API tools faq
paste
Guest User

Untitled

a guest
Nov 14th, 2016
277
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 298.71 KB | None | 0 0
raw download clone embed print report
  1. fac.d94: Log file opened: 5.1.8r111374 g_hStartupLog=0000000000000014 g_uNtVerCombined=0x611db110
  2. fac.d94: \SystemRoot\System32\ntdll.dll:
  3. fac.d94: CreationTime: 2016-10-25T07:20:44.774108600Z
  4. fac.d94: LastWriteTime: 2013-08-29T02:16:35.515578900Z
  5. fac.d94: ChangeTime: 2016-10-25T08:16:22.526892200Z
  6. fac.d94: FileAttributes: 0x20
  7. fac.d94: Size: 0x1a6dc0
  8. fac.d94: NT Headers: 0xe0
  9. fac.d94: Timestamp: 0x521eaf24
  10. fac.d94: Machine: 0x8664 - amd64
  11. fac.d94: Timestamp: 0x521eaf24
  12. fac.d94: Image Version: 6.1
  13. fac.d94: SizeOfImage: 0x1a9000 (1740800)
  14. fac.d94: Resource Dir: 0x151000 LB 0x560d8
  15. fac.d94: ProductName: Microsoft® Windows® Operating System
  16. fac.d94: ProductVersion: 6.1.7601.18247
  17. fac.d94: FileVersion: 6.1.7601.18247 (win7sp1_gdr.130828-1532)
  18. fac.d94: FileDescription: NT Layer DLL
  19. fac.d94: \SystemRoot\System32\kernel32.dll:
  20. fac.d94: CreationTime: 2016-10-25T07:20:44.588097900Z
  21. fac.d94: LastWriteTime: 2012-11-30T05:41:07.621000000Z
  22. fac.d94: ChangeTime: 2016-10-25T08:16:22.651692400Z
  23. fac.d94: FileAttributes: 0x20
  24. fac.d94: Size: 0x11b800
  25. fac.d94: NT Headers: 0xe8
  26. fac.d94: Timestamp: 0x50b8479a
  27. fac.d94: Machine: 0x8664 - amd64
  28. fac.d94: Timestamp: 0x50b8479a
  29. fac.d94: Image Version: 6.1
  30. fac.d94: SizeOfImage: 0x11f000 (1175552)
  31. fac.d94: Resource Dir: 0x116000 LB 0x528
  32. fac.d94: ProductName: Microsoft® Windows® Operating System
  33. fac.d94: ProductVersion: 6.1.7601.18015
  34. fac.d94: FileVersion: 6.1.7601.18015 (win7sp1_gdr.121129-1432)
  35. fac.d94: FileDescription: Windows NT BASE API Client DLL
  36. fac.d94: \SystemRoot\System32\KernelBase.dll:
  37. fac.d94: CreationTime: 2016-10-25T07:20:45.153130200Z
  38. fac.d94: LastWriteTime: 2012-11-30T05:41:07.715000000Z
  39. fac.d94: ChangeTime: 2016-10-25T08:16:22.667292400Z
  40. fac.d94: FileAttributes: 0x20
  41. fac.d94: Size: 0x67a00
  42. fac.d94: NT Headers: 0xe8
  43. fac.d94: Timestamp: 0x50b8479b
  44. fac.d94: Machine: 0x8664 - amd64
  45. fac.d94: Timestamp: 0x50b8479b
  46. fac.d94: Image Version: 6.1
  47. fac.d94: SizeOfImage: 0x6b000 (438272)
  48. fac.d94: Resource Dir: 0x69000 LB 0x530
  49. fac.d94: ProductName: Microsoft® Windows® Operating System
  50. fac.d94: ProductVersion: 6.1.7601.18015
  51. fac.d94: FileVersion: 6.1.7601.18015 (win7sp1_gdr.121129-1432)
  52. fac.d94: FileDescription: Windows NT BASE API Client DLL
  53. fac.d94: \SystemRoot\System32\apisetschema.dll:
  54. fac.d94: CreationTime: 2009-07-13T23:18:54.866423200Z
  55. fac.d94: LastWriteTime: 2009-07-14T01:24:53.779000000Z
  56. fac.d94: ChangeTime: 2016-10-25T07:20:56.776795100Z
  57. fac.d94: FileAttributes: 0x20
  58. fac.d94: Size: 0x1a00
  59. fac.d94: NT Headers: 0xc0
  60. fac.d94: Timestamp: 0x4a5bdeab
  61. fac.d94: Machine: 0x8664 - amd64
  62. fac.d94: Timestamp: 0x4a5bdeab
  63. fac.d94: Image Version: 6.1
  64. fac.d94: SizeOfImage: 0x50000 (327680)
  65. fac.d94: Resource Dir: 0x30000 LB 0x3f0
  66. fac.d94: ProductName: Microsoft® Windows® Operating System
  67. fac.d94: ProductVersion: 6.1.7600.16385
  68. fac.d94: FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255)
  69. fac.d94: FileDescription: ApiSet Schema DLL
  70. fac.d94: NtOpenDirectoryObject failed on \Driver: 0xc0000022
  71. fac.d94: supR3HardenedWinFindAdversaries: 0x0
  72. fac.d94: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox'
  73. fac.d94: Calling main()
  74. fac.d94: SUPR3HardenedMain: pszProgName=VirtualBox fFlags=0x2
  75. fac.d94: supR3HardenedWinInitAppBin(0x2): '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox'
  76. fac.d94: SUPR3HardenedMain: Respawn #1
  77. fac.d94: System32: \Device\HarddiskVolume2\Windows\System32
  78. fac.d94: WinSxS: \Device\HarddiskVolume2\Windows\winsxs
  79. fac.d94: KnownDllPath: C:\Windows\system32
  80. fac.d94: '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
  81. fac.d94: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe)
  82. fac.d94: supR3HardNtEnableThreadCreation:
  83. fac.d94: supR3HardNtDisableThreadCreation: pvLdrInitThunk=0000000076ffc340 pvNtTerminateThread=00000000770217e0
  84. fac.d94: supR3HardenedWinDoReSpawn(1): New child ce4.588 [kernel32].
  85. fac.d94: supR3HardNtChildGatherData: PebBaseAddress=000007fffffdf000 cbPeb=0x380
  86. fac.d94: supR3HardNtPuChFindNtdll: uNtDllParentAddr=0000000076fd0000 uNtDllChildAddr=0000000076fd0000
  87. fac.d94: supR3HardenedWinSetupChildInit: uLdrInitThunk=0000000076ffc340
  88. fac.d94: supR3HardenedWinSetupChildInit: Start child.
  89. fac.d94: supR3HardNtChildWaitFor: Found expected request 0 (PurifyChildAndCloseHandles) after 0 ms.
  90. fac.d94: supR3HardNtChildPurify: Startup delay kludge #1/0: 264 ms, 33 sleeps
  91. fac.d94: supHardNtVpScanVirtualMemory: enmKind=CHILD_PURIFICATION
  92. fac.d94: *0000000000000000-fffffffffffeffff 0x0001/0x0000 0x0000000
  93. fac.d94: *0000000000010000-fffffffffffeffff 0x0004/0x0004 0x0020000
  94. fac.d94: *0000000000030000-000000000002bfff 0x0002/0x0002 0x0040000
  95. fac.d94: 0000000000034000-0000000000027fff 0x0001/0x0000 0x0000000
  96. fac.d94: *0000000000040000-fffffffffff43fff 0x0000/0x0004 0x0020000
  97. fac.d94: 000000000013c000-0000000000139fff 0x0104/0x0004 0x0020000
  98. fac.d94: 000000000013e000-000000000013bfff 0x0004/0x0004 0x0020000
  99. fac.d94: *0000000000140000-000000000013efff 0x0004/0x0004 0x0020000
  100. fac.d94: 0000000000141000-ffffffff892b1fff 0x0001/0x0000 0x0000000
  101. fac.d94: *0000000076fd0000-0000000076fd0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
  102. fac.d94: 0000000076fd1000-00000000770d2fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
  103. fac.d94: 00000000770d3000-0000000077101fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
  104. fac.d94: 0000000077102000-0000000077109fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
  105. fac.d94: 000000007710a000-000000007710afff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
  106. fac.d94: 000000007710b000-000000007710dfff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
  107. fac.d94: 000000007710e000-0000000077178fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
  108. fac.d94: 0000000077179000-000000006f311fff 0x0001/0x0000 0x0000000
  109. fac.d94: *000000007efe0000-000000007dfdffff 0x0000/0x0002 0x0020000
  110. fac.d94: *000000007ffe0000-000000007ffdefff 0x0002/0x0002 0x0020000
  111. fac.d94: 000000007ffe1000-000000007ffd1fff 0x0000/0x0002 0x0020000
  112. fac.d94: 000000007fff0000-ffffffffc0c9ffff 0x0001/0x0000 0x0000000
  113. fac.d94: *000000013f340000-000000013f340fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
  114. fac.d94: 000000013f341000-000000013f3affff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
  115. fac.d94: 000000013f3b0000-000000013f3b0fff 0x0080/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
  116. fac.d94: 000000013f3b1000-000000013f3f5fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
  117. fac.d94: 000000013f3f6000-000000013f3f6fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
  118. fac.d94: 000000013f3f7000-000000013f3f7fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
  119. fac.d94: 000000013f3f8000-000000013f3fcfff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
  120. fac.d94: 000000013f3fd000-000000013f3fdfff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
  121. fac.d94: 000000013f3fe000-000000013f3fefff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
  122. fac.d94: 000000013f3ff000-000000013f402fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
  123. fac.d94: 000000013f403000-000000013f44afff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
  124. fac.d94: 000000013f44b000-fffff8037f5a5fff 0x0001/0x0000 0x0000000
  125. fac.d94: *000007feff2f0000-000007feff2f0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\apisetschema.dll
  126. fac.d94: 000007feff2f1000-000007fdfe631fff 0x0001/0x0000 0x0000000
  127. fac.d94: *000007fffffb0000-000007fffff8cfff 0x0002/0x0002 0x0040000
  128. fac.d94: 000007fffffd3000-000007fffffc8fff 0x0001/0x0000 0x0000000
  129. fac.d94: *000007fffffdd000-000007fffffdafff 0x0004/0x0004 0x0020000
  130. fac.d94: *000007fffffdf000-000007fffffddfff 0x0004/0x0004 0x0020000
  131. fac.d94: *000007fffffe0000-000007fffffcffff 0x0001/0x0002 0x0020000
  132. fac.d94: apisetschema.dll: timestamp 0x4a5bdeab (rc=VINF_SUCCESS)
  133. fac.d94: VirtualBox.exe: timestamp 0x58062715 (rc=VINF_SUCCESS)
  134. fac.d94: '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
  135. fac.d94: '\Device\HarddiskVolume2\Windows\System32\apisetschema.dll' has no imports
  136. fac.d94: '\Device\HarddiskVolume2\Windows\System32\ntdll.dll' has no imports
  137. fac.d94: supR3HardNtChildPurify: Done after 300 ms and 0 fixes (loop #0).
  138. ce4.588: Log file opened: 5.1.8r111374 g_hStartupLog=0000000000000004 g_uNtVerCombined=0x611db100
  139. ce4.588: supR3HardenedVmProcessInit: uNtDllAddr=0000000076fd0000 g_uNtVerCombined=0x611db100
  140. ce4.588: ntdll.dll: timestamp 0x521eaf24 (rc=VINF_SUCCESS)
  141. ce4.588: New simple heap: #1 0000000000250000 LB 0x400000 (for 1740800 allocation)
  142. fac.d94: supR3HardNtEnableThreadCreation:
  143. ce4.588: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox'
  144. ce4.588: System32: \Device\HarddiskVolume2\Windows\System32
  145. ce4.588: WinSxS: \Device\HarddiskVolume2\Windows\winsxs
  146. ce4.588: KnownDllPath: C:\Windows\system32
  147. ce4.588: supR3HardenedVmProcessInit: Opening vboxdrv stub...
  148. ce4.588: supR3HardenedVmProcessInit: Restoring LdrInitializeThunk...
  149. ce4.588: supR3HardenedVmProcessInit: Returning to LdrInitializeThunk...
  150. ce4.588: Registered Dll notification callback with NTDLL.
  151. ce4.588: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\kernel32.dll)
  152. ce4.588: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\kernel32.dll
  153. ce4.588: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\kernel32.dll (Input=kernel32.dll, rcNtResolve=0xc0150008) *pfFlags=0xffffffff pwszSearchPath=0000000000000000:<flags> [calling]
  154. ce4.588: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
  155. ce4.588: supR3HardenedDllNotificationCallback: load 0000000076db0000 LB 0x0011f000 C:\Windows\system32\kernel32.dll [fFlags=0x0]
  156. ce4.588: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
  157. ce4.588: supR3HardenedDllNotificationCallback: load 000007fefce00000 LB 0x0006b000 C:\Windows\system32\KERNELBASE.dll [fFlags=0x0]
  158. ce4.588: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\KernelBase.dll)
  159. ce4.588: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\KernelBase.dll
  160. ce4.588: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=0000000076db0000 'C:\Windows\system32\kernel32.dll'
  161. ce4.588: supR3HardNtDisableThreadCreation: pvLdrInitThunk=0000000076ffc340 pvNtTerminateThread=00000000770217e0
  162. fac.d94: supR3HardNtChildWaitFor: Found expected request 1 (CloseEvents) after 22 ms.
  163. ce4.588: \SystemRoot\System32\ntdll.dll:
  164. ce4.588: CreationTime: 2016-10-25T07:20:44.774108600Z
  165. ce4.588: LastWriteTime: 2013-08-29T02:16:35.515578900Z
  166. ce4.588: ChangeTime: 2016-10-25T08:16:22.526892200Z
  167. ce4.588: FileAttributes: 0x20
  168. ce4.588: Size: 0x1a6dc0
  169. ce4.588: NT Headers: 0xe0
  170. ce4.588: Timestamp: 0x521eaf24
  171. ce4.588: Machine: 0x8664 - amd64
  172. ce4.588: Timestamp: 0x521eaf24
  173. ce4.588: Image Version: 6.1
  174. ce4.588: SizeOfImage: 0x1a9000 (1740800)
  175. ce4.588: Resource Dir: 0x151000 LB 0x560d8
  176. ce4.588: ProductName: Microsoft® Windows® Operating System
  177. ce4.588: ProductVersion: 6.1.7601.18247
  178. ce4.588: FileVersion: 6.1.7601.18247 (win7sp1_gdr.130828-1532)
  179. ce4.588: FileDescription: NT Layer DLL
  180. ce4.588: \SystemRoot\System32\kernel32.dll:
  181. ce4.588: CreationTime: 2016-10-25T07:20:44.588097900Z
  182. ce4.588: LastWriteTime: 2012-11-30T05:41:07.621000000Z
  183. ce4.588: ChangeTime: 2016-10-25T08:16:22.651692400Z
  184. ce4.588: FileAttributes: 0x20
  185. ce4.588: Size: 0x11b800
  186. ce4.588: NT Headers: 0xe8
  187. ce4.588: Timestamp: 0x50b8479a
  188. ce4.588: Machine: 0x8664 - amd64
  189. ce4.588: Timestamp: 0x50b8479a
  190. ce4.588: Image Version: 6.1
  191. ce4.588: SizeOfImage: 0x11f000 (1175552)
  192. ce4.588: Resource Dir: 0x116000 LB 0x528
  193. ce4.588: ProductName: Microsoft® Windows® Operating System
  194. ce4.588: ProductVersion: 6.1.7601.18015
  195. ce4.588: FileVersion: 6.1.7601.18015 (win7sp1_gdr.121129-1432)
  196. ce4.588: FileDescription: Windows NT BASE API Client DLL
  197. ce4.588: \SystemRoot\System32\KernelBase.dll:
  198. ce4.588: CreationTime: 2016-10-25T07:20:45.153130200Z
  199. ce4.588: LastWriteTime: 2012-11-30T05:41:07.715000000Z
  200. ce4.588: ChangeTime: 2016-10-25T08:16:22.667292400Z
  201. ce4.588: FileAttributes: 0x20
  202. ce4.588: Size: 0x67a00
  203. ce4.588: NT Headers: 0xe8
  204. ce4.588: Timestamp: 0x50b8479b
  205. ce4.588: Machine: 0x8664 - amd64
  206. ce4.588: Timestamp: 0x50b8479b
  207. ce4.588: Image Version: 6.1
  208. ce4.588: SizeOfImage: 0x6b000 (438272)
  209. ce4.588: Resource Dir: 0x69000 LB 0x530
  210. ce4.588: ProductName: Microsoft® Windows® Operating System
  211. ce4.588: ProductVersion: 6.1.7601.18015
  212. ce4.588: FileVersion: 6.1.7601.18015 (win7sp1_gdr.121129-1432)
  213. ce4.588: FileDescription: Windows NT BASE API Client DLL
  214. ce4.588: \SystemRoot\System32\apisetschema.dll:
  215. ce4.588: CreationTime: 2009-07-13T23:18:54.866423200Z
  216. ce4.588: LastWriteTime: 2009-07-14T01:24:53.779000000Z
  217. ce4.588: ChangeTime: 2016-10-25T07:20:56.776795100Z
  218. ce4.588: FileAttributes: 0x20
  219. ce4.588: Size: 0x1a00
  220. ce4.588: NT Headers: 0xc0
  221. ce4.588: Timestamp: 0x4a5bdeab
  222. ce4.588: Machine: 0x8664 - amd64
  223. ce4.588: Timestamp: 0x4a5bdeab
  224. ce4.588: Image Version: 6.1
  225. ce4.588: SizeOfImage: 0x50000 (327680)
  226. ce4.588: Resource Dir: 0x30000 LB 0x3f0
  227. ce4.588: ProductName: Microsoft® Windows® Operating System
  228. ce4.588: ProductVersion: 6.1.7600.16385
  229. ce4.588: FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255)
  230. ce4.588: FileDescription: ApiSet Schema DLL
  231. ce4.588: NtOpenDirectoryObject failed on \Driver: 0xc0000022
  232. ce4.588: supR3HardenedWinFindAdversaries: 0x0
  233. ce4.588: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox'
  234. ce4.588: Calling main()
  235. ce4.588: SUPR3HardenedMain: pszProgName=VirtualBox fFlags=0x2
  236. ce4.588: supR3HardenedWinInitAppBin(0x2): '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox'
  237. ce4.588: '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
  238. ce4.588: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe)
  239. ce4.588: SUPR3HardenedMain: Respawn #2
  240. ce4.588: supR3HardNtEnableThreadCreation:
  241. ce4.588: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\apphelp.dll)
  242. ce4.588: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\apphelp.dll
  243. ce4.588: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\apphelp.dll (rcNtResolve=0xc0150008) *pfFlags=0xffffffff pwszSearchPath=0000000000000000:<flags> [calling]
  244. ce4.588: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\apphelp.dll [lacks WinVerifyTrust]
  245. ce4.588: supR3HardenedDllNotificationCallback: load 000007fefcbc0000 LB 0x00057000 C:\Windows\system32\apphelp.dll [fFlags=0x0]
  246. ce4.588: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\apphelp.dll [lacks WinVerifyTrust]
  247. ce4.588: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefcbc0000 'C:\Windows\system32\apphelp.dll'
  248. ce4.588: supR3HardNtDisableThreadCreation: pvLdrInitThunk=0000000076ffc340 pvNtTerminateThread=00000000770217e0
  249. ce4.588: supR3HardenedWinDoReSpawn(2): New child 1504.de8 [kernel32].
