/ssh/plugin.rb
INFO manager: Registered plugin: ssh command
DEBUG global: Loading core plugin: /opt/vagrant/embedded/gems/2.2.9/gems/vagrant-2.2.9/plugins/commands/ssh_config/plugin.rb
INFO manager: Registered plugin: ssh-config command
DEBUG global: Loading core plugin: /opt/vagrant/embedded/gems/2.2.9/gems/vagrant-2.2.9/plugins/commands/status/plugin.rb
INFO manager: Registered plugin: status command
DEBUG global: Loading core plugin: /opt/vagrant/embedded/gems/2.2.9/gems/vagrant-2.2.9/plugins/commands/suspend/plugin.rb
INFO manager: Registered plugin: suspend command
DEBUG global: Loading core plugin: /opt/vagrant/embedded/gems/2.2.9/gems/vagrant-2.2.9/plugins/commands/up/plugin.rb
INFO manager: Registered plugin: up command
DEBUG global: Loading core plugin: /opt/vagrant/embedded/gems/2.2.9/gems/vagrant-2.2.9/plugins/commands/upload/plugin.rb
INFO manager: Registered plugin: upload command
DEBUG global: Loading core plugin: /opt/vagrant/embedded/gems/2.2.9/gems/vagrant-2.2.9/plugins/commands/validate/plugin.rb
INFO manager: Registered plugin: validate command
DEBUG global: Loading core plugin: /opt/vagrant/embedded/gems/2.2.9/gems/vagrant-2.2.9/plugins/commands/version/plugin.rb
INFO manager: Registered plugin: version command
DEBUG global: Loading core plugin: /opt/vagrant/embedded/gems/2.2.9/gems/vagrant-2.2.9/plugins/commands/winrm/plugin.rb
INFO manager: Registered plugin: winrm command
DEBUG global: Loading core plugin: /opt/vagrant/embedded/gems/2.2.9/gems/vagrant-2.2.9/plugins/commands/winrm_config/plugin.rb
INFO manager: Registered plugin: winrm-config command
DEBUG global: Loading core plugin: /opt/vagrant/embedded/gems/2.2.9/gems/vagrant-2.2.9/plugins/communicators/ssh/plugin.rb
INFO manager: Registered plugin: ssh communicator
DEBUG global: Loading core plugin: /opt/vagrant/embedded/gems/2.2.9/gems/vagrant-2.2.9/plugins/communicators/winrm/plugin.rb
INFO manager: Registered plugin: winrm communicator
DEBUG global: Loading core plugin: /opt/vagrant/embedded/gems/2.2.9/gems/vagrant-2.2.9/plugins/communicators/winssh/plugin.rb
INFO manager: Registered plugin: windows ssh communicator
DEBUG global: Loading core plugin: /opt/vagrant/embedded/gems/2.2.9/gems/vagrant-2.2.9/plugins/guests/alpine/plugin.rb
INFO manager: Registered plugin: Alpine guest
DEBUG global: Loading core plugin: /opt/vagrant/embedded/gems/2.2.9/gems/vagrant-2.2.9/plugins/guests/alt/plugin.rb
INFO manager: Registered plugin: ALT Platform guest
DEBUG global: Loading core plugin: /opt/vagrant/embedded/gems/2.2.9/gems/vagrant-2.2.9/plugins/guests/amazon/plugin.rb
INFO manager: Registered plugin: Amazon Linux guest
DEBUG global: Loading core plugin: /opt/vagrant/embedded/gems/2.2.9/gems/vagrant-2.2.9/plugins/guests/arch/plugin.rb
INFO manager: Registered plugin: Arch guest
DEBUG global: Loading core plugin: /opt/vagrant/embedded/gems/2.2.9/gems/vagrant-2.2.9/plugins/guests/atomic/plugin.rb
INFO manager: Registered plugin: Atomic Host guest
DEBUG global: Loading core plugin: /opt/vagrant/embedded/gems/2.2.9/gems/vagrant-2.2.9/plugins/guests/bsd/plugin.rb