  250. ce4.588: supR3HardNtChildGatherData: PebBaseAddress=000007fffffd5000 cbPeb=0x380
  251. ce4.588: supR3HardNtPuChFindNtdll: uNtDllParentAddr=0000000076fd0000 uNtDllChildAddr=0000000076fd0000
  252. ce4.588: supR3HardenedWinSetupChildInit: uLdrInitThunk=0000000076ffc340
  253. ce4.588: supR3HardenedWinSetupChildInit: Start child.
  254. ce4.588: supR3HardNtChildWaitFor: Found expected request 0 (PurifyChildAndCloseHandles) after 1 ms.
  255. ce4.588: supR3HardNtChildPurify: Startup delay kludge #1/0: 260 ms, 26 sleeps
  256. ce4.588: supHardNtVpScanVirtualMemory: enmKind=CHILD_PURIFICATION
  257. ce4.588: *0000000000000000-fffffffffffeffff 0x0001/0x0000 0x0000000
  258. ce4.588: *0000000000010000-fffffffffffeffff 0x0004/0x0004 0x0020000
  259. ce4.588: *0000000000030000-000000000002bfff 0x0002/0x0002 0x0040000
  260. ce4.588: 0000000000034000-0000000000027fff 0x0001/0x0000 0x0000000
  261. ce4.588: *0000000000040000-000000000003efff 0x0004/0x0004 0x0020000
  262. ce4.588: 0000000000041000-ffffffffffea1fff 0x0001/0x0000 0x0000000
  263. ce4.588: *00000000001e0000-00000000000e3fff 0x0000/0x0004 0x0020000
  264. ce4.588: 00000000002dc000-00000000002d9fff 0x0104/0x0004 0x0020000
  265. ce4.588: 00000000002de000-00000000002dbfff 0x0004/0x0004 0x0020000
  266. ce4.588: 00000000002e0000-ffffffff895effff 0x0001/0x0000 0x0000000
  267. ce4.588: *0000000076fd0000-0000000076fd0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
  268. ce4.588: 0000000076fd1000-00000000770d2fff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
  269. ce4.588: 00000000770d3000-0000000077101fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
  270. ce4.588: 0000000077102000-0000000077109fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
  271. ce4.588: 000000007710a000-000000007710afff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
  272. ce4.588: 000000007710b000-000000007710dfff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
  273. ce4.588: 000000007710e000-0000000077178fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\ntdll.dll
  274. ce4.588: 0000000077179000-000000006f311fff 0x0001/0x0000 0x0000000
  275. ce4.588: *000000007efe0000-000000007dfdffff 0x0000/0x0002 0x0020000
  276. ce4.588: *000000007ffe0000-000000007ffdefff 0x0002/0x0002 0x0020000
  277. ce4.588: 000000007ffe1000-000000007ffd1fff 0x0000/0x0002 0x0020000
  278. ce4.588: 000000007fff0000-ffffffffc0c9ffff 0x0001/0x0000 0x0000000
  279. ce4.588: *000000013f340000-000000013f340fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
  280. ce4.588: 000000013f341000-000000013f3affff 0x0020/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
  281. ce4.588: 000000013f3b0000-000000013f3b0fff 0x0080/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
  282. ce4.588: 000000013f3b1000-000000013f3f5fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
  283. ce4.588: 000000013f3f6000-000000013f3f6fff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
  284. ce4.588: 000000013f3f7000-000000013f3f7fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
  285. ce4.588: 000000013f3f8000-000000013f3fcfff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
  286. ce4.588: 000000013f3fd000-000000013f3fdfff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
  287. ce4.588: 000000013f3fe000-000000013f3fefff 0x0004/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
  288. ce4.588: 000000013f3ff000-000000013f402fff 0x0008/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
  289. ce4.588: 000000013f403000-000000013f44afff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe
  290. ce4.588: 000000013f44b000-fffff8037f5a5fff 0x0001/0x0000 0x0000000
  291. ce4.588: *000007feff2f0000-000007feff2f0fff 0x0002/0x0080 0x1000000 \Device\HarddiskVolume2\Windows\System32\apisetschema.dll
  292. ce4.588: 000007feff2f1000-000007fdfe631fff 0x0001/0x0000 0x0000000
  293. ce4.588: *000007fffffb0000-000007fffff8cfff 0x0002/0x0002 0x0040000
  294. ce4.588: 000007fffffd3000-000007fffffd0fff 0x0001/0x0000 0x0000000
  295. ce4.588: *000007fffffd5000-000007fffffd3fff 0x0004/0x0004 0x0020000
  296. ce4.588: 000007fffffd6000-000007fffffcdfff 0x0001/0x0000 0x0000000
  297. ce4.588: *000007fffffde000-000007fffffdbfff 0x0004/0x0004 0x0020000
  298. ce4.588: *000007fffffe0000-000007fffffcffff 0x0001/0x0002 0x0020000
  299. ce4.588: apisetschema.dll: timestamp 0x4a5bdeab (rc=VINF_SUCCESS)
  300. ce4.588: VirtualBox.exe: timestamp 0x58062715 (rc=VINF_SUCCESS)
  301. ce4.588: '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
  302. ce4.588: '\Device\HarddiskVolume2\Windows\System32\apisetschema.dll' has no imports
  303. ce4.588: '\Device\HarddiskVolume2\Windows\System32\ntdll.dll' has no imports
  304. ce4.588: supR3HardNtChildPurify: Done after 292 ms and 0 fixes (loop #0).
  305. 1504.de8: Log file opened: 5.1.8r111374 g_hStartupLog=0000000000000004 g_uNtVerCombined=0x611db100
  306. 1504.de8: supR3HardenedVmProcessInit: uNtDllAddr=0000000076fd0000 g_uNtVerCombined=0x611db100
  307. 1504.de8: ntdll.dll: timestamp 0x521eaf24 (rc=VINF_SUCCESS)
  308. 1504.de8: New simple heap: #1 00000000002e0000 LB 0x400000 (for 1740800 allocation)
  309. ce4.588: supR3HardenedEarlyCompact: Removed heap 1 (0x00000000250000 LB 0x400000)
  310. ce4.588: supR3HardNtEnableThreadCreation:
  311. 1504.de8: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox'
  312. 1504.de8: System32: \Device\HarddiskVolume2\Windows\System32
  313. 1504.de8: WinSxS: \Device\HarddiskVolume2\Windows\winsxs
  314. 1504.de8: KnownDllPath: C:\Windows\system32
  315. 1504.de8: supR3HardenedVmProcessInit: Opening vboxdrv...
  316. 1504.de8: supR3HardenedVmProcessInit: Restoring LdrInitializeThunk...
  317. 1504.de8: supR3HardenedVmProcessInit: Returning to LdrInitializeThunk...
  318. 1504.de8: Registered Dll notification callback with NTDLL.
  319. 1504.de8: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\kernel32.dll)
  320. 1504.de8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\kernel32.dll
  321. 1504.de8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\kernel32.dll (Input=kernel32.dll, rcNtResolve=0xc0150008) *pfFlags=0xffffffff pwszSearchPath=0000000000000000:<flags> [calling]
  322. 1504.de8: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
  323. 1504.de8: supR3HardenedDllNotificationCallback: load 0000000076db0000 LB 0x0011f000 C:\Windows\system32\kernel32.dll [fFlags=0x0]
  324. 1504.de8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
  325. 1504.de8: supR3HardenedDllNotificationCallback: load 000007fefce00000 LB 0x0006b000 C:\Windows\system32\KERNELBASE.dll [fFlags=0x0]
  326. 1504.de8: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\KernelBase.dll)
  327. 1504.de8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\KernelBase.dll
  328. 1504.de8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=0000000076db0000 'C:\Windows\system32\kernel32.dll'
  329. 1504.de8: supR3HardNtDisableThreadCreation: pvLdrInitThunk=0000000076ffc340 pvNtTerminateThread=00000000770217e0
  330. ce4.588: supR3HardNtChildWaitFor: Found expected request 1 (CloseEvents) after 15 ms.
  331. 1504.de8: \SystemRoot\System32\ntdll.dll:
  332. 1504.de8: CreationTime: 2016-10-25T07:20:44.774108600Z
  333. 1504.de8: LastWriteTime: 2013-08-29T02:16:35.515578900Z
  334. 1504.de8: ChangeTime: 2016-10-25T08:16:22.526892200Z
  335. 1504.de8: FileAttributes: 0x20
  336. 1504.de8: Size: 0x1a6dc0
  337. 1504.de8: NT Headers: 0xe0
  338. 1504.de8: Timestamp: 0x521eaf24
  339. 1504.de8: Machine: 0x8664 - amd64
  340. 1504.de8: Timestamp: 0x521eaf24
  341. 1504.de8: Image Version: 6.1
  342. 1504.de8: SizeOfImage: 0x1a9000 (1740800)
  343. 1504.de8: Resource Dir: 0x151000 LB 0x560d8
  344. 1504.de8: ProductName: Microsoft® Windows® Operating System
  345. 1504.de8: ProductVersion: 6.1.7601.18247
  346. 1504.de8: FileVersion: 6.1.7601.18247 (win7sp1_gdr.130828-1532)
  347. 1504.de8: FileDescription: NT Layer DLL
  348. 1504.de8: \SystemRoot\System32\kernel32.dll:
  349. 1504.de8: CreationTime: 2016-10-25T07:20:44.588097900Z
  350. 1504.de8: LastWriteTime: 2012-11-30T05:41:07.621000000Z
  351. 1504.de8: ChangeTime: 2016-10-25T08:16:22.651692400Z
  352. 1504.de8: FileAttributes: 0x20
  353. 1504.de8: Size: 0x11b800
  354. 1504.de8: NT Headers: 0xe8
  355. 1504.de8: Timestamp: 0x50b8479a
  356. 1504.de8: Machine: 0x8664 - amd64
  357. 1504.de8: Timestamp: 0x50b8479a
  358. 1504.de8: Image Version: 6.1
  359. 1504.de8: SizeOfImage: 0x11f000 (1175552)
  360. 1504.de8: Resource Dir: 0x116000 LB 0x528
  361. 1504.de8: ProductName: Microsoft® Windows® Operating System
  362. 1504.de8: ProductVersion: 6.1.7601.18015
  363. 1504.de8: FileVersion: 6.1.7601.18015 (win7sp1_gdr.121129-1432)
  364. 1504.de8: FileDescription: Windows NT BASE API Client DLL
  365. 1504.de8: \SystemRoot\System32\KernelBase.dll:
  366. 1504.de8: CreationTime: 2016-10-25T07:20:45.153130200Z
  367. 1504.de8: LastWriteTime: 2012-11-30T05:41:07.715000000Z
  368. 1504.de8: ChangeTime: 2016-10-25T08:16:22.667292400Z
  369. 1504.de8: FileAttributes: 0x20
  370. 1504.de8: Size: 0x67a00
  371. 1504.de8: NT Headers: 0xe8
  372. 1504.de8: Timestamp: 0x50b8479b
  373. 1504.de8: Machine: 0x8664 - amd64
  374. 1504.de8: Timestamp: 0x50b8479b
  375. 1504.de8: Image Version: 6.1
  376. 1504.de8: SizeOfImage: 0x6b000 (438272)
  377. 1504.de8: Resource Dir: 0x69000 LB 0x530
  378. 1504.de8: ProductName: Microsoft® Windows® Operating System
  379. 1504.de8: ProductVersion: 6.1.7601.18015
  380. 1504.de8: FileVersion: 6.1.7601.18015 (win7sp1_gdr.121129-1432)
  381. 1504.de8: FileDescription: Windows NT BASE API Client DLL
  382. 1504.de8: \SystemRoot\System32\apisetschema.dll:
  383. 1504.de8: CreationTime: 2009-07-13T23:18:54.866423200Z
  384. 1504.de8: LastWriteTime: 2009-07-14T01:24:53.779000000Z
  385. 1504.de8: ChangeTime: 2016-10-25T07:20:56.776795100Z
  386. 1504.de8: FileAttributes: 0x20
  387. 1504.de8: Size: 0x1a00
  388. 1504.de8: NT Headers: 0xc0
  389. 1504.de8: Timestamp: 0x4a5bdeab
  390. 1504.de8: Machine: 0x8664 - amd64
  391. 1504.de8: Timestamp: 0x4a5bdeab
  392. 1504.de8: Image Version: 6.1
  393. 1504.de8: SizeOfImage: 0x50000 (327680)
  394. 1504.de8: Resource Dir: 0x30000 LB 0x3f0
  395. 1504.de8: ProductName: Microsoft® Windows® Operating System
  396. 1504.de8: ProductVersion: 6.1.7600.16385
  397. 1504.de8: FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255)
  398. 1504.de8: FileDescription: ApiSet Schema DLL
  399. 1504.de8: NtOpenDirectoryObject failed on \Driver: 0xc0000022
  400. 1504.de8: supR3HardenedWinFindAdversaries: 0x0
  401. 1504.de8: supR3HardenedWinInitAppBin(0x0): '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox'
  402. 1504.de8: Calling main()
  403. 1504.de8: SUPR3HardenedMain: pszProgName=VirtualBox fFlags=0x2
  404. 1504.de8: supR3HardenedWinInitAppBin(0x2): '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox'
  405. 1504.de8: '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe' has no imports
  406. 1504.de8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.exe)
  407. 1504.de8: SUPR3HardenedMain: Final process, opening VBoxDrv...
  408. 1504.de8: supR3HardenedEarlyCompact: Removed heap 1 (0x000000002e0000 LB 0x400000)
  409. 1504.de8: supR3HardNtEnableThreadCreation:
  410. 1504.de8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxSupLib.dll)
  411. 1504.de8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxSupLib.dll
  412. 1504.de8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000007054c0:C:\Windows\system32 [calling]
  413. 1504.de8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxSupLib.dll [lacks WinVerifyTrust]
  414. 1504.de8: supR3HardenedDllNotificationCallback: load 000007feef0f0000 LB 0x00005000 C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL [fFlags=0x0]
  415. 1504.de8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxSupLib.dll [lacks WinVerifyTrust]
  416. 1504.de8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxSupLib.dll [lacks WinVerifyTrust]
  417. 1504.de8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000706460:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;D:\app\Michal\product\11.2.0\client_2\bin;D:\app\Michal\product\11.2.0\client_1\bin;C:\Program Files (x86)\CollabNet;C:\Program Files (x86)\Embarcadero\RAD Studio\9.0\bin;C:\Users\Public\Documents\RAD Studio\9.0\Bpl;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\TortoiseSVN\bin;C:\Program Files (x86)\MKVToolNix;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\VSShell\Common7\IDE\;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files (x86)\Microsoft SQL Server\100\DTS\Binn\;C:\Program Files (x86)\Developer Express.VCL\Library\RS16;C:\Program Files\Microsoft\Web Platform Installer\;C:\Program Files (x86)\Microsoft ASP.NET\ASP.NET Web Pages\v1.0\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\OpenVPN\bin;C:\Program Files (x86)\Sudowin\Clients\Console;D:\Zend\MySQL55\bin;C:\Program Files (x86)\ExchangeMapi\;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Skype\Phone\;C:\Program Files\TortoiseGit\bin;D:\GdPicture.NET 11\Redist;D:\GdPicture.NET 8\Redist;C:\Program Files\Microsoft SQL Server\120\Tools\Binn\;C:\Program Files\Microsoft SQL Server\130\Tools\Binn\;C:\Program Files\Git\cmd;D:\ANDROID\sdk\platform-tools;D:\GdPicture.NET 11\Redist [calling]
  418. 1504.de8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feef0f0000 'C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL'
  419. 1504.de8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxSupLib.dll [lacks WinVerifyTrust]
  420. 1504.de8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000706460:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;D:\app\Michal\product\11.2.0\client_2\bin;D:\app\Michal\product\11.2.0\client_1\bin;C:\Program Files (x86)\CollabNet;C:\Program Files (x86)\Embarcadero\RAD Studio\9.0\bin;C:\Users\Public\Documents\RAD Studio\9.0\Bpl;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\TortoiseSVN\bin;C:\Program Files (x86)\MKVToolNix;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\VSShell\Common7\IDE\;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files (x86)\Microsoft SQL Server\100\DTS\Binn\;C:\Program Files (x86)\Developer Express.VCL\Library\RS16;C:\Program Files\Microsoft\Web Platform Installer\;C:\Program Files (x86)\Microsoft ASP.NET\ASP.NET Web Pages\v1.0\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\OpenVPN\bin;C:\Program Files (x86)\Sudowin\Clients\Console;D:\Zend\MySQL55\bin;C:\Program Files (x86)\ExchangeMapi\;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Skype\Phone\;C:\Program Files\TortoiseGit\bin;D:\GdPicture.NET 11\Redist;D:\GdPicture.NET 8\Redist;C:\Program Files\Microsoft SQL Server\120\Tools\Binn\;C:\Program Files\Microsoft SQL Server\130\Tools\Binn\;C:\Program Files\Git\cmd;D:\ANDROID\sdk\platform-tools;D:\GdPicture.NET 11\Redist [calling]
  421. 1504.de8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feef0f0000 'C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL'
  422. 1504.de8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feef0f0000 'C:\Program Files\Oracle\VirtualBox\VBoxSupLib.DLL'
  423. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  424. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'crypt32.dll'.