INFO manager: Registered plugin: BSD-based guest
DEBUG global: Loading core plugin: /opt/vagrant/embedded/gems/2.2.9/gems/vagrant-2.2.9/plugins/guests/centos/plugin.rb
INFO manager: Registered plugin: CentOS guest
DEBUG global: Loading core plugin: /opt/vagrant/embedded/gems/2.2.9/gems/vagrant-2.2.9/plugins/guests/coreos/plugin.rb
INFO manager: Registered plugin: CoreOS guest
DEBUG global: Loading core plugin: /opt/vagrant/embedded/gems/2.2.9/gems/vagrant-2.2.9/plugins/guests/darwin/plugin.rb
INFO manager: Registered plugin: Darwin guest
DEBUG global: Loading core plugin: /opt/vagrant/embedded/gems/2.2.9/gems/vagrant-2.2.9/plugins/guests/debian/plugin.rb
INFO manager: Registered plugin: Debian guest
DEBUG global: Loading core plugin: /opt/vagrant/embedded/gems/2.2.9/gems/vagrant-2.2.9/plugins/guests/dragonflybsd/plugin.rb
INFO manager: Registered plugin: DragonFly BSD guest
DEBUG global: Loading core plugin: /opt/vagrant/embedded/gems/2.2.9/gems/vagrant-2.2.9/plugins/guests/elementary/plugin.rb
INFO manager: Registered plugin: Elementary guest
DEBUG global: Loading core plugin: /opt/vagrant/embedded/gems/2.2.9/gems/vagrant-2.2.9/plugins/guests/esxi/plugin.rb
INFO manager: Registered plugin: ESXi guest.
DEBUG global: Loading core plugin: /opt/vagrant/embedded/gems/2.2.9/gems/vagrant-2.2.9/plugins/guests/fedora/plugin.rb
INFO manager: Registered plugin: Fedora guest
DEBUG global: Loading core plugin: /opt/vagrant/embedded/gems/2.2.9/gems/vagrant-2.2.9/plugins/guests/freebsd/plugin.rb
INFO manager: Registered plugin: FreeBSD guest
DEBUG global: Loading core plugin: /opt/vagrant/embedded/gems/2.2.9/gems/vagrant-2.2.9/plugins/guests/funtoo/plugin.rb
INFO manager: Registered plugin: Funtoo guest
DEBUG global: Loading core plugin: /opt/vagrant/embedded/gems/2.2.9/gems/vagrant-2.2.9/plugins/guests/gentoo/plugin.rb
INFO manager: Registered plugin: Gentoo guest
DEBUG global: Loading core plugin: /opt/vagrant/embedded/gems/2.2.9/gems/vagrant-2.2.9/plugins/guests/haiku/plugin.rb
INFO manager: Registered plugin: Haiku guest
DEBUG global: Loading core plugin: /opt/vagrant/embedded/gems/2.2.9/gems/vagrant-2.2.9/plugins/guests/kali/plugin.rb
INFO manager: Registered plugin: Kali guest
DEBUG global: Loading core plugin: /opt/vagrant/embedded/gems/2.2.9/gems/vagrant-2.2.9/plugins/guests/linux/plugin.rb
INFO manager: Registered plugin: Linux guest.
DEBUG global: Loading core plugin: /opt/vagrant/embedded/gems/2.2.9/gems/vagrant-2.2.9/plugins/guests/mint/plugin.rb
INFO manager: Registered plugin: Mint guest
DEBUG global: Loading core plugin: /opt/vagrant/embedded/gems/2.2.9/gems/vagrant-2.2.9/plugins/guests/netbsd/plugin.rb
INFO manager: Registered plugin: NetBSD guest
DEBUG global: Loading core plugin: /opt/vagrant/embedded/gems/2.2.9/gems/vagrant-2.2.9/plugins/guests/nixos/plugin.rb
INFO manager: Registered plugin: NixOS guest
DEBUG global: Loading core plugin: /opt/vagrant/embedded/gems/2.2.9/gems/vagrant-2.2.9/plugins/guests/omnios/plugin.rb
INFO manager: Registered plugin: OmniOS guest.