  425. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msasn1.dll'.
  426. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'rpcrt4.dll'.
  427. 1504.de8: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\wintrust.dll)
  428. 1504.de8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\wintrust.dll
  429. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  430. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  431. 1504.de8: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll)
  432. 1504.de8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll
  433. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msasn1.dll'...
  434. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msasn1.dll' -> '\Device\HarddiskVolume2\Windows\System32\msasn1.dll' [rcNtRedir=0xc0150008]
  435. 1504.de8: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\msasn1.dll)
  436. 1504.de8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\msasn1.dll
  437. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'crypt32.dll'...
  438. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'crypt32.dll' -> '\Device\HarddiskVolume2\Windows\System32\crypt32.dll' [rcNtRedir=0xc0150008]
  439. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  440. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msasn1.dll'.
  441. 1504.de8: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\crypt32.dll)
  442. 1504.de8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\crypt32.dll
  443. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  444. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  445. 1504.de8: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\msvcrt.dll)
  446. 1504.de8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\msvcrt.dll
  447. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msasn1.dll'...
  448. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msasn1.dll' -> '\Device\HarddiskVolume2\Windows\System32\msasn1.dll' [rcNtRedir=0xc0150008]
  449. 1504.de8: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msasn1.dll [lacks WinVerifyTrust]
  450. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  451. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  452. 1504.de8: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  453. 1504.de8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\Wintrust.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000007054c0:C:\Windows\system32 [calling]
  454. 1504.de8: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
  455. 1504.de8: supR3HardenedDllNotificationCallback: load 000007fefd0e0000 LB 0x0003a000 C:\Windows\system32\Wintrust.dll [fFlags=0x0]
  456. 1504.de8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
  457. 1504.de8: supR3HardenedDllNotificationCallback: load 000007feff240000 LB 0x0009f000 C:\Windows\system32\msvcrt.dll [fFlags=0x0]
  458. 1504.de8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  459. 1504.de8: supR3HardenedDllNotificationCallback: load 000007fefcf40000 LB 0x00167000 C:\Windows\system32\CRYPT32.dll [fFlags=0x0]
  460. 1504.de8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\crypt32.dll [lacks WinVerifyTrust]
  461. 1504.de8: supR3HardenedDllNotificationCallback: load 000007fefcd80000 LB 0x0000f000 C:\Windows\system32\MSASN1.dll [fFlags=0x0]
  462. 1504.de8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msasn1.dll [lacks WinVerifyTrust]
  463. 1504.de8: supR3HardenedDllNotificationCallback: load 000007fefedd0000 LB 0x0012d000 C:\Windows\system32\RPCRT4.dll [fFlags=0x0]
  464. 1504.de8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  465. 1504.de8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefd0e0000 'C:\Windows\system32\Wintrust.dll'
  466. 1504.de8: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\bcrypt.dll)
  467. 1504.de8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\bcrypt.dll
  468. 1504.de8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\bcrypt.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=000000000074b1b0:C:\Windows\system32 [calling]
  469. 1504.de8: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\bcrypt.dll [lacks WinVerifyTrust]
  470. 1504.de8: supR3HardenedDllNotificationCallback: load 000007fefc6f0000 LB 0x00022000 C:\Windows\system32\bcrypt.dll [fFlags=0x0]
  471. 1504.de8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\bcrypt.dll [lacks WinVerifyTrust]
  472. 1504.de8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefc6f0000 'C:\Windows\system32\bcrypt.dll'
  473. 1504.de8: bcrypt.dll loaded at 000007fefc6f0000, BCryptOpenAlgorithmProvider at 000007fefc6f2640, preloading providers:
  474. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'advapi32.dll'.
  475. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'bcrypt.dll'.
  476. 1504.de8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\bcryptprimitives.dll)
  477. 1504.de8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\bcryptprimitives.dll
  478. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcrypt.dll'...
  479. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcrypt.dll' -> '\Device\HarddiskVolume2\Windows\System32\bcrypt.dll' [rcNtRedir=0xc0150008]
  480. 1504.de8: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\bcrypt.dll [lacks WinVerifyTrust]
  481. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
  482. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
  483. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  484. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'rpcrt4.dll'.
  485. 1504.de8: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\advapi32.dll)
  486. 1504.de8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\advapi32.dll
  487. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  488. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  489. 1504.de8: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  490. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  491. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  492. 1504.de8: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  493. 1504.de8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\bcryptprimitives.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000706460:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;D:\app\Michal\product\11.2.0\client_2\bin;D:\app\Michal\product\11.2.0\client_1\bin;C:\Program Files (x86)\CollabNet;C:\Program Files (x86)\Embarcadero\RAD Studio\9.0\bin;C:\Users\Public\Documents\RAD Studio\9.0\Bpl;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\TortoiseSVN\bin;C:\Program Files (x86)\MKVToolNix;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\VSShell\Common7\IDE\;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files (x86)\Microsoft SQL Server\100\DTS\Binn\;C:\Program Files (x86)\Developer Express.VCL\Library\RS16;C:\Program Files\Microsoft\Web Platform Installer\;C:\Program Files (x86)\Microsoft ASP.NET\ASP.NET Web Pages\v1.0\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\OpenVPN\bin;C:\Program Files (x86)\Sudowin\Clients\Console;D:\Zend\MySQL55\bin;C:\Program Files (x86)\ExchangeMapi\;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Skype\Phone\;C:\Program Files\TortoiseGit\bin;D:\GdPicture.NET 11\Redist;D:\GdPicture.NET 8\Redist;C:\Program Files\Microsoft SQL Server\120\Tools\Binn\;C:\Program Files\Microsoft SQL Server\130\Tools\Binn\;C:\Program Files\Git\cmd;D:\ANDROID\sdk\platform-tools;D:\GdPicture.NET 11\Redist [calling]
  494. 1504.de8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\bcryptprimitives.dll [lacks WinVerifyTrust]
  495. 1504.de8: supR3HardenedDllNotificationCallback: load 000007fefc150000 LB 0x0004c000 C:\Windows\system32\bcryptprimitives.dll [fFlags=0x0]
  496. 1504.de8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\bcryptprimitives.dll [lacks WinVerifyTrust]
  497. 1504.de8: supR3HardenedDllNotificationCallback: load 000007fefe8b0000 LB 0x000db000 C:\Windows\system32\ADVAPI32.dll [fFlags=0x0]
  498. 1504.de8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
  499. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'msvcrt.dll'.
  500. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #14 'rpcrt4.dll'.
  501. 1504.de8: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\sechost.dll)
  502. 1504.de8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\sechost.dll
  503. 1504.de8: supR3HardenedDllNotificationCallback: load 000007fefea40000 LB 0x0001f000 C:\Windows\SYSTEM32\sechost.dll [fFlags=0x0]
  504. 1504.de8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\sechost.dll [lacks WinVerifyTrust]
  505. 1504.de8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefc150000 'C:\Windows\system32\bcryptprimitives.dll'
  506. 1504.de8: BCryptOpenAlgorithmProvider(,'MD2',0,0) -> 0x0 (hAlgo=000000000074c890)
  507. 1504.de8: BCryptOpenAlgorithmProvider(,'MD4',0,0) -> 0x0 (hAlgo=000000000074f750)
  508. 1504.de8: BCryptOpenAlgorithmProvider(,'MD5',0,0) -> 0x0 (hAlgo=000000000074f870)
  509. 1504.de8: BCryptOpenAlgorithmProvider(,'SHA1',0,0) -> 0x0 (hAlgo=000000000074fa80)
  510. 1504.de8: BCryptOpenAlgorithmProvider(,'SHA256',0,0) -> 0x0 (hAlgo=000000000074fba0)
  511. 1504.de8: BCryptOpenAlgorithmProvider(,'SHA512',0,0) -> 0x0 (hAlgo=000000000074fcc0)
  512. 1504.de8: BCryptOpenAlgorithmProvider(,'RSA',0,0) -> 0x0 (hAlgo=000000000074ff00)
  513. 1504.de8: BCryptOpenAlgorithmProvider(,'DSA',0,0) -> 0x0 (hAlgo=0000000000750020)
  514. 1504.de8: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\cryptsp.dll)
  515. 1504.de8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\cryptsp.dll
  516. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  517. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  518. 1504.de8: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  519. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  520. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  521. 1504.de8: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  522. 1504.de8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\CRYPTSP.dll (Input=CRYPTSP.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000706460:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;D:\app\Michal\product\11.2.0\client_2\bin;D:\app\Michal\product\11.2.0\client_1\bin;C:\Program Files (x86)\CollabNet;C:\Program Files (x86)\Embarcadero\RAD Studio\9.0\bin;C:\Users\Public\Documents\RAD Studio\9.0\Bpl;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\TortoiseSVN\bin;C:\Program Files (x86)\MKVToolNix;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\VSShell\Common7\IDE\;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files (x86)\Microsoft SQL Server\100\DTS\Binn\;C:\Program Files (x86)\Developer Express.VCL\Library\RS16;C:\Program Files\Microsoft\Web Platform Installer\;C:\Program Files (x86)\Microsoft ASP.NET\ASP.NET Web Pages\v1.0\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\OpenVPN\bin;C:\Program Files (x86)\Sudowin\Clients\Console;D:\Zend\MySQL55\bin;C:\Program Files (x86)\ExchangeMapi\;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Skype\Phone\;C:\Program Files\TortoiseGit\bin;D:\GdPicture.NET 11\Redist;D:\GdPicture.NET 8\Redist;C:\Program Files\Microsoft SQL Server\120\Tools\Binn\;C:\Program Files\Microsoft SQL Server\130\Tools\Binn\;C:\Program Files\Git\cmd;D:\ANDROID\sdk\platform-tools;D:\GdPicture.NET 11\Redist [calling]
  523. 1504.de8: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cryptsp.dll [lacks WinVerifyTrust]
  524. 1504.de8: supR3HardenedDllNotificationCallback: load 000007fefc5a0000 LB 0x00017000 C:\Windows\system32\CRYPTSP.dll [fFlags=0x0]
  525. 1504.de8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cryptsp.dll [lacks WinVerifyTrust]
  526. 1504.de8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefc5a0000 'C:\Windows\system32\CRYPTSP.dll'
  527. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  528. 1504.de8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\rsaenh.dll)
  529. 1504.de8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\rsaenh.dll
  530. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  531. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  532. 1504.de8: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  533. 1504.de8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rsaenh.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000706460:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;D:\app\Michal\product\11.2.0\client_2\bin;D:\app\Michal\product\11.2.0\client_1\bin;C:\Program Files (x86)\CollabNet;C:\Program Files (x86)\Embarcadero\RAD Studio\9.0\bin;C:\Users\Public\Documents\RAD Studio\9.0\Bpl;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\TortoiseSVN\bin;C:\Program Files (x86)\MKVToolNix;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\VSShell\Common7\IDE\;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files (x86)\Microsoft SQL Server\100\DTS\Binn\;C:\Program Files (x86)\Developer Express.VCL\Library\RS16;C:\Program Files\Microsoft\Web Platform Installer\;C:\Program Files (x86)\Microsoft ASP.NET\ASP.NET Web Pages\v1.0\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\OpenVPN\bin;C:\Program Files (x86)\Sudowin\Clients\Console;D:\Zend\MySQL55\bin;C:\Program Files (x86)\ExchangeMapi\;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Skype\Phone\;C:\Program Files\TortoiseGit\bin;D:\GdPicture.NET 11\Redist;D:\GdPicture.NET 8\Redist;C:\Program Files\Microsoft SQL Server\120\Tools\Binn\;C:\Program Files\Microsoft SQL Server\130\Tools\Binn\;C:\Program Files\Git\cmd;D:\ANDROID\sdk\platform-tools;D:\GdPicture.NET 11\Redist [calling]
  534. 1504.de8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
  535. 1504.de8: supR3HardenedDllNotificationCallback: load 000007fefc2a0000 LB 0x00047000 C:\Windows\system32\rsaenh.dll [fFlags=0x0]
  536. 1504.de8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\rsaenh.dll [lacks WinVerifyTrust]
  537. 1504.de8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefc2a0000 'C:\Windows\system32\rsaenh.dll'
  538. 1504.de8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
  539. 1504.de8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\ADVAPI32.dll (Input=ADVAPI32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000706460:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;D:\app\Michal\product\11.2.0\client_2\bin;D:\app\Michal\product\11.2.0\client_1\bin;C:\Program Files (x86)\CollabNet;C:\Program Files (x86)\Embarcadero\RAD Studio\9.0\bin;C:\Users\Public\Documents\RAD Studio\9.0\Bpl;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\TortoiseSVN\bin;C:\Program Files (x86)\MKVToolNix;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\VSShell\Common7\IDE\;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files (x86)\Microsoft SQL Server\100\DTS\Binn\;C:\Program Files (x86)\Developer Express.VCL\Library\RS16;C:\Program Files\Microsoft\Web Platform Installer\;C:\Program Files (x86)\Microsoft ASP.NET\ASP.NET Web Pages\v1.0\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\OpenVPN\bin;C:\Program Files (x86)\Sudowin\Clients\Console;D:\Zend\MySQL55\bin;C:\Program Files (x86)\ExchangeMapi\;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Skype\Phone\;C:\Program Files\TortoiseGit\bin;D:\GdPicture.NET 11\Redist;D:\GdPicture.NET 8\Redist;C:\Program Files\Microsoft SQL Server\120\Tools\Binn\;C:\Program Files\Microsoft SQL Server\130\Tools\Binn\;C:\Program Files\Git\cmd;D:\ANDROID\sdk\platform-tools;D:\GdPicture.NET 11\Redist [calling]
  540. 1504.de8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefe8b0000 'C:\Windows\system32\ADVAPI32.dll'
  541. 1504.de8: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\cryptbase.dll)
  542. 1504.de8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\cryptbase.dll
  543. 1504.de8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\CRYPTBASE.dll (Input=CRYPTBASE.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000706460:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;D:\app\Michal\product\11.2.0\client_2\bin;D:\app\Michal\product\11.2.0\client_1\bin;C:\Program Files (x86)\CollabNet;C:\Program Files (x86)\Embarcadero\RAD Studio\9.0\bin;C:\Users\Public\Documents\RAD Studio\9.0\Bpl;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\TortoiseSVN\bin;C:\Program Files (x86)\MKVToolNix;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\VSShell\Common7\IDE\;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files (x86)\Microsoft SQL Server\100\DTS\Binn\;C:\Program Files (x86)\Developer Express.VCL\Library\RS16;C:\Program Files\Microsoft\Web Platform Installer\;C:\Program Files (x86)\Microsoft ASP.NET\ASP.NET Web Pages\v1.0\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\OpenVPN\bin;C:\Program Files (x86)\Sudowin\Clients\Console;D:\Zend\MySQL55\bin;C:\Program Files (x86)\ExchangeMapi\;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Skype\Phone\;C:\Program Files\TortoiseGit\bin;D:\GdPicture.NET 11\Redist;D:\GdPicture.NET 8\Redist;C:\Program Files\Microsoft SQL Server\120\Tools\Binn\;C:\Program Files\Microsoft SQL Server\130\Tools\Binn\;C:\Program Files\Git\cmd;D:\ANDROID\sdk\platform-tools;D:\GdPicture.NET 11\Redist [calling]
  544. 1504.de8: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cryptbase.dll [lacks WinVerifyTrust]
  545. 1504.de8: supR3HardenedDllNotificationCallback: load 000007fefcc20000 LB 0x0000f000 C:\Windows\system32\CRYPTBASE.dll [fFlags=0x0]
  546. 1504.de8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cryptbase.dll [lacks WinVerifyTrust]
  547. 1504.de8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefcc20000 'C:\Windows\system32\CRYPTBASE.dll'
  548. 1504.de8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\kernel32.dll [lacks WinVerifyTrust]
  549. 1504.de8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\kernel32.dll (Input=kernel32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000706460:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;D:\app\Michal\product\11.2.0\client_2\bin;D:\app\Michal\product\11.2.0\client_1\bin;C:\Program Files (x86)\CollabNet;C:\Program Files (x86)\Embarcadero\RAD Studio\9.0\bin;C:\Users\Public\Documents\RAD Studio\9.0\Bpl;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\TortoiseSVN\bin;C:\Program Files (x86)\MKVToolNix;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\VSShell\Common7\IDE\;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files (x86)\Microsoft SQL Server\100\DTS\Binn\;C:\Program Files (x86)\Developer Express.VCL\Library\RS16;C:\Program Files\Microsoft\Web Platform Installer\;C:\Program Files (x86)\Microsoft ASP.NET\ASP.NET Web Pages\v1.0\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\OpenVPN\bin;C:\Program Files (x86)\Sudowin\Clients\Console;D:\Zend\MySQL55\bin;C:\Program Files (x86)\ExchangeMapi\;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Skype\Phone\;C:\Program Files\TortoiseGit\bin;D:\GdPicture.NET 11\Redist;D:\GdPicture.NET 8\Redist;C:\Program Files\Microsoft SQL Server\120\Tools\Binn\;C:\Program Files\Microsoft SQL Server\130\Tools\Binn\;C:\Program Files\Git\cmd;D:\ANDROID\sdk\platform-tools;D:\GdPicture.NET 11\Redist [calling]
  550. 1504.de8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=0000000076db0000 'C:\Windows\system32\kernel32.dll'
  551. 1504.de8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\wintrust.dll [lacks WinVerifyTrust]
  552. 1504.de8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\WINTRUST.DLL (Input=WINTRUST.DLL, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000706460:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;D:\app\Michal\product\11.2.0\client_2\bin;D:\app\Michal\product\11.2.0\client_1\bin;C:\Program Files (x86)\CollabNet;C:\Program Files (x86)\Embarcadero\RAD Studio\9.0\bin;C:\Users\Public\Documents\RAD Studio\9.0\Bpl;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\TortoiseSVN\bin;C:\Program Files (x86)\MKVToolNix;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\VSShell\Common7\IDE\;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files (x86)\Microsoft SQL Server\100\DTS\Binn\;C:\Program Files (x86)\Developer Express.VCL\Library\RS16;C:\Program Files\Microsoft\Web Platform Installer\;C:\Program Files (x86)\Microsoft ASP.NET\ASP.NET Web Pages\v1.0\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\OpenVPN\bin;C:\Program Files (x86)\Sudowin\Clients\Console;D:\Zend\MySQL55\bin;C:\Program Files (x86)\ExchangeMapi\;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Skype\Phone\;C:\Program Files\TortoiseGit\bin;D:\GdPicture.NET 11\Redist;D:\GdPicture.NET 8\Redist;C:\Program Files\Microsoft SQL Server\120\Tools\Binn\;C:\Program Files\Microsoft SQL Server\130\Tools\Binn\;C:\Program Files\Git\cmd;D:\ANDROID\sdk\platform-tools;D:\GdPicture.NET 11\Redist [calling]
  553. 1504.de8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefd0e0000 'C:\Windows\system32\WINTRUST.DLL'
  554. 1504.de8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\crypt32.dll [lacks WinVerifyTrust]
  555. 1504.de8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\CRYPT32.dll (rcNtResolve=0xc0150008) *pfFlags=0x1002 pwszSearchPath=0000000000706460:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;D:\app\Michal\product\11.2.0\client_2\bin;D:\app\Michal\product\11.2.0\client_1\bin;C:\Program Files (x86)\CollabNet;C:\Program Files (x86)\Embarcadero\RAD Studio\9.0\bin;C:\Users\Public\Documents\RAD Studio\9.0\Bpl;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\TortoiseSVN\bin;C:\Program Files (x86)\MKVToolNix;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\VSShell\Common7\IDE\;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files (x86)\Microsoft SQL Server\100\DTS\Binn\;C:\Program Files (x86)\Developer Express.VCL\Library\RS16;C:\Program Files\Microsoft\Web Platform Installer\;C:\Program Files (x86)\Microsoft ASP.NET\ASP.NET Web Pages\v1.0\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\OpenVPN\bin;C:\Program Files (x86)\Sudowin\Clients\Console;D:\Zend\MySQL55\bin;C:\Program Files (x86)\ExchangeMapi\;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Skype\Phone\;C:\Program Files\TortoiseGit\bin;D:\GdPicture.NET 11\Redist;D:\GdPicture.NET 8\Redist;C:\Program Files\Microsoft SQL Server\120\Tools\Binn\;C:\Program Files\Microsoft SQL Server\130\Tools\Binn\;C:\Program Files\Git\cmd;D:\ANDROID\sdk\platform-tools;D:\GdPicture.NET 11\Redist [calling]
  556. 1504.de8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefcf40000 'C:\Windows\system32\CRYPT32.dll'
  557. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  558. 1504.de8: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\imagehlp.dll)
  559. 1504.de8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\imagehlp.dll
  560. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  561. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  562. 1504.de8: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  563. 1504.de8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\imagehlp.dll (Input=imagehlp.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000706460:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;D:\app\Michal\product\11.2.0\client_2\bin;D:\app\Michal\product\11.2.0\client_1\bin;C:\Program Files (x86)\CollabNet;C:\Program Files (x86)\Embarcadero\RAD Studio\9.0\bin;C:\Users\Public\Documents\RAD Studio\9.0\Bpl;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\TortoiseSVN\bin;C:\Program Files (x86)\MKVToolNix;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\VSShell\Common7\IDE\;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files (x86)\Microsoft SQL Server\100\DTS\Binn\;C:\Program Files (x86)\Developer Express.VCL\Library\RS16;C:\Program Files\Microsoft\Web Platform Installer\;C:\Program Files (x86)\Microsoft ASP.NET\ASP.NET Web Pages\v1.0\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\OpenVPN\bin;C:\Program Files (x86)\Sudowin\Clients\Console;D:\Zend\MySQL55\bin;C:\Program Files (x86)\ExchangeMapi\;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Skype\Phone\;C:\Program Files\TortoiseGit\bin;D:\GdPicture.NET 11\Redist;D:\GdPicture.NET 8\Redist;C:\Program Files\Microsoft SQL Server\120\Tools\Binn\;C:\Program Files\Microsoft SQL Server\130\Tools\Binn\;C:\Program Files\Git\cmd;D:\ANDROID\sdk\platform-tools;D:\GdPicture.NET 11\Redist [calling]
  564. 1504.de8: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\imagehlp.dll [lacks WinVerifyTrust]
  565. 1504.de8: supR3HardenedDllNotificationCallback: load 000007fefecc0000 LB 0x00017000 C:\Windows\system32\imagehlp.dll [fFlags=0x0]
  566. 1504.de8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\imagehlp.dll [lacks WinVerifyTrust]
  567. 1504.de8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefecc0000 'C:\Windows\system32\imagehlp.dll'
  568. 1504.de8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cryptsp.dll [lacks WinVerifyTrust]
  569. 1504.de8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\CRYPTSP.dll (Input=CRYPTSP.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000706460:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;D:\app\Michal\product\11.2.0\client_2\bin;D:\app\Michal\product\11.2.0\client_1\bin;C:\Program Files (x86)\CollabNet;C:\Program Files (x86)\Embarcadero\RAD Studio\9.0\bin;C:\Users\Public\Documents\RAD Studio\9.0\Bpl;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\TortoiseSVN\bin;C:\Program Files (x86)\MKVToolNix;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\VSShell\Common7\IDE\;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files (x86)\Microsoft SQL Server\100\DTS\Binn\;C:\Program Files (x86)\Developer Express.VCL\Library\RS16;C:\Program Files\Microsoft\Web Platform Installer\;C:\Program Files (x86)\Microsoft ASP.NET\ASP.NET Web Pages\v1.0\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\OpenVPN\bin;C:\Program Files (x86)\Sudowin\Clients\Console;D:\Zend\MySQL55\bin;C:\Program Files (x86)\ExchangeMapi\;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Skype\Phone\;C:\Program Files\TortoiseGit\bin;D:\GdPicture.NET 11\Redist;D:\GdPicture.NET 8\Redist;C:\Program Files\Microsoft SQL Server\120\Tools\Binn\;C:\Program Files\Microsoft SQL Server\130\Tools\Binn\;C:\Program Files\Git\cmd;D:\ANDROID\sdk\platform-tools;D:\GdPicture.NET 11\Redist [calling]
  570. 1504.de8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefc5a0000 'C:\Windows\system32\CRYPTSP.dll'
  571. 1504.de8: \Device\HarddiskVolume2\Windows\System32\user32.dll: Owner is administrators group.
  572. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'gdi32.dll'.
  573. 1504.de8: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\user32.dll)
  574. 1504.de8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\user32.dll
  575. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  576. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  577. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'user32.dll'.
  578. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'lpk.dll'.
  579. 1504.de8: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\gdi32.dll)
  580. 1504.de8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\gdi32.dll
  581. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'lpk.dll'...
  582. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'lpk.dll' -> '\Device\HarddiskVolume2\Windows\System32\lpk.dll' [rcNtRedir=0xc0150008]
  583. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'gdi32.dll'.
  584. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'user32.dll'.
  585. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'usp10.dll'.
  586. 1504.de8: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\lpk.dll)
  587. 1504.de8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\lpk.dll
  588. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  589. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  590. 1504.de8: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
  591. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'usp10.dll'...
  592. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'usp10.dll' -> '\Device\HarddiskVolume2\Windows\System32\usp10.dll' [rcNtRedir=0xc0150008]
  593. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  594. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'user32.dll'.
  595. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'gdi32.dll'.
  596. 1504.de8: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\usp10.dll)
  597. 1504.de8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\usp10.dll
  598. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  599. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  600. 1504.de8: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
  601. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  602. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  603. 1504.de8: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  604. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  605. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  606. 1504.de8: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  607. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  608. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  609. 1504.de8: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
  610. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  611. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  612. 1504.de8: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  613. 1504.de8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\USER32.dll (Input=USER32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000706460:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;D:\app\Michal\product\11.2.0\client_2\bin;D:\app\Michal\product\11.2.0\client_1\bin;C:\Program Files (x86)\CollabNet;C:\Program Files (x86)\Embarcadero\RAD Studio\9.0\bin;C:\Users\Public\Documents\RAD Studio\9.0\Bpl;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\TortoiseSVN\bin;C:\Program Files (x86)\MKVToolNix;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\VSShell\Common7\IDE\;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files (x86)\Microsoft SQL Server\100\DTS\Binn\;C:\Program Files (x86)\Developer Express.VCL\Library\RS16;C:\Program Files\Microsoft\Web Platform Installer\;C:\Program Files (x86)\Microsoft ASP.NET\ASP.NET Web Pages\v1.0\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\OpenVPN\bin;C:\Program Files (x86)\Sudowin\Clients\Console;D:\Zend\MySQL55\bin;C:\Program Files (x86)\ExchangeMapi\;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Skype\Phone\;C:\Program Files\TortoiseGit\bin;D:\GdPicture.NET 11\Redist;D:\GdPicture.NET 8\Redist;C:\Program Files\Microsoft SQL Server\120\Tools\Binn\;C:\Program Files\Microsoft SQL Server\130\Tools\Binn\;C:\Program Files\Git\cmd;D:\ANDROID\sdk\platform-tools;D:\GdPicture.NET 11\Redist [calling]
  614. 1504.de8: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
  615. 1504.de8: supR3HardenedDllNotificationCallback: load 0000000076ed0000 LB 0x000fa000 C:\Windows\system32\USER32.dll [fFlags=0x0]
  616. 1504.de8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
  617. 1504.de8: supR3HardenedDllNotificationCallback: load 000007fefd1c0000 LB 0x00067000 C:\Windows\system32\GDI32.dll [fFlags=0x0]
  618. 1504.de8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  619. 1504.de8: supR3HardenedDllNotificationCallback: load 000007fefe8a0000 LB 0x0000e000 C:\Windows\system32\LPK.dll [fFlags=0x0]
  620. 1504.de8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\lpk.dll [lacks WinVerifyTrust]
  621. 1504.de8: supR3HardenedDllNotificationCallback: load 000007feff170000 LB 0x000c9000 C:\Windows\system32\USP10.dll [fFlags=0x0]
  622. 1504.de8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\usp10.dll [lacks WinVerifyTrust]
  623. 1504.de8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  624. 1504.de8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\gdi32.dll (Input=gdi32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000706460:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;D:\app\Michal\product\11.2.0\client_2\bin;D:\app\Michal\product\11.2.0\client_1\bin;C:\Program Files (x86)\CollabNet;C:\Program Files (x86)\Embarcadero\RAD Studio\9.0\bin;C:\Users\Public\Documents\RAD Studio\9.0\Bpl;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\TortoiseSVN\bin;C:\Program Files (x86)\MKVToolNix;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\VSShell\Common7\IDE\;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files (x86)\Microsoft SQL Server\100\DTS\Binn\;C:\Program Files (x86)\Developer Express.VCL\Library\RS16;C:\Program Files\Microsoft\Web Platform Installer\;C:\Program Files (x86)\Microsoft ASP.NET\ASP.NET Web Pages\v1.0\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\OpenVPN\bin;C:\Program Files (x86)\Sudowin\Clients\Console;D:\Zend\MySQL55\bin;C:\Program Files (x86)\ExchangeMapi\;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Skype\Phone\;C:\Program Files\TortoiseGit\bin;D:\GdPicture.NET 11\Redist;D:\GdPicture.NET 8\Redist;C:\Program Files\Microsoft SQL Server\120\Tools\Binn\;C:\Program Files\Microsoft SQL Server\130\Tools\Binn\;C:\Program Files\Git\cmd;D:\ANDROID\sdk\platform-tools;D:\GdPicture.NET 11\Redist [calling]
  625. 1504.de8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefd1c0000 'C:\Windows\system32\gdi32.dll'
  626. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'user32.dll'.
  627. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'gdi32.dll'.
  628. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'msctf.dll'.
  629. 1504.de8: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\imm32.dll)
  630. 1504.de8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\imm32.dll
  631. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msctf.dll'...
  632. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msctf.dll' -> '\Device\HarddiskVolume2\Windows\System32\msctf.dll' [rcNtRedir=0xc0150008]
  633. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  634. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'user32.dll'.
  635. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'gdi32.dll'.
  636. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'imm32.dll'.
  637. 1504.de8: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\msctf.dll)
  638. 1504.de8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\msctf.dll
  639. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  640. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  641. 1504.de8: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  642. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  643. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  644. 1504.de8: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
  645. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'imm32.dll'...
  646. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'imm32.dll' -> '\Device\HarddiskVolume2\Windows\System32\imm32.dll' [rcNtRedir=0xc0150008]
  647. 1504.de8: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\imm32.dll [lacks WinVerifyTrust]
  648. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  649. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  650. 1504.de8: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  651. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  652. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  653. 1504.de8: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
  654. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  655. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  656. 1504.de8: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  657. 1504.de8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\IMM32.DLL (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000706460:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;D:\app\Michal\product\11.2.0\client_2\bin;D:\app\Michal\product\11.2.0\client_1\bin;C:\Program Files (x86)\CollabNet;C:\Program Files (x86)\Embarcadero\RAD Studio\9.0\bin;C:\Users\Public\Documents\RAD Studio\9.0\Bpl;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\TortoiseSVN\bin;C:\Program Files (x86)\MKVToolNix;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\VSShell\Common7\IDE\;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files (x86)\Microsoft SQL Server\100\DTS\Binn\;C:\Program Files (x86)\Developer Express.VCL\Library\RS16;C:\Program Files\Microsoft\Web Platform Installer\;C:\Program Files (x86)\Microsoft ASP.NET\ASP.NET Web Pages\v1.0\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\OpenVPN\bin;C:\Program Files (x86)\Sudowin\Clients\Console;D:\Zend\MySQL55\bin;C:\Program Files (x86)\ExchangeMapi\;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Skype\Phone\;C:\Program Files\TortoiseGit\bin;D:\GdPicture.NET 11\Redist;D:\GdPicture.NET 8\Redist;C:\Program Files\Microsoft SQL Server\120\Tools\Binn\;C:\Program Files\Microsoft SQL Server\130\Tools\Binn\;C:\Program Files\Git\cmd;D:\ANDROID\sdk\platform-tools;D:\GdPicture.NET 11\Redist [calling]
  658. 1504.de8: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\imm32.dll [lacks WinVerifyTrust]
  659. 1504.de8: supR3HardenedDllNotificationCallback: load 000007fefe870000 LB 0x0002e000 C:\Windows\system32\IMM32.DLL [fFlags=0x0]
  660. 1504.de8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\imm32.dll [lacks WinVerifyTrust]
  661. 1504.de8: supR3HardenedDllNotificationCallback: load 000007fefef80000 LB 0x00109000 C:\Windows\system32\MSCTF.dll [fFlags=0x0]
  662. 1504.de8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msctf.dll [lacks WinVerifyTrust]
  663. 1504.de8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefe870000 'C:\Windows\system32\IMM32.DLL'
  664. 1504.de8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=0000000076ed0000 'C:\Windows\system32\USER32.dll'
  665. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'bcrypt.dll'.
  666. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcrt.dll'.
  667. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'msasn1.dll'.
  668. 1504.de8: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\ncrypt.dll)
  669. 1504.de8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\ncrypt.dll
  670. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msasn1.dll'...
  671. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msasn1.dll' -> '\Device\HarddiskVolume2\Windows\System32\msasn1.dll' [rcNtRedir=0xc0150008]
  672. 1504.de8: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msasn1.dll [lacks WinVerifyTrust]
  673. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  674. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  675. 1504.de8: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  676. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'bcrypt.dll'...
  677. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'bcrypt.dll' -> '\Device\HarddiskVolume2\Windows\System32\bcrypt.dll' [rcNtRedir=0xc0150008]
  678. 1504.de8: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\bcrypt.dll [lacks WinVerifyTrust]
  679. 1504.de8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\ncrypt.dll (Input=ncrypt.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000706460:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;D:\app\Michal\product\11.2.0\client_2\bin;D:\app\Michal\product\11.2.0\client_1\bin;C:\Program Files (x86)\CollabNet;C:\Program Files (x86)\Embarcadero\RAD Studio\9.0\bin;C:\Users\Public\Documents\RAD Studio\9.0\Bpl;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\TortoiseSVN\bin;C:\Program Files (x86)\MKVToolNix;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\VSShell\Common7\IDE\;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files (x86)\Microsoft SQL Server\100\DTS\Binn\;C:\Program Files (x86)\Developer Express.VCL\Library\RS16;C:\Program Files\Microsoft\Web Platform Installer\;C:\Program Files (x86)\Microsoft ASP.NET\ASP.NET Web Pages\v1.0\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\OpenVPN\bin;C:\Program Files (x86)\Sudowin\Clients\Console;D:\Zend\MySQL55\bin;C:\Program Files (x86)\ExchangeMapi\;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Skype\Phone\;C:\Program Files\TortoiseGit\bin;D:\GdPicture.NET 11\Redist;D:\GdPicture.NET 8\Redist;C:\Program Files\Microsoft SQL Server\120\Tools\Binn\;C:\Program Files\Microsoft SQL Server\130\Tools\Binn\;C:\Program Files\Git\cmd;D:\ANDROID\sdk\platform-tools;D:\GdPicture.NET 11\Redist [calling]
  680. 1504.de8: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\ncrypt.dll [lacks WinVerifyTrust]
  681. 1504.de8: supR3HardenedDllNotificationCallback: load 000007fefc720000 LB 0x0004e000 C:\Windows\system32\ncrypt.dll [fFlags=0x0]
  682. 1504.de8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\ncrypt.dll [lacks WinVerifyTrust]
  683. 1504.de8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefc720000 'C:\Windows\system32\ncrypt.dll'
  684. 1504.de8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\bcrypt.dll [lacks WinVerifyTrust]
  685. 1504.de8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\bcrypt.dll (Input=bcrypt.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000706460:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;D:\app\Michal\product\11.2.0\client_2\bin;D:\app\Michal\product\11.2.0\client_1\bin;C:\Program Files (x86)\CollabNet;C:\Program Files (x86)\Embarcadero\RAD Studio\9.0\bin;C:\Users\Public\Documents\RAD Studio\9.0\Bpl;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\TortoiseSVN\bin;C:\Program Files (x86)\MKVToolNix;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\VSShell\Common7\IDE\;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files (x86)\Microsoft SQL Server\100\DTS\Binn\;C:\Program Files (x86)\Developer Express.VCL\Library\RS16;C:\Program Files\Microsoft\Web Platform Installer\;C:\Program Files (x86)\Microsoft ASP.NET\ASP.NET Web Pages\v1.0\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\OpenVPN\bin;C:\Program Files (x86)\Sudowin\Clients\Console;D:\Zend\MySQL55\bin;C:\Program Files (x86)\ExchangeMapi\;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Skype\Phone\;C:\Program Files\TortoiseGit\bin;D:\GdPicture.NET 11\Redist;D:\GdPicture.NET 8\Redist;C:\Program Files\Microsoft SQL Server\120\Tools\Binn\;C:\Program Files\Microsoft SQL Server\130\Tools\Binn\;C:\Program Files\Git\cmd;D:\ANDROID\sdk\platform-tools;D:\GdPicture.NET 11\Redist [calling]
  686. 1504.de8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefc6f0000 'C:\Windows\system32\bcrypt.dll'
  687. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  688. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #17 'rpcrt4.dll'.