DEBUG global: Loading core plugin: /opt/vagrant/embedded/gems/2.2.9/gems/vagrant-2.2.9/plugins/guests/openbsd/plugin.rb
INFO manager: Registered plugin: OpenBSD guest
DEBUG global: Loading core plugin: /opt/vagrant/embedded/gems/2.2.9/gems/vagrant-2.2.9/plugins/guests/photon/plugin.rb
INFO manager: Registered plugin: VMware Photon guest
DEBUG global: Loading core plugin: /opt/vagrant/embedded/gems/2.2.9/gems/vagrant-2.2.9/plugins/guests/pld/plugin.rb
INFO manager: Registered plugin: PLD Linux guest
DEBUG global: Loading core plugin: /opt/vagrant/embedded/gems/2.2.9/gems/vagrant-2.2.9/plugins/guests/redhat/plugin.rb
INFO manager: Registered plugin: Red Hat Enterprise Linux guest
DEBUG global: Loading core plugin: /opt/vagrant/embedded/gems/2.2.9/gems/vagrant-2.2.9/plugins/guests/slackware/plugin.rb
INFO manager: Registered plugin: Slackware guest
DEBUG global: Loading core plugin: /opt/vagrant/embedded/gems/2.2.9/gems/vagrant-2.2.9/plugins/guests/smartos/plugin.rb
INFO manager: Registered plugin: SmartOS guest.
DEBUG global: Loading core plugin: /opt/vagrant/embedded/gems/2.2.9/gems/vagrant-2.2.9/plugins/guests/solaris/plugin.rb
INFO manager: Registered plugin: Solaris guest.
DEBUG global: Loading core plugin: /opt/vagrant/embedded/gems/2.2.9/gems/vagrant-2.2.9/plugins/guests/solaris11/plugin.rb
INFO manager: Registered plugin: Solaris 11 guest.
DEBUG global: Loading core plugin: /opt/vagrant/embedded/gems/2.2.9/gems/vagrant-2.2.9/plugins/guests/suse/plugin.rb
INFO manager: Registered plugin: SUSE guest
DEBUG global: Loading core plugin: /opt/vagrant/embedded/gems/2.2.9/gems/vagrant-2.2.9/plugins/guests/tinycore/plugin.rb
INFO manager: Registered plugin: TinyCore Linux guest.
DEBUG global: Loading core plugin: /opt/vagrant/embedded/gems/2.2.9/gems/vagrant-2.2.9/plugins/guests/trisquel/plugin.rb
INFO manager: Registered plugin: Trisquel guest
DEBUG global: Loading core plugin: /opt/vagrant/embedded/gems/2.2.9/gems/vagrant-2.2.9/plugins/guests/ubuntu/plugin.rb
INFO manager: Registered plugin: Ubuntu guest
DEBUG global: Loading core plugin: /opt/vagrant/embedded/gems/2.2.9/gems/vagrant-2.2.9/plugins/guests/windows/plugin.rb
INFO manager: Registered plugin: Windows guest.