  689. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #18 'profapi.dll'.
  690. 1504.de8: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\userenv.dll)
  691. 1504.de8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\userenv.dll
  692. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'profapi.dll'...
  693. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'profapi.dll' -> '\Device\HarddiskVolume2\Windows\System32\profapi.dll' [rcNtRedir=0xc0150008]
  694. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  695. 1504.de8: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\profapi.dll)
  696. 1504.de8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\profapi.dll
  697. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  698. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  699. 1504.de8: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  700. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  701. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  702. 1504.de8: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  703. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  704. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  705. 1504.de8: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  706. 1504.de8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\USERENV.dll (Input=USERENV.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000706460:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;D:\app\Michal\product\11.2.0\client_2\bin;D:\app\Michal\product\11.2.0\client_1\bin;C:\Program Files (x86)\CollabNet;C:\Program Files (x86)\Embarcadero\RAD Studio\9.0\bin;C:\Users\Public\Documents\RAD Studio\9.0\Bpl;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\TortoiseSVN\bin;C:\Program Files (x86)\MKVToolNix;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\VSShell\Common7\IDE\;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files (x86)\Microsoft SQL Server\100\DTS\Binn\;C:\Program Files (x86)\Developer Express.VCL\Library\RS16;C:\Program Files\Microsoft\Web Platform Installer\;C:\Program Files (x86)\Microsoft ASP.NET\ASP.NET Web Pages\v1.0\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\OpenVPN\bin;C:\Program Files (x86)\Sudowin\Clients\Console;D:\Zend\MySQL55\bin;C:\Program Files (x86)\ExchangeMapi\;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Skype\Phone\;C:\Program Files\TortoiseGit\bin;D:\GdPicture.NET 11\Redist;D:\GdPicture.NET 8\Redist;C:\Program Files\Microsoft SQL Server\120\Tools\Binn\;C:\Program Files\Microsoft SQL Server\130\Tools\Binn\;C:\Program Files\Git\cmd;D:\ANDROID\sdk\platform-tools;D:\GdPicture.NET 11\Redist [calling]
  707. 1504.de8: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\userenv.dll [lacks WinVerifyTrust]
  708. 1504.de8: supR3HardenedDllNotificationCallback: load 000007fefcf10000 LB 0x0001e000 C:\Windows\system32\USERENV.dll [fFlags=0x0]
  709. 1504.de8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\userenv.dll [lacks WinVerifyTrust]
  710. 1504.de8: supR3HardenedDllNotificationCallback: load 000007fefcd90000 LB 0x0000f000 C:\Windows\system32\profapi.dll [fFlags=0x0]
  711. 1504.de8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\profapi.dll [lacks WinVerifyTrust]
  712. 1504.de8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefcf10000 'C:\Windows\system32\USERENV.dll'
  713. 1504.de8: supR3HardenedMonitor_LdrLoadDll: pName=API-MS-Win-Security-SDDL-L1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000706460:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;D:\app\Michal\product\11.2.0\client_2\bin;D:\app\Michal\product\11.2.0\client_1\bin;C:\Program Files (x86)\CollabNet;C:\Program Files (x86)\Embarcadero\RAD Studio\9.0\bin;C:\Users\Public\Documents\RAD Studio\9.0\Bpl;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\TortoiseSVN\bin;C:\Program Files (x86)\MKVToolNix;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\VSShell\Common7\IDE\;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files (x86)\Microsoft SQL Server\100\DTS\Binn\;C:\Program Files (x86)\Developer Express.VCL\Library\RS16;C:\Program Files\Microsoft\Web Platform Installer\;C:\Program Files (x86)\Microsoft ASP.NET\ASP.NET Web Pages\v1.0\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\OpenVPN\bin;C:\Program Files (x86)\Sudowin\Clients\Console;D:\Zend\MySQL55\bin;C:\Program Files (x86)\ExchangeMapi\;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Skype\Phone\;C:\Program Files\TortoiseGit\bin;D:\GdPicture.NET 11\Redist;D:\GdPicture.NET 8\Redist;C:\Program Files\Microsoft SQL Server\120\Tools\Binn\;C:\Program Files\Microsoft SQL Server\130\Tools\Binn\;C:\Program Files\Git\cmd;D:\ANDROID\sdk\platform-tools;D:\GdPicture.NET 11\Redist [calling]
  714. 1504.de8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefea40000 'API-MS-Win-Security-SDDL-L1-1-0.dll'
  715. 1504.de8: supR3HardenedMonitor_LdrLoadDll: pName=API-MS-Win-Security-SDDL-L1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000706460:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;D:\app\Michal\product\11.2.0\client_2\bin;D:\app\Michal\product\11.2.0\client_1\bin;C:\Program Files (x86)\CollabNet;C:\Program Files (x86)\Embarcadero\RAD Studio\9.0\bin;C:\Users\Public\Documents\RAD Studio\9.0\Bpl;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\TortoiseSVN\bin;C:\Program Files (x86)\MKVToolNix;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\VSShell\Common7\IDE\;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files (x86)\Microsoft SQL Server\100\DTS\Binn\;C:\Program Files (x86)\Developer Express.VCL\Library\RS16;C:\Program Files\Microsoft\Web Platform Installer\;C:\Program Files (x86)\Microsoft ASP.NET\ASP.NET Web Pages\v1.0\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\OpenVPN\bin;C:\Program Files (x86)\Sudowin\Clients\Console;D:\Zend\MySQL55\bin;C:\Program Files (x86)\ExchangeMapi\;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Skype\Phone\;C:\Program Files\TortoiseGit\bin;D:\GdPicture.NET 11\Redist;D:\GdPicture.NET 8\Redist;C:\Program Files\Microsoft SQL Server\120\Tools\Binn\;C:\Program Files\Microsoft SQL Server\130\Tools\Binn\;C:\Program Files\Git\cmd;D:\ANDROID\sdk\platform-tools;D:\GdPicture.NET 11\Redist [calling]
  716. 1504.de8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefea40000 'API-MS-Win-Security-SDDL-L1-1-0.dll'
  717. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  718. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #16 'rpcrt4.dll'.
  719. 1504.de8: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\gpapi.dll)
  720. 1504.de8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\gpapi.dll
  721. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  722. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  723. 1504.de8: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  724. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  725. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  726. 1504.de8: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  727. 1504.de8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\GPAPI.dll (Input=GPAPI.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000706460:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;D:\app\Michal\product\11.2.0\client_2\bin;D:\app\Michal\product\11.2.0\client_1\bin;C:\Program Files (x86)\CollabNet;C:\Program Files (x86)\Embarcadero\RAD Studio\9.0\bin;C:\Users\Public\Documents\RAD Studio\9.0\Bpl;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\TortoiseSVN\bin;C:\Program Files (x86)\MKVToolNix;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\VSShell\Common7\IDE\;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files (x86)\Microsoft SQL Server\100\DTS\Binn\;C:\Program Files (x86)\Developer Express.VCL\Library\RS16;C:\Program Files\Microsoft\Web Platform Installer\;C:\Program Files (x86)\Microsoft ASP.NET\ASP.NET Web Pages\v1.0\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\OpenVPN\bin;C:\Program Files (x86)\Sudowin\Clients\Console;D:\Zend\MySQL55\bin;C:\Program Files (x86)\ExchangeMapi\;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Skype\Phone\;C:\Program Files\TortoiseGit\bin;D:\GdPicture.NET 11\Redist;D:\GdPicture.NET 8\Redist;C:\Program Files\Microsoft SQL Server\120\Tools\Binn\;C:\Program Files\Microsoft SQL Server\130\Tools\Binn\;C:\Program Files\Git\cmd;D:\ANDROID\sdk\platform-tools;D:\GdPicture.NET 11\Redist [calling]
  728. 1504.de8: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\gpapi.dll [lacks WinVerifyTrust]
  729. 1504.de8: supR3HardenedDllNotificationCallback: load 000007fefbff0000 LB 0x0001b000 C:\Windows\system32\GPAPI.dll [fFlags=0x0]
  730. 1504.de8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\gpapi.dll [lacks WinVerifyTrust]
  731. 1504.de8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefbff0000 'C:\Windows\system32\GPAPI.dll'
  732. 1504.de8: supR3HardenedMonitor_LdrLoadDll: pName=API-MS-WIN-Service-Management-L1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000706460:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;D:\app\Michal\product\11.2.0\client_2\bin;D:\app\Michal\product\11.2.0\client_1\bin;C:\Program Files (x86)\CollabNet;C:\Program Files (x86)\Embarcadero\RAD Studio\9.0\bin;C:\Users\Public\Documents\RAD Studio\9.0\Bpl;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\TortoiseSVN\bin;C:\Program Files (x86)\MKVToolNix;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\VSShell\Common7\IDE\;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files (x86)\Microsoft SQL Server\100\DTS\Binn\;C:\Program Files (x86)\Developer Express.VCL\Library\RS16;C:\Program Files\Microsoft\Web Platform Installer\;C:\Program Files (x86)\Microsoft ASP.NET\ASP.NET Web Pages\v1.0\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\OpenVPN\bin;C:\Program Files (x86)\Sudowin\Clients\Console;D:\Zend\MySQL55\bin;C:\Program Files (x86)\ExchangeMapi\;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Skype\Phone\;C:\Program Files\TortoiseGit\bin;D:\GdPicture.NET 11\Redist;D:\GdPicture.NET 8\Redist;C:\Program Files\Microsoft SQL Server\120\Tools\Binn\;C:\Program Files\Microsoft SQL Server\130\Tools\Binn\;C:\Program Files\Git\cmd;D:\ANDROID\sdk\platform-tools;D:\GdPicture.NET 11\Redist [calling]
  733. 1504.de8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefea40000 'API-MS-WIN-Service-Management-L1-1-0.dll'
  734. 1504.de8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  735. 1504.de8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\rpcrt4.dll (Input=rpcrt4.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000706460:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;D:\app\Michal\product\11.2.0\client_2\bin;D:\app\Michal\product\11.2.0\client_1\bin;C:\Program Files (x86)\CollabNet;C:\Program Files (x86)\Embarcadero\RAD Studio\9.0\bin;C:\Users\Public\Documents\RAD Studio\9.0\Bpl;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\TortoiseSVN\bin;C:\Program Files (x86)\MKVToolNix;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\VSShell\Common7\IDE\;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files (x86)\Microsoft SQL Server\100\DTS\Binn\;C:\Program Files (x86)\Developer Express.VCL\Library\RS16;C:\Program Files\Microsoft\Web Platform Installer\;C:\Program Files (x86)\Microsoft ASP.NET\ASP.NET Web Pages\v1.0\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\OpenVPN\bin;C:\Program Files (x86)\Sudowin\Clients\Console;D:\Zend\MySQL55\bin;C:\Program Files (x86)\ExchangeMapi\;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Skype\Phone\;C:\Program Files\TortoiseGit\bin;D:\GdPicture.NET 11\Redist;D:\GdPicture.NET 8\Redist;C:\Program Files\Microsoft SQL Server\120\Tools\Binn\;C:\Program Files\Microsoft SQL Server\130\Tools\Binn\;C:\Program Files\Git\cmd;D:\ANDROID\sdk\platform-tools;D:\GdPicture.NET 11\Redist [calling]
  736. 1504.de8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefedd0000 'C:\Windows\system32\rpcrt4.dll'
  737. 1504.de8: supR3HardenedMonitor_LdrLoadDll: pName=API-MS-WIN-Service-Management-L2-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000706460:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;D:\app\Michal\product\11.2.0\client_2\bin;D:\app\Michal\product\11.2.0\client_1\bin;C:\Program Files (x86)\CollabNet;C:\Program Files (x86)\Embarcadero\RAD Studio\9.0\bin;C:\Users\Public\Documents\RAD Studio\9.0\Bpl;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\TortoiseSVN\bin;C:\Program Files (x86)\MKVToolNix;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\VSShell\Common7\IDE\;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files (x86)\Microsoft SQL Server\100\DTS\Binn\;C:\Program Files (x86)\Developer Express.VCL\Library\RS16;C:\Program Files\Microsoft\Web Platform Installer\;C:\Program Files (x86)\Microsoft ASP.NET\ASP.NET Web Pages\v1.0\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\OpenVPN\bin;C:\Program Files (x86)\Sudowin\Clients\Console;D:\Zend\MySQL55\bin;C:\Program Files (x86)\ExchangeMapi\;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Skype\Phone\;C:\Program Files\TortoiseGit\bin;D:\GdPicture.NET 11\Redist;D:\GdPicture.NET 8\Redist;C:\Program Files\Microsoft SQL Server\120\Tools\Binn\;C:\Program Files\Microsoft SQL Server\130\Tools\Binn\;C:\Program Files\Git\cmd;D:\ANDROID\sdk\platform-tools;D:\GdPicture.NET 11\Redist [calling]
  738. 1504.de8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefea40000 'API-MS-WIN-Service-Management-L2-1-0.dll'
  739. 1504.de8: supR3HardenedMonitor_LdrLoadDll: pName=API-MS-Win-Security-SDDL-L1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000706460:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;D:\app\Michal\product\11.2.0\client_2\bin;D:\app\Michal\product\11.2.0\client_1\bin;C:\Program Files (x86)\CollabNet;C:\Program Files (x86)\Embarcadero\RAD Studio\9.0\bin;C:\Users\Public\Documents\RAD Studio\9.0\Bpl;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\TortoiseSVN\bin;C:\Program Files (x86)\MKVToolNix;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\VSShell\Common7\IDE\;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files (x86)\Microsoft SQL Server\100\DTS\Binn\;C:\Program Files (x86)\Developer Express.VCL\Library\RS16;C:\Program Files\Microsoft\Web Platform Installer\;C:\Program Files (x86)\Microsoft ASP.NET\ASP.NET Web Pages\v1.0\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\OpenVPN\bin;C:\Program Files (x86)\Sudowin\Clients\Console;D:\Zend\MySQL55\bin;C:\Program Files (x86)\ExchangeMapi\;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Skype\Phone\;C:\Program Files\TortoiseGit\bin;D:\GdPicture.NET 11\Redist;D:\GdPicture.NET 8\Redist;C:\Program Files\Microsoft SQL Server\120\Tools\Binn\;C:\Program Files\Microsoft SQL Server\130\Tools\Binn\;C:\Program Files\Git\cmd;D:\ANDROID\sdk\platform-tools;D:\GdPicture.NET 11\Redist [calling]
  740. 1504.de8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefea40000 'API-MS-Win-Security-SDDL-L1-1-0.dll'
  741. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  742. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'crypt32.dll'.
  743. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'wldap32.dll'.
  744. 1504.de8: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\cryptnet.dll)
  745. 1504.de8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\cryptnet.dll
  746. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'wldap32.dll'...
  747. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'wldap32.dll' -> '\Device\HarddiskVolume2\Windows\System32\wldap32.dll' [rcNtRedir=0xc0150008]
  748. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  749. 1504.de8: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\Wldap32.dll)
  750. 1504.de8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\Wldap32.dll
  751. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'crypt32.dll'...
  752. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'crypt32.dll' -> '\Device\HarddiskVolume2\Windows\System32\crypt32.dll' [rcNtRedir=0xc0150008]
  753. 1504.de8: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\crypt32.dll [lacks WinVerifyTrust]
  754. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  755. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  756. 1504.de8: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  757. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  758. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  759. 1504.de8: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  760. 1504.de8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\cryptnet.dll (Input=cryptnet.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000706460:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;D:\app\Michal\product\11.2.0\client_2\bin;D:\app\Michal\product\11.2.0\client_1\bin;C:\Program Files (x86)\CollabNet;C:\Program Files (x86)\Embarcadero\RAD Studio\9.0\bin;C:\Users\Public\Documents\RAD Studio\9.0\Bpl;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\TortoiseSVN\bin;C:\Program Files (x86)\MKVToolNix;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\VSShell\Common7\IDE\;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files (x86)\Microsoft SQL Server\100\DTS\Binn\;C:\Program Files (x86)\Developer Express.VCL\Library\RS16;C:\Program Files\Microsoft\Web Platform Installer\;C:\Program Files (x86)\Microsoft ASP.NET\ASP.NET Web Pages\v1.0\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\OpenVPN\bin;C:\Program Files (x86)\Sudowin\Clients\Console;D:\Zend\MySQL55\bin;C:\Program Files (x86)\ExchangeMapi\;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Skype\Phone\;C:\Program Files\TortoiseGit\bin;D:\GdPicture.NET 11\Redist;D:\GdPicture.NET 8\Redist;C:\Program Files\Microsoft SQL Server\120\Tools\Binn\;C:\Program Files\Microsoft SQL Server\130\Tools\Binn\;C:\Program Files\Git\cmd;D:\ANDROID\sdk\platform-tools;D:\GdPicture.NET 11\Redist [calling]
  761. 1504.de8: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
  762. 1504.de8: supR3HardenedDllNotificationCallback: load 000007feee980000 LB 0x00026000 C:\Windows\system32\cryptnet.dll [fFlags=0x0]
  763. 1504.de8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
  764. 1504.de8: supR3HardenedDllNotificationCallback: load 000007fefd3c0000 LB 0x00052000 C:\Windows\system32\WLDAP32.dll [fFlags=0x0]
  765. 1504.de8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\Wldap32.dll [lacks WinVerifyTrust]
  766. 1504.de8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
  767. 1504.de8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x1002 pwszSearchPath=0000000000706460:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;D:\app\Michal\product\11.2.0\client_2\bin;D:\app\Michal\product\11.2.0\client_1\bin;C:\Program Files (x86)\CollabNet;C:\Program Files (x86)\Embarcadero\RAD Studio\9.0\bin;C:\Users\Public\Documents\RAD Studio\9.0\Bpl;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\TortoiseSVN\bin;C:\Program Files (x86)\MKVToolNix;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\VSShell\Common7\IDE\;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files (x86)\Microsoft SQL Server\100\DTS\Binn\;C:\Program Files (x86)\Developer Express.VCL\Library\RS16;C:\Program Files\Microsoft\Web Platform Installer\;C:\Program Files (x86)\Microsoft ASP.NET\ASP.NET Web Pages\v1.0\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\OpenVPN\bin;C:\Program Files (x86)\Sudowin\Clients\Console;D:\Zend\MySQL55\bin;C:\Program Files (x86)\ExchangeMapi\;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Skype\Phone\;C:\Program Files\TortoiseGit\bin;D:\GdPicture.NET 11\Redist;D:\GdPicture.NET 8\Redist;C:\Program Files\Microsoft SQL Server\120\Tools\Binn\;C:\Program Files\Microsoft SQL Server\130\Tools\Binn\;C:\Program Files\Git\cmd;D:\ANDROID\sdk\platform-tools;D:\GdPicture.NET 11\Redist [calling]
  768. 1504.de8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feee980000 'C:\Windows\system32\cryptnet.dll'
  769. 1504.de8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
  770. 1504.de8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x1002 pwszSearchPath=0000000000706460:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;D:\app\Michal\product\11.2.0\client_2\bin;D:\app\Michal\product\11.2.0\client_1\bin;C:\Program Files (x86)\CollabNet;C:\Program Files (x86)\Embarcadero\RAD Studio\9.0\bin;C:\Users\Public\Documents\RAD Studio\9.0\Bpl;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\TortoiseSVN\bin;C:\Program Files (x86)\MKVToolNix;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\VSShell\Common7\IDE\;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files (x86)\Microsoft SQL Server\100\DTS\Binn\;C:\Program Files (x86)\Developer Express.VCL\Library\RS16;C:\Program Files\Microsoft\Web Platform Installer\;C:\Program Files (x86)\Microsoft ASP.NET\ASP.NET Web Pages\v1.0\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\OpenVPN\bin;C:\Program Files (x86)\Sudowin\Clients\Console;D:\Zend\MySQL55\bin;C:\Program Files (x86)\ExchangeMapi\;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Skype\Phone\;C:\Program Files\TortoiseGit\bin;D:\GdPicture.NET 11\Redist;D:\GdPicture.NET 8\Redist;C:\Program Files\Microsoft SQL Server\120\Tools\Binn\;C:\Program Files\Microsoft SQL Server\130\Tools\Binn\;C:\Program Files\Git\cmd;D:\ANDROID\sdk\platform-tools;D:\GdPicture.NET 11\Redist [calling]
  771. 1504.de8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feee980000 'C:\Windows\system32\cryptnet.dll'
  772. 1504.de8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
  773. 1504.de8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x1002 pwszSearchPath=0000000000706460:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;D:\app\Michal\product\11.2.0\client_2\bin;D:\app\Michal\product\11.2.0\client_1\bin;C:\Program Files (x86)\CollabNet;C:\Program Files (x86)\Embarcadero\RAD Studio\9.0\bin;C:\Users\Public\Documents\RAD Studio\9.0\Bpl;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\TortoiseSVN\bin;C:\Program Files (x86)\MKVToolNix;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\VSShell\Common7\IDE\;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files (x86)\Microsoft SQL Server\100\DTS\Binn\;C:\Program Files (x86)\Developer Express.VCL\Library\RS16;C:\Program Files\Microsoft\Web Platform Installer\;C:\Program Files (x86)\Microsoft ASP.NET\ASP.NET Web Pages\v1.0\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\OpenVPN\bin;C:\Program Files (x86)\Sudowin\Clients\Console;D:\Zend\MySQL55\bin;C:\Program Files (x86)\ExchangeMapi\;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Skype\Phone\;C:\Program Files\TortoiseGit\bin;D:\GdPicture.NET 11\Redist;D:\GdPicture.NET 8\Redist;C:\Program Files\Microsoft SQL Server\120\Tools\Binn\;C:\Program Files\Microsoft SQL Server\130\Tools\Binn\;C:\Program Files\Git\cmd;D:\ANDROID\sdk\platform-tools;D:\GdPicture.NET 11\Redist [calling]
  774. 1504.de8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feee980000 'C:\Windows\system32\cryptnet.dll'
  775. 1504.de8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
  776. 1504.de8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x1002 pwszSearchPath=0000000000706460:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;D:\app\Michal\product\11.2.0\client_2\bin;D:\app\Michal\product\11.2.0\client_1\bin;C:\Program Files (x86)\CollabNet;C:\Program Files (x86)\Embarcadero\RAD Studio\9.0\bin;C:\Users\Public\Documents\RAD Studio\9.0\Bpl;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\TortoiseSVN\bin;C:\Program Files (x86)\MKVToolNix;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\VSShell\Common7\IDE\;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files (x86)\Microsoft SQL Server\100\DTS\Binn\;C:\Program Files (x86)\Developer Express.VCL\Library\RS16;C:\Program Files\Microsoft\Web Platform Installer\;C:\Program Files (x86)\Microsoft ASP.NET\ASP.NET Web Pages\v1.0\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\OpenVPN\bin;C:\Program Files (x86)\Sudowin\Clients\Console;D:\Zend\MySQL55\bin;C:\Program Files (x86)\ExchangeMapi\;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Skype\Phone\;C:\Program Files\TortoiseGit\bin;D:\GdPicture.NET 11\Redist;D:\GdPicture.NET 8\Redist;C:\Program Files\Microsoft SQL Server\120\Tools\Binn\;C:\Program Files\Microsoft SQL Server\130\Tools\Binn\;C:\Program Files\Git\cmd;D:\ANDROID\sdk\platform-tools;D:\GdPicture.NET 11\Redist [calling]
  777. 1504.de8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feee980000 'C:\Windows\system32\cryptnet.dll'
  778. 1504.de8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
  779. 1504.de8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x1002 pwszSearchPath=0000000000706460:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;D:\app\Michal\product\11.2.0\client_2\bin;D:\app\Michal\product\11.2.0\client_1\bin;C:\Program Files (x86)\CollabNet;C:\Program Files (x86)\Embarcadero\RAD Studio\9.0\bin;C:\Users\Public\Documents\RAD Studio\9.0\Bpl;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\TortoiseSVN\bin;C:\Program Files (x86)\MKVToolNix;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\VSShell\Common7\IDE\;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files (x86)\Microsoft SQL Server\100\DTS\Binn\;C:\Program Files (x86)\Developer Express.VCL\Library\RS16;C:\Program Files\Microsoft\Web Platform Installer\;C:\Program Files (x86)\Microsoft ASP.NET\ASP.NET Web Pages\v1.0\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\OpenVPN\bin;C:\Program Files (x86)\Sudowin\Clients\Console;D:\Zend\MySQL55\bin;C:\Program Files (x86)\ExchangeMapi\;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Skype\Phone\;C:\Program Files\TortoiseGit\bin;D:\GdPicture.NET 11\Redist;D:\GdPicture.NET 8\Redist;C:\Program Files\Microsoft SQL Server\120\Tools\Binn\;C:\Program Files\Microsoft SQL Server\130\Tools\Binn\;C:\Program Files\Git\cmd;D:\ANDROID\sdk\platform-tools;D:\GdPicture.NET 11\Redist [calling]
  780. 1504.de8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feee980000 'C:\Windows\system32\cryptnet.dll'
  781. 1504.de8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
  782. 1504.de8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\cryptnet.dll (rcNtResolve=0xc0150008) *pfFlags=0x1002 pwszSearchPath=0000000000706460:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;D:\app\Michal\product\11.2.0\client_2\bin;D:\app\Michal\product\11.2.0\client_1\bin;C:\Program Files (x86)\CollabNet;C:\Program Files (x86)\Embarcadero\RAD Studio\9.0\bin;C:\Users\Public\Documents\RAD Studio\9.0\Bpl;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\TortoiseSVN\bin;C:\Program Files (x86)\MKVToolNix;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\VSShell\Common7\IDE\;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files (x86)\Microsoft SQL Server\100\DTS\Binn\;C:\Program Files (x86)\Developer Express.VCL\Library\RS16;C:\Program Files\Microsoft\Web Platform Installer\;C:\Program Files (x86)\Microsoft ASP.NET\ASP.NET Web Pages\v1.0\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\OpenVPN\bin;C:\Program Files (x86)\Sudowin\Clients\Console;D:\Zend\MySQL55\bin;C:\Program Files (x86)\ExchangeMapi\;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Skype\Phone\;C:\Program Files\TortoiseGit\bin;D:\GdPicture.NET 11\Redist;D:\GdPicture.NET 8\Redist;C:\Program Files\Microsoft SQL Server\120\Tools\Binn\;C:\Program Files\Microsoft SQL Server\130\Tools\Binn\;C:\Program Files\Git\cmd;D:\ANDROID\sdk\platform-tools;D:\GdPicture.NET 11\Redist [calling]
  783. 1504.de8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feee980000 'C:\Windows\system32\cryptnet.dll'
  784. 1504.de8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
  785. 1504.de8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feee980000 'C:\Windows\system32\cryptnet.dll'
  786. 1504.de8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
  787. 1504.de8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feee980000 'C:\Windows\system32\cryptnet.dll'
  788. 1504.de8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
  789. 1504.de8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feee980000 'C:\Windows\system32\cryptnet.dll'
  790. 1504.de8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
  791. 1504.de8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feee980000 'C:\Windows\system32\cryptnet.dll'
  792. 1504.de8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
  793. 1504.de8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feee980000 'C:\Windows\system32\cryptnet.dll'
  794. 1504.de8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feee980000 'C:\Windows\system32\cryptnet.dll'
  795. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'gdi32.dll'.
  796. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'user32.dll'.
  797. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'msvcrt.dll'.
  798. 1504.de8: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\shlwapi.dll)
  799. 1504.de8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\shlwapi.dll
  800. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  801. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  802. 1504.de8: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  803. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  804. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  805. 1504.de8: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
  806. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  807. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  808. 1504.de8: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  809. 1504.de8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\SHLWAPI.dll (Input=SHLWAPI.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000706460:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;D:\app\Michal\product\11.2.0\client_2\bin;D:\app\Michal\product\11.2.0\client_1\bin;C:\Program Files (x86)\CollabNet;C:\Program Files (x86)\Embarcadero\RAD Studio\9.0\bin;C:\Users\Public\Documents\RAD Studio\9.0\Bpl;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\TortoiseSVN\bin;C:\Program Files (x86)\MKVToolNix;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\VSShell\Common7\IDE\;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files (x86)\Microsoft SQL Server\100\DTS\Binn\;C:\Program Files (x86)\Developer Express.VCL\Library\RS16;C:\Program Files\Microsoft\Web Platform Installer\;C:\Program Files (x86)\Microsoft ASP.NET\ASP.NET Web Pages\v1.0\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\OpenVPN\bin;C:\Program Files (x86)\Sudowin\Clients\Console;D:\Zend\MySQL55\bin;C:\Program Files (x86)\ExchangeMapi\;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Skype\Phone\;C:\Program Files\TortoiseGit\bin;D:\GdPicture.NET 11\Redist;D:\GdPicture.NET 8\Redist;C:\Program Files\Microsoft SQL Server\120\Tools\Binn\;C:\Program Files\Microsoft SQL Server\130\Tools\Binn\;C:\Program Files\Git\cmd;D:\ANDROID\sdk\platform-tools;D:\GdPicture.NET 11\Redist [calling]
  810. 1504.de8: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\shlwapi.dll [lacks WinVerifyTrust]
  811. 1504.de8: supR3HardenedDllNotificationCallback: load 000007fefef00000 LB 0x00071000 C:\Windows\system32\SHLWAPI.dll [fFlags=0x0]
  812. 1504.de8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\shlwapi.dll [lacks WinVerifyTrust]
  813. 1504.de8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefef00000 'C:\Windows\system32\SHLWAPI.dll'
  814. 1504.de8: supR3HardenedMonitor_LdrLoadDll: pName=API-MS-Win-Security-SDDL-L1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000706460:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;D:\app\Michal\product\11.2.0\client_2\bin;D:\app\Michal\product\11.2.0\client_1\bin;C:\Program Files (x86)\CollabNet;C:\Program Files (x86)\Embarcadero\RAD Studio\9.0\bin;C:\Users\Public\Documents\RAD Studio\9.0\Bpl;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\TortoiseSVN\bin;C:\Program Files (x86)\MKVToolNix;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\VSShell\Common7\IDE\;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files (x86)\Microsoft SQL Server\100\DTS\Binn\;C:\Program Files (x86)\Developer Express.VCL\Library\RS16;C:\Program Files\Microsoft\Web Platform Installer\;C:\Program Files (x86)\Microsoft ASP.NET\ASP.NET Web Pages\v1.0\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\OpenVPN\bin;C:\Program Files (x86)\Sudowin\Clients\Console;D:\Zend\MySQL55\bin;C:\Program Files (x86)\ExchangeMapi\;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Skype\Phone\;C:\Program Files\TortoiseGit\bin;D:\GdPicture.NET 11\Redist;D:\GdPicture.NET 8\Redist;C:\Program Files\Microsoft SQL Server\120\Tools\Binn\;C:\Program Files\Microsoft SQL Server\130\Tools\Binn\;C:\Program Files\Git\cmd;D:\ANDROID\sdk\platform-tools;D:\GdPicture.NET 11\Redist [calling]
  815. 1504.de8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefea40000 'API-MS-Win-Security-SDDL-L1-1-0.dll'
  816. 1504.de8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\profapi.dll [lacks WinVerifyTrust]
  817. 1504.de8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\profapi.dll (Input=profapi.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000706460:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;D:\app\Michal\product\11.2.0\client_2\bin;D:\app\Michal\product\11.2.0\client_1\bin;C:\Program Files (x86)\CollabNet;C:\Program Files (x86)\Embarcadero\RAD Studio\9.0\bin;C:\Users\Public\Documents\RAD Studio\9.0\Bpl;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\TortoiseSVN\bin;C:\Program Files (x86)\MKVToolNix;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\VSShell\Common7\IDE\;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files (x86)\Microsoft SQL Server\100\DTS\Binn\;C:\Program Files (x86)\Developer Express.VCL\Library\RS16;C:\Program Files\Microsoft\Web Platform Installer\;C:\Program Files (x86)\Microsoft ASP.NET\ASP.NET Web Pages\v1.0\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\OpenVPN\bin;C:\Program Files (x86)\Sudowin\Clients\Console;D:\Zend\MySQL55\bin;C:\Program Files (x86)\ExchangeMapi\;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Skype\Phone\;C:\Program Files\TortoiseGit\bin;D:\GdPicture.NET 11\Redist;D:\GdPicture.NET 8\Redist;C:\Program Files\Microsoft SQL Server\120\Tools\Binn\;C:\Program Files\Microsoft SQL Server\130\Tools\Binn\;C:\Program Files\Git\cmd;D:\ANDROID\sdk\platform-tools;D:\GdPicture.NET 11\Redist [calling]
  818. 1504.de8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefcd90000 'C:\Windows\system32\profapi.dll'
  819. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'cfgmgr32.dll'.
  820. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'msvcrt.dll'.
  821. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'gdi32.dll'.
  822. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'rpcrt4.dll'.
  823. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'user32.dll'.
  824. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'oleaut32.dll'.
  825. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'devobj.dll'.
  826. 1504.de8: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\setupapi.dll)
  827. 1504.de8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\setupapi.dll
  828. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'devobj.dll'...
  829. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'devobj.dll' -> '\Device\HarddiskVolume2\Windows\System32\devobj.dll' [rcNtRedir=0xc0150008]
  830. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  831. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'cfgmgr32.dll'.
  832. 1504.de8: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\devobj.dll)
  833. 1504.de8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\devobj.dll
  834. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
  835. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume2\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
  836. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'ole32.dll'.
  837. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcrt.dll'.
  838. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'rpcrt4.dll'.
  839. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'user32.dll'.
  840. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'gdi32.dll'.
  841. 1504.de8: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\oleaut32.dll)
  842. 1504.de8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\oleaut32.dll
  843. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  844. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  845. 1504.de8: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
  846. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  847. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  848. 1504.de8: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  849. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  850. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  851. 1504.de8: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  852. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  853. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  854. 1504.de8: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  855. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'cfgmgr32.dll'...
  856. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'cfgmgr32.dll' -> '\Device\HarddiskVolume2\Windows\System32\cfgmgr32.dll' [rcNtRedir=0xc0150008]
  857. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  858. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'rpcrt4.dll'.
  859. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'advapi32.dll'.
  860. 1504.de8: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\cfgmgr32.dll)
  861. 1504.de8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\cfgmgr32.dll
  862. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
  863. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
  864. 1504.de8: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
  865. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  866. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  867. 1504.de8: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  868. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  869. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  870. 1504.de8: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  871. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  872. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  873. 1504.de8: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  874. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  875. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  876. 1504.de8: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
  877. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  878. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  879. 1504.de8: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  880. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  881. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  882. 1504.de8: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  883. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
  884. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
  885. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  886. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'gdi32.dll'.
  887. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #25 'user32.dll'.
  888. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #26 'rpcrt4.dll'.
  889. 1504.de8: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\ole32.dll)
  890. 1504.de8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\ole32.dll
  891. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'cfgmgr32.dll'...