DEBUG global: Loading core plugin: /opt/vagrant/embedded/gems/2.2.9/gems/vagrant-2.2.9/plugins/hosts/alt/plugin.rb
INFO manager: Registered plugin: ALT Platform host
DEBUG global: Loading core plugin: /opt/vagrant/embedded/gems/2.2.9/gems/vagrant-2.2.9/plugins/hosts/arch/plugin.rb
INFO manager: Registered plugin: Arch host
DEBUG global: Loading core plugin: /opt/vagrant/embedded/gems/2.2.9/gems/vagrant-2.2.9/plugins/hosts/bsd/plugin.rb
INFO manager: Registered plugin: BSD host
DEBUG global: Loading core plugin: /opt/vagrant/embedded/gems/2.2.9/gems/vagrant-2.2.9/plugins/hosts/darwin/plugin.rb
INFO manager: Registered plugin: Mac OS X host
DEBUG global: Loading core plugin: /opt/vagrant/embedded/gems/2.2.9/gems/vagrant-2.2.9/plugins/hosts/freebsd/plugin.rb
INFO manager: Registered plugin: FreeBSD host
DEBUG global: Loading core plugin: /opt/vagrant/embedded/gems/2.2.9/gems/vagrant-2.2.9/plugins/hosts/gentoo/plugin.rb
INFO manager: Registered plugin: Gentoo host
DEBUG global: Loading core plugin: /opt/vagrant/embedded/gems/2.2.9/gems/vagrant-2.2.9/plugins/hosts/linux/plugin.rb
INFO manager: Registered plugin: Linux host
DEBUG global: Loading core plugin: /opt/vagrant/embedded/gems/2.2.9/gems/vagrant-2.2.9/plugins/hosts/null/plugin.rb
INFO manager: Registered plugin: null host
DEBUG global: Loading core plugin: /opt/vagrant/embedded/gems/2.2.9/gems/vagrant-2.2.9/plugins/hosts/redhat/plugin.rb
INFO manager: Registered plugin: Red Hat Enterprise Linux host
DEBUG global: Loading core plugin: /opt/vagrant/embedded/gems/2.2.9/gems/vagrant-2.2.9/plugins/hosts/slackware/plugin.rb
INFO manager: Registered plugin: Slackware host
DEBUG global: Loading core plugin: /opt/vagrant/embedded/gems/2.2.9/gems/vagrant-2.2.9/plugins/hosts/suse/plugin.rb
INFO manager: Registered plugin: SUSE host
DEBUG global: Loading core plugin: /opt/vagrant/embedded/gems/2.2.9/gems/vagrant-2.2.9/plugins/hosts/void/plugin.rb
INFO manager: Registered plugin: Void host
DEBUG global: Loading core plugin: /opt/vagrant/embedded/gems/2.2.9/gems/vagrant-2.2.9/plugins/hosts/windows/plugin.rb
INFO manager: Registered plugin: Windows host
DEBUG global: Loading core plugin: /opt/vagrant/embedded/gems/2.2.9/gems/vagrant-2.2.9/plugins/kernel_v1/plugin.rb
INFO manager: Registered plugin: kernel
DEBUG global: Loading core plugin: /opt/vagrant/embedded/gems/2.2.9/gems/vagrant-2.2.9/plugins/kernel_v2/plugin.rb
INFO manager: Registered plugin: kernel
DEBUG global: Loading core plugin: /opt/vagrant/embedded/gems/2.2.9/gems/vagrant-2.2.9/plugins/providers/docker/plugin.rb
INFO manager: Registered plugin: docker-provider
DEBUG global: Loading core plugin: /opt/vagrant/embedded/gems/2.2.9/gems/vagrant-2.2.9/plugins/providers/hyperv/plugin.rb
INFO manager: Registered plugin: Hyper-V provider
DEBUG global: Loading core plugin: /opt/vagrant/embedded/gems/2.2.9/gems/vagrant-2.2.9/plugins/providers/virtualbox/plugin.rb
INFO manager: Registered plugin: VirtualBox provider
DEBUG global: Loading core plugin: /opt/vagrant/embedded/gems/2.2.9/gems/vagrant-2.2.9/plugins/provisioners/ansible/plugin.rb
INFO manager: Registered plugin: ansible
DEBUG global: Loading core plugin: /opt/vagrant/embedded/gems/2.2.9/gems/vagrant-2.2.9/plugins/provisioners/cfengine/plugin.rb
INFO manager: Registered plugin: CFEngine Provisioner
DEBUG global: Loading core plugin: /opt/vagrant/embedded/gems/2.2.9/gems/vagrant-2.2.9/plugins/provisioners/chef/plugin.rb
INFO manager: Registered plugin: chef
DEBUG global: Loading core plugin: /opt/vagrant/embedded/gems/2.2.9/gems/vagrant-2.2.9/plugins/provisioners/container/plugin.rb