  892. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'cfgmgr32.dll' -> '\Device\HarddiskVolume2\Windows\System32\cfgmgr32.dll' [rcNtRedir=0xc0150008]
  893. 1504.de8: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cfgmgr32.dll [lacks WinVerifyTrust]
  894. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  895. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  896. 1504.de8: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  897. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  898. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  899. 1504.de8: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\rpcrt4.dll [lacks WinVerifyTrust]
  900. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  901. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  902. 1504.de8: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\user32.dll [lacks WinVerifyTrust]
  903. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  904. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  905. 1504.de8: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll [lacks WinVerifyTrust]
  906. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  907. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  908. 1504.de8: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  909. 1504.de8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\setupapi.dll (Input=setupapi.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000706460:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;D:\app\Michal\product\11.2.0\client_2\bin;D:\app\Michal\product\11.2.0\client_1\bin;C:\Program Files (x86)\CollabNet;C:\Program Files (x86)\Embarcadero\RAD Studio\9.0\bin;C:\Users\Public\Documents\RAD Studio\9.0\Bpl;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\TortoiseSVN\bin;C:\Program Files (x86)\MKVToolNix;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\VSShell\Common7\IDE\;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files (x86)\Microsoft SQL Server\100\DTS\Binn\;C:\Program Files (x86)\Developer Express.VCL\Library\RS16;C:\Program Files\Microsoft\Web Platform Installer\;C:\Program Files (x86)\Microsoft ASP.NET\ASP.NET Web Pages\v1.0\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\OpenVPN\bin;C:\Program Files (x86)\Sudowin\Clients\Console;D:\Zend\MySQL55\bin;C:\Program Files (x86)\ExchangeMapi\;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Skype\Phone\;C:\Program Files\TortoiseGit\bin;D:\GdPicture.NET 11\Redist;D:\GdPicture.NET 8\Redist;C:\Program Files\Microsoft SQL Server\120\Tools\Binn\;C:\Program Files\Microsoft SQL Server\130\Tools\Binn\;C:\Program Files\Git\cmd;D:\ANDROID\sdk\platform-tools;D:\GdPicture.NET 11\Redist [calling]
  910. 1504.de8: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\setupapi.dll [lacks WinVerifyTrust]
  911. 1504.de8: supR3HardenedDllNotificationCallback: load 000007fefd420000 LB 0x001d7000 C:\Windows\system32\setupapi.dll [fFlags=0x0]
  912. 1504.de8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\setupapi.dll [lacks WinVerifyTrust]
  913. 1504.de8: supR3HardenedDllNotificationCallback: load 000007fefcdc0000 LB 0x00036000 C:\Windows\system32\CFGMGR32.dll [fFlags=0x0]
  914. 1504.de8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cfgmgr32.dll [lacks WinVerifyTrust]
  915. 1504.de8: supR3HardenedDllNotificationCallback: load 000007feff090000 LB 0x000d7000 C:\Windows\system32\OLEAUT32.dll [fFlags=0x0]
  916. 1504.de8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\oleaut32.dll [lacks WinVerifyTrust]
  917. 1504.de8: supR3HardenedDllNotificationCallback: load 000007fefe660000 LB 0x00203000 C:\Windows\system32\ole32.dll [fFlags=0x0]
  918. 1504.de8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\ole32.dll [lacks WinVerifyTrust]
  919. 1504.de8: supR3HardenedDllNotificationCallback: load 000007fefd0b0000 LB 0x0001a000 C:\Windows\system32\DEVOBJ.dll [fFlags=0x0]
  920. 1504.de8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\devobj.dll [lacks WinVerifyTrust]
  921. 1504.de8: supR3HardenedMonitor_LdrLoadDll: pName=API-MS-Win-Core-LocalRegistry-L1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000706460:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;D:\app\Michal\product\11.2.0\client_2\bin;D:\app\Michal\product\11.2.0\client_1\bin;C:\Program Files (x86)\CollabNet;C:\Program Files (x86)\Embarcadero\RAD Studio\9.0\bin;C:\Users\Public\Documents\RAD Studio\9.0\Bpl;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\TortoiseSVN\bin;C:\Program Files (x86)\MKVToolNix;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\VSShell\Common7\IDE\;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files (x86)\Microsoft SQL Server\100\DTS\Binn\;C:\Program Files (x86)\Developer Express.VCL\Library\RS16;C:\Program Files\Microsoft\Web Platform Installer\;C:\Program Files (x86)\Microsoft ASP.NET\ASP.NET Web Pages\v1.0\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\OpenVPN\bin;C:\Program Files (x86)\Sudowin\Clients\Console;D:\Zend\MySQL55\bin;C:\Program Files (x86)\ExchangeMapi\;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Skype\Phone\;C:\Program Files\TortoiseGit\bin;D:\GdPicture.NET 11\Redist;D:\GdPicture.NET 8\Redist;C:\Program Files\Microsoft SQL Server\120\Tools\Binn\;C:\Program Files\Microsoft SQL Server\130\Tools\Binn\;C:\Program Files\Git\cmd;D:\ANDROID\sdk\platform-tools;D:\GdPicture.NET 11\Redist [calling]
  922. 1504.de8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=0000000076db0000 'API-MS-Win-Core-LocalRegistry-L1-1-0.dll'
  923. 1504.de8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefd420000 'C:\Windows\system32\setupapi.dll'
  924. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  925. 1504.de8: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\cabinet.dll)
  926. 1504.de8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\cabinet.dll
  927. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  928. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  929. 1504.de8: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  930. 1504.de8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\Cabinet.dll (Input=Cabinet.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000706460:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;D:\app\Michal\product\11.2.0\client_2\bin;D:\app\Michal\product\11.2.0\client_1\bin;C:\Program Files (x86)\CollabNet;C:\Program Files (x86)\Embarcadero\RAD Studio\9.0\bin;C:\Users\Public\Documents\RAD Studio\9.0\Bpl;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\TortoiseSVN\bin;C:\Program Files (x86)\MKVToolNix;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\VSShell\Common7\IDE\;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files (x86)\Microsoft SQL Server\100\DTS\Binn\;C:\Program Files (x86)\Developer Express.VCL\Library\RS16;C:\Program Files\Microsoft\Web Platform Installer\;C:\Program Files (x86)\Microsoft ASP.NET\ASP.NET Web Pages\v1.0\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\OpenVPN\bin;C:\Program Files (x86)\Sudowin\Clients\Console;D:\Zend\MySQL55\bin;C:\Program Files (x86)\ExchangeMapi\;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Skype\Phone\;C:\Program Files\TortoiseGit\bin;D:\GdPicture.NET 11\Redist;D:\GdPicture.NET 8\Redist;C:\Program Files\Microsoft SQL Server\120\Tools\Binn\;C:\Program Files\Microsoft SQL Server\130\Tools\Binn\;C:\Program Files\Git\cmd;D:\ANDROID\sdk\platform-tools;D:\GdPicture.NET 11\Redist [calling]
  931. 1504.de8: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cabinet.dll [lacks WinVerifyTrust]
  932. 1504.de8: supR3HardenedDllNotificationCallback: load 000007feee7d0000 LB 0x0001b000 C:\Windows\system32\Cabinet.dll [fFlags=0x0]
  933. 1504.de8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cabinet.dll [lacks WinVerifyTrust]
  934. 1504.de8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feee7d0000 'C:\Windows\system32\Cabinet.dll'
  935. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  936. 1504.de8: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\System32\devrtl.dll)
  937. 1504.de8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\devrtl.dll
  938. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  939. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  940. 1504.de8: supR3HardenedScreenImage/Imports: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll [lacks WinVerifyTrust]
  941. 1504.de8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\DEVRTL.dll (Input=DEVRTL.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000706460:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;D:\app\Michal\product\11.2.0\client_2\bin;D:\app\Michal\product\11.2.0\client_1\bin;C:\Program Files (x86)\CollabNet;C:\Program Files (x86)\Embarcadero\RAD Studio\9.0\bin;C:\Users\Public\Documents\RAD Studio\9.0\Bpl;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\TortoiseSVN\bin;C:\Program Files (x86)\MKVToolNix;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\VSShell\Common7\IDE\;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files (x86)\Microsoft SQL Server\100\DTS\Binn\;C:\Program Files (x86)\Developer Express.VCL\Library\RS16;C:\Program Files\Microsoft\Web Platform Installer\;C:\Program Files (x86)\Microsoft ASP.NET\ASP.NET Web Pages\v1.0\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\OpenVPN\bin;C:\Program Files (x86)\Sudowin\Clients\Console;D:\Zend\MySQL55\bin;C:\Program Files (x86)\ExchangeMapi\;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Skype\Phone\;C:\Program Files\TortoiseGit\bin;D:\GdPicture.NET 11\Redist;D:\GdPicture.NET 8\Redist;C:\Program Files\Microsoft SQL Server\120\Tools\Binn\;C:\Program Files\Microsoft SQL Server\130\Tools\Binn\;C:\Program Files\Git\cmd;D:\ANDROID\sdk\platform-tools;D:\GdPicture.NET 11\Redist [calling]
  942. 1504.de8: supR3HardenedScreenImage/NtCreateSection: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\devrtl.dll [lacks WinVerifyTrust]
  943. 1504.de8: supR3HardenedDllNotificationCallback: load 000007fefc010000 LB 0x00012000 C:\Windows\system32\DEVRTL.dll [fFlags=0x0]
  944. 1504.de8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\devrtl.dll [lacks WinVerifyTrust]
  945. 1504.de8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefc010000 'C:\Windows\system32\DEVRTL.dll'
  946. 1504.de8: supR3HardenedDllNotificationCallback: Unload 000007fefd420000 LB 0x001d7000 C:\Windows\system32\setupapi.dll [flags=0x0]
  947. 1504.de8: supR3HardenedDllNotificationCallback: Unload 000007fefd0b0000 LB 0x0001a000 C:\Windows\system32\DEVOBJ.dll [flags=0x0]
  948. 1504.de8: supR3HardenedDllNotificationCallback: Unload 000007feff090000 LB 0x000d7000 C:\Windows\system32\OLEAUT32.dll [flags=0x0]
  949. 1504.de8: supR3HardenedDllNotificationCallback: Unload 000007fefe660000 LB 0x00203000 C:\Windows\system32\ole32.dll [flags=0x0]
  950. 1504.de8: supR3HardenedDllNotificationCallback: Unload 000007fefcdc0000 LB 0x00036000 C:\Windows\system32\CFGMGR32.dll [flags=0x0]
  951. 1504.de8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\cryptnet.dll [lacks WinVerifyTrust]
  952. 1504.de8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007feee980000 'C:\Windows\system32\cryptnet.dll'
  953. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000000 pwszName=\SystemRoot\System32\ntdll.dll
  954. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: New context 0000000000747440
  955. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000747440
  956. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=771D512B7B1C39F0393BD4EF9FC62F442783FB35
  957. 1504.de8: supR3HardenedMonitor_LdrLoadDll: pName=API-MS-Win-Security-SDDL-L1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000706460:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;D:\app\Michal\product\11.2.0\client_2\bin;D:\app\Michal\product\11.2.0\client_1\bin;C:\Program Files (x86)\CollabNet;C:\Program Files (x86)\Embarcadero\RAD Studio\9.0\bin;C:\Users\Public\Documents\RAD Studio\9.0\Bpl;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\TortoiseSVN\bin;C:\Program Files (x86)\MKVToolNix;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\VSShell\Common7\IDE\;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files (x86)\Microsoft SQL Server\100\DTS\Binn\;C:\Program Files (x86)\Developer Express.VCL\Library\RS16;C:\Program Files\Microsoft\Web Platform Installer\;C:\Program Files (x86)\Microsoft ASP.NET\ASP.NET Web Pages\v1.0\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\OpenVPN\bin;C:\Program Files (x86)\Sudowin\Clients\Console;D:\Zend\MySQL55\bin;C:\Program Files (x86)\ExchangeMapi\;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Skype\Phone\;C:\Program Files\TortoiseGit\bin;D:\GdPicture.NET 11\Redist;D:\GdPicture.NET 8\Redist;C:\Program Files\Microsoft SQL Server\120\Tools\Binn\;C:\Program Files\Microsoft SQL Server\130\Tools\Binn\;C:\Program Files\Git\cmd;D:\ANDROID\sdk\platform-tools;D:\GdPicture.NET 11\Redist [calling]
  958. 1504.de8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefea40000 'API-MS-Win-Security-SDDL-L1-1-0.dll'
  959. 1504.de8: supR3HardenedMonitor_LdrLoadDll: pName=API-MS-WIN-Service-Management-L1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000706460:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;D:\app\Michal\product\11.2.0\client_2\bin;D:\app\Michal\product\11.2.0\client_1\bin;C:\Program Files (x86)\CollabNet;C:\Program Files (x86)\Embarcadero\RAD Studio\9.0\bin;C:\Users\Public\Documents\RAD Studio\9.0\Bpl;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\TortoiseSVN\bin;C:\Program Files (x86)\MKVToolNix;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\VSShell\Common7\IDE\;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files (x86)\Microsoft SQL Server\100\DTS\Binn\;C:\Program Files (x86)\Developer Express.VCL\Library\RS16;C:\Program Files\Microsoft\Web Platform Installer\;C:\Program Files (x86)\Microsoft ASP.NET\ASP.NET Web Pages\v1.0\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\OpenVPN\bin;C:\Program Files (x86)\Sudowin\Clients\Console;D:\Zend\MySQL55\bin;C:\Program Files (x86)\ExchangeMapi\;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Skype\Phone\;C:\Program Files\TortoiseGit\bin;D:\GdPicture.NET 11\Redist;D:\GdPicture.NET 8\Redist;C:\Program Files\Microsoft SQL Server\120\Tools\Binn\;C:\Program Files\Microsoft SQL Server\130\Tools\Binn\;C:\Program Files\Git\cmd;D:\ANDROID\sdk\platform-tools;D:\GdPicture.NET 11\Redist [calling]
  960. 1504.de8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefea40000 'API-MS-WIN-Service-Management-L1-1-0.dll'
  961. 1504.de8: supR3HardenedMonitor_LdrLoadDll: pName=API-MS-WIN-Service-winsvc-L1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000706460:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;D:\app\Michal\product\11.2.0\client_2\bin;D:\app\Michal\product\11.2.0\client_1\bin;C:\Program Files (x86)\CollabNet;C:\Program Files (x86)\Embarcadero\RAD Studio\9.0\bin;C:\Users\Public\Documents\RAD Studio\9.0\Bpl;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\TortoiseSVN\bin;C:\Program Files (x86)\MKVToolNix;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\VSShell\Common7\IDE\;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files (x86)\Microsoft SQL Server\100\DTS\Binn\;C:\Program Files (x86)\Developer Express.VCL\Library\RS16;C:\Program Files\Microsoft\Web Platform Installer\;C:\Program Files (x86)\Microsoft ASP.NET\ASP.NET Web Pages\v1.0\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\OpenVPN\bin;C:\Program Files (x86)\Sudowin\Clients\Console;D:\Zend\MySQL55\bin;C:\Program Files (x86)\ExchangeMapi\;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Skype\Phone\;C:\Program Files\TortoiseGit\bin;D:\GdPicture.NET 11\Redist;D:\GdPicture.NET 8\Redist;C:\Program Files\Microsoft SQL Server\120\Tools\Binn\;C:\Program Files\Microsoft SQL Server\130\Tools\Binn\;C:\Program Files\Git\cmd;D:\ANDROID\sdk\platform-tools;D:\GdPicture.NET 11\Redist [calling]
  962. 1504.de8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefea40000 'API-MS-WIN-Service-winsvc-L1-1-0.dll'
  963. 1504.de8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll [lacks WinVerifyTrust]
  964. 1504.de8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\ADVAPI32.dll (Input=ADVAPI32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000706460:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;D:\app\Michal\product\11.2.0\client_2\bin;D:\app\Michal\product\11.2.0\client_1\bin;C:\Program Files (x86)\CollabNet;C:\Program Files (x86)\Embarcadero\RAD Studio\9.0\bin;C:\Users\Public\Documents\RAD Studio\9.0\Bpl;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\TortoiseSVN\bin;C:\Program Files (x86)\MKVToolNix;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\VSShell\Common7\IDE\;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files (x86)\Microsoft SQL Server\100\DTS\Binn\;C:\Program Files (x86)\Developer Express.VCL\Library\RS16;C:\Program Files\Microsoft\Web Platform Installer\;C:\Program Files (x86)\Microsoft ASP.NET\ASP.NET Web Pages\v1.0\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\OpenVPN\bin;C:\Program Files (x86)\Sudowin\Clients\Console;D:\Zend\MySQL55\bin;C:\Program Files (x86)\ExchangeMapi\;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Skype\Phone\;C:\Program Files\TortoiseGit\bin;D:\GdPicture.NET 11\Redist;D:\GdPicture.NET 8\Redist;C:\Program Files\Microsoft SQL Server\120\Tools\Binn\;C:\Program Files\Microsoft SQL Server\130\Tools\Binn\;C:\Program Files\Git\cmd;D:\ANDROID\sdk\platform-tools;D:\GdPicture.NET 11\Redist [calling]
  965. 1504.de8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefe8b0000 'C:\Windows\system32\ADVAPI32.dll'
  966. 1504.de8: supR3HardenedMonitor_LdrLoadDll: pName=API-MS-Win-Security-LSALookup-L1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000706460:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;D:\app\Michal\product\11.2.0\client_2\bin;D:\app\Michal\product\11.2.0\client_1\bin;C:\Program Files (x86)\CollabNet;C:\Program Files (x86)\Embarcadero\RAD Studio\9.0\bin;C:\Users\Public\Documents\RAD Studio\9.0\Bpl;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\TortoiseSVN\bin;C:\Program Files (x86)\MKVToolNix;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\VSShell\Common7\IDE\;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files (x86)\Microsoft SQL Server\100\DTS\Binn\;C:\Program Files (x86)\Developer Express.VCL\Library\RS16;C:\Program Files\Microsoft\Web Platform Installer\;C:\Program Files (x86)\Microsoft ASP.NET\ASP.NET Web Pages\v1.0\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\OpenVPN\bin;C:\Program Files (x86)\Sudowin\Clients\Console;D:\Zend\MySQL55\bin;C:\Program Files (x86)\ExchangeMapi\;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Skype\Phone\;C:\Program Files\TortoiseGit\bin;D:\GdPicture.NET 11\Redist;D:\GdPicture.NET 8\Redist;C:\Program Files\Microsoft SQL Server\120\Tools\Binn\;C:\Program Files\Microsoft SQL Server\130\Tools\Binn\;C:\Program Files\Git\cmd;D:\ANDROID\sdk\platform-tools;D:\GdPicture.NET 11\Redist [calling]
  967. 1504.de8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefea40000 'API-MS-Win-Security-LSALookup-L1-1-0.dll'
  968. 1504.de8: supR3HardenedMonitor_LdrLoadDll: pName=API-MS-Win-Security-LSALookup-L1-1-0.dll (rcNtResolve=0x0) *pfFlags=0x0 pwszSearchPath=0000000000706460:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;D:\app\Michal\product\11.2.0\client_2\bin;D:\app\Michal\product\11.2.0\client_1\bin;C:\Program Files (x86)\CollabNet;C:\Program Files (x86)\Embarcadero\RAD Studio\9.0\bin;C:\Users\Public\Documents\RAD Studio\9.0\Bpl;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\TortoiseSVN\bin;C:\Program Files (x86)\MKVToolNix;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\VSShell\Common7\IDE\;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files (x86)\Microsoft SQL Server\100\DTS\Binn\;C:\Program Files (x86)\Developer Express.VCL\Library\RS16;C:\Program Files\Microsoft\Web Platform Installer\;C:\Program Files (x86)\Microsoft ASP.NET\ASP.NET Web Pages\v1.0\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\OpenVPN\bin;C:\Program Files (x86)\Sudowin\Clients\Console;D:\Zend\MySQL55\bin;C:\Program Files (x86)\ExchangeMapi\;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Skype\Phone\;C:\Program Files\TortoiseGit\bin;D:\GdPicture.NET 11\Redist;D:\GdPicture.NET 8\Redist;C:\Program Files\Microsoft SQL Server\120\Tools\Binn\;C:\Program Files\Microsoft SQL Server\130\Tools\Binn\;C:\Program Files\Git\cmd;D:\ANDROID\sdk\platform-tools;D:\GdPicture.NET 11\Redist [calling]
  969. 1504.de8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefea40000 'API-MS-Win-Security-LSALookup-L1-1-0.dll'
  970. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_5_for_KB2882822~31bf3856ad364e35~amd64~~6.1.1.2.cat'; file='\SystemRoot\System32\ntdll.dll'
  971. 1504.de8: g_pfnWinVerifyTrust=000007fefd0e1010
  972. 1504.de8: supR3HardenedScreenImage/preload: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\crypt32.dll [redoing WinVerifyTrust]
  973. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000000000000e0 pwszName=\Device\HarddiskVolume2\Windows\System32\crypt32.dll
  974. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000000747440
  975. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000747440
  976. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=766DAE0DAEDFFD0DB96611658C619DD5922D2FEC
  977. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat'; file='\Device\HarddiskVolume2\Windows\System32\crypt32.dll'
  978. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
  979. 1504.de8: supR3HardenedScreenImage/preload: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\crypt32.dll'
  980. 1504.de8: supR3HardenedScreenImage/preload: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\System32\wintrust.dll [redoing WinVerifyTrust]
  981. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000000000000d4 pwszName=\Device\HarddiskVolume2\Windows\System32\wintrust.dll
  982. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000000747440
  983. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000747440
  984. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=E8D9B442D9CC38B2D0501106E104A42A4EE0B238
  985. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat'; file='\Device\HarddiskVolume2\Windows\System32\wintrust.dll'
  986. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
  987. 1504.de8: supR3HardenedScreenImage/preload: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\wintrust.dll'
  988. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000000000003ec pwszName=\Device\HarddiskVolume2\Windows\System32\devrtl.dll