INFO manager: Registered plugin: container
DEBUG global: Loading core plugin: /opt/vagrant/embedded/gems/2.2.9/gems/vagrant-2.2.9/plugins/provisioners/docker/plugin.rb
INFO manager: Registered plugin: docker
DEBUG global: Loading core plugin: /opt/vagrant/embedded/gems/2.2.9/gems/vagrant-2.2.9/plugins/provisioners/file/plugin.rb
INFO manager: Registered plugin: file
DEBUG global: Loading core plugin: /opt/vagrant/embedded/gems/2.2.9/gems/vagrant-2.2.9/plugins/provisioners/podman/plugin.rb
INFO manager: Registered plugin: podman
DEBUG global: Loading core plugin: /opt/vagrant/embedded/gems/2.2.9/gems/vagrant-2.2.9/plugins/provisioners/puppet/plugin.rb
INFO manager: Registered plugin: puppet
DEBUG global: Loading core plugin: /opt/vagrant/embedded/gems/2.2.9/gems/vagrant-2.2.9/plugins/provisioners/salt/plugin.rb
INFO manager: Registered plugin: salt
DEBUG global: Loading core plugin: /opt/vagrant/embedded/gems/2.2.9/gems/vagrant-2.2.9/plugins/provisioners/shell/plugin.rb
INFO manager: Registered plugin: shell
DEBUG global: Loading core plugin: /opt/vagrant/embedded/gems/2.2.9/gems/vagrant-2.2.9/plugins/pushes/atlas/plugin.rb
INFO manager: Registered plugin: atlas
DEBUG global: Loading core plugin: /opt/vagrant/embedded/gems/2.2.9/gems/vagrant-2.2.9/plugins/pushes/ftp/plugin.rb
INFO manager: Registered plugin: ftp
DEBUG global: Loading core plugin: /opt/vagrant/embedded/gems/2.2.9/gems/vagrant-2.2.9/plugins/pushes/heroku/plugin.rb
INFO manager: Registered plugin: heroku
DEBUG global: Loading core plugin: /opt/vagrant/embedded/gems/2.2.9/gems/vagrant-2.2.9/plugins/pushes/local-exec/plugin.rb
INFO manager: Registered plugin: local-exec
DEBUG global: Loading core plugin: /opt/vagrant/embedded/gems/2.2.9/gems/vagrant-2.2.9/plugins/pushes/noop/plugin.rb
INFO manager: Registered plugin: noop
DEBUG global: Loading core plugin: /opt/vagrant/embedded/gems/2.2.9/gems/vagrant-2.2.9/plugins/synced_folders/nfs/plugin.rb
INFO manager: Registered plugin: NFS synced folders
DEBUG global: Loading core plugin: /opt/vagrant/embedded/gems/2.2.9/gems/vagrant-2.2.9/plugins/synced_folders/rsync/plugin.rb
INFO manager: Registered plugin: RSync synced folders
DEBUG global: Loading core plugin: /opt/vagrant/embedded/gems/2.2.9/gems/vagrant-2.2.9/plugins/synced_folders/smb/plugin.rb
INFO manager: Registered plugin: SMB synced folders
INFO vagrant: `vagrant` invoked: ["up", "--debug"]
DEBUG vagrant: Creating Vagrant environment
INFO environment: Environment initialized (#<Vagrant::Environment:0x00000000022fb370>)
INFO environment: - cwd: /mnt/d/Code/vm
INFO environment: Home path: /home/ziadoz/.vagrant.d
DEBUG environment: Effective local data path: /mnt/d/Code/vm/.vagrant
INFO environment: Local data path: /mnt/d/Code/vm/.vagrant
DEBUG environment: Creating: /mnt/d/Code/vm/.vagrant
DEBUG manager: Enabling localized plugins
INFO manager: Plugins:
DEBUG signature_file: new solution file instance plugin_file=/mnt/d/Code/vm/.vagrant/plugins.json solution_file=/mnt/d/Code/vm/.vagrant/bundler/local.sol
DEBUG signature_file: missing file so skipping loading
DEBUG bundler: solution file in use for init: <Vagrant::Bundler::SolutionFile:/mnt/d/Code/vm/.vagrant/plugins.json:/mnt/d/Code/vm/.vagrant/bundler/local.sol:invalid>
DEBUG bundler: Generating new builtin set instance.
DEBUG bundler: Generating new plugin set instance. Skip gems - []
DEBUG bundler: generating solution set for configured plugins
DEBUG bundler: Current generated plugin dependency list: []
DEBUG bundler: resolving solution from available specification set