  989. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000000747440
  990. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000747440
  991. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=445E5B0E9F43B5D56A5B9C4BC3369E3D076ACA1A
  992. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat'; file='\Device\HarddiskVolume2\Windows\System32\devrtl.dll'
  993. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
  994. 1504.de8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\devrtl.dll'
  995. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000000000003e0 pwszName=\Device\HarddiskVolume2\Windows\System32\cabinet.dll
  996. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000000747440
  997. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000747440
  998. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=5D1555851298EA005A2E9FEA027F5898BC240083
  999. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat'; file='\Device\HarddiskVolume2\Windows\System32\cabinet.dll'
  1000. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
  1001. 1504.de8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\cabinet.dll'
  1002. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000000000003a8 pwszName=\Device\HarddiskVolume2\Windows\System32\ole32.dll
  1003. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000000747440
  1004. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000747440
  1005. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=2E64AE329BD5124592BC8CB0B327AA3B95DC65B7
  1006. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat'; file='\Device\HarddiskVolume2\Windows\System32\ole32.dll'
  1007. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
  1008. 1504.de8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\ole32.dll'
  1009. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000000000003a4 pwszName=\Device\HarddiskVolume2\Windows\System32\cfgmgr32.dll
  1010. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000000747440
  1011. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000747440
  1012. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=8F731777EFC4BC982C1E1467FBF29A74CC14D93A
  1013. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat'; file='\Device\HarddiskVolume2\Windows\System32\cfgmgr32.dll'
  1014. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
  1015. 1504.de8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\cfgmgr32.dll'
  1016. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000000000003a0 pwszName=\Device\HarddiskVolume2\Windows\System32\oleaut32.dll
  1017. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000000747440
  1018. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000747440
  1019. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=C1D7CC9111C6B5A59641FA11BE0A6A1841FEBBCD
  1020. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_3_for_KB2564958~31bf3856ad364e35~amd64~~6.1.1.1.cat'; file='\Device\HarddiskVolume2\Windows\System32\oleaut32.dll'
  1021. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
  1022. 1504.de8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\oleaut32.dll'
  1023. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: hFile=000000000000039c pwszName=\Device\HarddiskVolume2\Windows\System32\devobj.dll
  1024. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000000747440
  1025. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000747440
  1026. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=B410A095222E69F0ECE7D66E4AC27A7125D2EB5A
  1027. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat'; file='\Device\HarddiskVolume2\Windows\System32\devobj.dll'
  1028. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
  1029. 1504.de8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\devobj.dll'
  1030. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000398 pwszName=\Device\HarddiskVolume2\Windows\System32\setupapi.dll
  1031. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000000747440
  1032. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000747440
  1033. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=1499C4FEA6E143F9BEC35B4FFA098917D3A6EBF2
  1034. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat'; file='\Device\HarddiskVolume2\Windows\System32\setupapi.dll'
  1035. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
  1036. 1504.de8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\setupapi.dll'
  1037. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: hFile=000000000000038c pwszName=\Device\HarddiskVolume2\Windows\System32\shlwapi.dll
  1038. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000000747440
  1039. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000747440
  1040. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=0AB8D9C9D3E1FC95D01F9A984B16ED031BB40CD8
  1041. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat'; file='\Device\HarddiskVolume2\Windows\System32\shlwapi.dll'
  1042. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
  1043. 1504.de8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\shlwapi.dll'
  1044. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000380 pwszName=\Device\HarddiskVolume2\Windows\System32\Wldap32.dll
  1045. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000000747440
  1046. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000747440
  1047. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=87E73086F2528CF31D3AD5F0D71E04F8B942D5D8
  1048. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat'; file='\Device\HarddiskVolume2\Windows\System32\Wldap32.dll'
  1049. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
  1050. 1504.de8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\Wldap32.dll'
  1051. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: hFile=000000000000037c pwszName=\Device\HarddiskVolume2\Windows\System32\cryptnet.dll
  1052. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000000747440
  1053. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000747440
  1054. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=CA2FE16E05087DA5C24DC5EB2EE8053CDA5DE9A9
  1055. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\nt5.cat'; file='\Device\HarddiskVolume2\Windows\System32\cryptnet.dll'
  1056. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
  1057. 1504.de8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\cryptnet.dll'
  1058. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000258 pwszName=\Device\HarddiskVolume2\Windows\System32\gpapi.dll
  1059. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000000747440
  1060. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000747440
  1061. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=470795C189226F7BDB8E50F42104CC34488B9340
  1062. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat'; file='\Device\HarddiskVolume2\Windows\System32\gpapi.dll'
  1063. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
  1064. 1504.de8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\gpapi.dll'
  1065. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000000000001c4 pwszName=\Device\HarddiskVolume2\Windows\System32\profapi.dll
  1066. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000000747440
  1067. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000747440
  1068. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=2449672745D9BA339420451D13FA0380AA768231
  1069. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\nt5.cat'; file='\Device\HarddiskVolume2\Windows\System32\profapi.dll'
  1070. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
  1071. 1504.de8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\profapi.dll'
  1072. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000000000001c0 pwszName=\Device\HarddiskVolume2\Windows\System32\userenv.dll
  1073. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000000747440
  1074. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000747440
  1075. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=D3E1A2CC7367F751C19EBF4E6EDF5E9A10E47313
  1076. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat'; file='\Device\HarddiskVolume2\Windows\System32\userenv.dll'
  1077. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
  1078. 1504.de8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\userenv.dll'
  1079. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000000000001ac pwszName=\Device\HarddiskVolume2\Windows\System32\ncrypt.dll
  1080. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000000747440
  1081. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000747440
  1082. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=3D482C50075646C922DC6A66C97956C5060C361B
  1083. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\nt5.cat'; file='\Device\HarddiskVolume2\Windows\System32\ncrypt.dll'
  1084. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
  1085. 1504.de8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\ncrypt.dll'
  1086. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000194 pwszName=\Device\HarddiskVolume2\Windows\System32\msctf.dll
  1087. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000000747440
  1088. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000747440
  1089. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=803AF52F95A9EFDFDA06C595023831EE36ACD3A8
  1090. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\nt5.cat'; file='\Device\HarddiskVolume2\Windows\System32\msctf.dll'
  1091. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
  1092. 1504.de8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\msctf.dll'
  1093. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000190 pwszName=\Device\HarddiskVolume2\Windows\System32\imm32.dll
  1094. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000000747440
  1095. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000747440
  1096. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=6EEE1AB3B6D79AFF857940FF5F51ED27698153EC
  1097. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\nt5.cat'; file='\Device\HarddiskVolume2\Windows\System32\imm32.dll'
  1098. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
  1099. 1504.de8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\imm32.dll'
  1100. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: hFile=000000000000018c pwszName=\Device\HarddiskVolume2\Windows\System32\usp10.dll
  1101. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000000747440
  1102. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000747440
  1103. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=97AE9B5B40144F2794F30A891013393C80D631A1
  1104. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat'; file='\Device\HarddiskVolume2\Windows\System32\usp10.dll'
  1105. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
  1106. 1504.de8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\usp10.dll'
  1107. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000188 pwszName=\Device\HarddiskVolume2\Windows\System32\lpk.dll
  1108. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000000747440
  1109. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000747440
  1110. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=A42DFBB8A3A26D2178D79D34DA1CE275E2A0BE37
  1111. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat'; file='\Device\HarddiskVolume2\Windows\System32\lpk.dll'
  1112. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
  1113. 1504.de8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\lpk.dll'
  1114. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000184 pwszName=\Device\HarddiskVolume2\Windows\System32\gdi32.dll
  1115. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000000747440
  1116. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000747440
  1117. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=C8F7179D2AEB0FEB168A01D182223AC2D7B8F331
  1118. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat'; file='\Device\HarddiskVolume2\Windows\System32\gdi32.dll'
  1119. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
  1120. 1504.de8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\gdi32.dll'
  1121. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000180 pwszName=\Device\HarddiskVolume2\Windows\System32\user32.dll
  1122. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000000747440
  1123. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000747440
  1124. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=FB05A6DD4AF9AC247D37C4B7BAFCCBD178A41E64
  1125. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: Retrying with fresh context (CryptCATAdminEnumCatalogFromHash -> 1168; iCat=0x0)
  1126. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: New context 0000000000747440
  1127. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000747440
  1128. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=FB05A6DD4AF9AC247D37C4B7BAFCCBD178A41E64
  1129. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: CryptCATAdminEnumCatalogFromHash failed ERRROR_NOT_FOUND (1168)
  1130. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile -> -22900 (org 22900)
  1131. 1504.de8: supR3HardenedWinVerifyCacheProcessWvtTodos: -22900 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\user32.dll'
  1132. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: hFile=000000000000017c pwszName=\Device\HarddiskVolume2\Windows\System32\imagehlp.dll
  1133. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000000747440
  1134. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000747440
  1135. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=AFE89CF1060867A10BD3963894BCDB4D3058F804
  1136. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat'; file='\Device\HarddiskVolume2\Windows\System32\imagehlp.dll'
  1137. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
  1138. 1504.de8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\imagehlp.dll'
  1139. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000130 pwszName=\Device\HarddiskVolume2\Windows\System32\cryptbase.dll
  1140. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000000747440
  1141. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000747440
  1142. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=A965CC5DB13A5FB23BBB1B6B5FA6D400DC49462F
  1143. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\ntpe.cat'; file='\Device\HarddiskVolume2\Windows\System32\cryptbase.dll'
  1144. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
  1145. 1504.de8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\cryptbase.dll'
  1146. 1504.de8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\rsaenh.dll'
  1147. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: hFile=000000000000012c pwszName=\Device\HarddiskVolume2\Windows\System32\cryptsp.dll
  1148. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000000747440
  1149. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000747440
  1150. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=40667EDBA9045D4A4BE1D4844665D3B88F8CD0E0
  1151. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\ntpe.cat'; file='\Device\HarddiskVolume2\Windows\System32\cryptsp.dll'
  1152. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
  1153. 1504.de8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\cryptsp.dll'
  1154. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000120 pwszName=\Device\HarddiskVolume2\Windows\System32\sechost.dll
  1155. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000000747440
  1156. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000747440
  1157. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=3FA2A014BF360CDC0E203A174FFC9DC5343C5323
  1158. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\ntpe.cat'; file='\Device\HarddiskVolume2\Windows\System32\sechost.dll'
  1159. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
  1160. 1504.de8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\sechost.dll'
  1161. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: hFile=000000000000011c pwszName=\Device\HarddiskVolume2\Windows\System32\advapi32.dll
  1162. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000000747440
  1163. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000747440
  1164. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=7C0A1C638CE7C1160F49C473EC1420BD3AB693C4
  1165. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_5_for_KB2882822~31bf3856ad364e35~amd64~~6.1.1.2.cat'; file='\Device\HarddiskVolume2\Windows\System32\advapi32.dll'
  1166. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
  1167. 1504.de8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\advapi32.dll'
  1168. 1504.de8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\bcryptprimitives.dll'
  1169. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000104 pwszName=\Device\HarddiskVolume2\Windows\System32\bcrypt.dll
  1170. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000000747440
  1171. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000747440
  1172. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=62E377A1F0AD0C2EDC0A73CB3EFF841FF18D00D2
  1173. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\ntpe.cat'; file='\Device\HarddiskVolume2\Windows\System32\bcrypt.dll'
  1174. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
  1175. 1504.de8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\bcrypt.dll'
  1176. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000000000000e4 pwszName=\Device\HarddiskVolume2\Windows\System32\msvcrt.dll
  1177. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000000747440
  1178. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000747440
  1179. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=DBEAC8C0FA88C88B540ACFE0683B1810C077AA53
  1180. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\ntpe.cat'; file='\Device\HarddiskVolume2\Windows\System32\msvcrt.dll'
  1181. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
  1182. 1504.de8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll'
  1183. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000000000000dc pwszName=\Device\HarddiskVolume2\Windows\System32\msasn1.dll
  1184. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000000747440
  1185. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000747440
  1186. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=F2FF57DC30D774F93061607060DAA0DD15E39CCE
  1187. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat'; file='\Device\HarddiskVolume2\Windows\System32\msasn1.dll'
  1188. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
  1189. 1504.de8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\msasn1.dll'
  1190. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000000000000d8 pwszName=\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll
  1191. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000000747440
  1192. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000747440
  1193. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=BC4D9E909DFDD2EE8BA1A5C857D73D49EBE7952C
  1194. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat'; file='\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll'
  1195. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
  1196. 1504.de8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll'
  1197. 1504.de8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 0) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxSupLib.dll'
  1198. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000028 pwszName=\Device\HarddiskVolume2\Windows\System32\KernelBase.dll
  1199. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000000747440
  1200. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000747440
  1201. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=91F085E8EC8E74411F756DB12A25CCD01E5A5A34
  1202. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_5_for_KB2882822~31bf3856ad364e35~amd64~~6.1.1.2.cat'; file='\Device\HarddiskVolume2\Windows\System32\KernelBase.dll'
  1203. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
  1204. 1504.de8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\KernelBase.dll'
  1205. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000020 pwszName=\Device\HarddiskVolume2\Windows\System32\kernel32.dll
  1206. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000000747440
  1207. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000747440
  1208. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=8E81B4259AE0A9FFEFEA6E84E77A5D1659D68AE4
  1209. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Package_5_for_KB2882822~31bf3856ad364e35~amd64~~6.1.1.2.cat'; file='\Device\HarddiskVolume2\Windows\System32\kernel32.dll'
  1210. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
  1211. 1504.de8: supR3HardenedWinVerifyCacheProcessWvtTodos: 0 (was 22900) fWinVerifyTrust=1 for '\Device\HarddiskVolume2\Windows\System32\kernel32.dll'
  1212. 1504.de8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\crypt32.dll
  1213. 1504.de8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\crypt32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000006bd790:C:\Windows\system32 [calling]
  1214. 1504.de8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefcf40000 'C:\Windows\system32\crypt32.dll'
  1215. 1504.de8: supR3HardenedWinIsDesiredRootCA: Adding 0x5ad46780fa5df300 DC=com, DC=microsoft, CN=Microsoft Root Certificate Authority
  1216. 1504.de8: supR3HardenedWinIsDesiredRootCA: Adding 0xea5386456178582b C=ZA, ST=Western Cape, L=Durbanville, O=Thawte, OU=Thawte Certification, CN=Thawte Timestamping CA
  1217. 1504.de8: supR3HardenedWinIsDesiredRootCA: Adding 0xe4953a9a7fc295ef C=PL, CN=Default CA
  1218. 1504.de8: supR3HardenedWinIsDesiredRootCA: Adding 0x3be670c1bd02a900 OU=Copyright (c) 1997 Microsoft Corp., OU=Microsoft Corporation, CN=Microsoft Root Authority
  1219. 1504.de8: supR3HardenedWinIsDesiredRootCA: Adding 0x646e3fe3ba08df00 C=US, O=MSFT, CN=Microsoft Authenticode(tm) Root Authority
  1220. 1504.de8: supR3HardenedWinIsDesiredRootCA: skipping - not-self-signed: C=BZ, ST=Belize, L=Belize City, O=DT Soft Ltd, OU=Digital ID Class 3 - Microsoft Software Validation v2, CN=DT Soft Ltd
  1221. 1504.de8: supR3HardenedWinIsDesiredRootCA: Adding 0x43a9cc371ff5385a O=Microsoft Trust Network, OU=Microsoft Corporation, OU=Microsoft Time Stamping Service Root, OU=Copyright (c) 1997 Microsoft Corp.
  1222. 1504.de8: supR3HardenedWinIsDesiredRootCA: Adding 0x2e2d2c7c68f0202e O=VeriSign Trust Network, OU=VeriSign, Inc., OU=VeriSign Time Stamping Service Root, OU=NO LIABILITY ACCEPTED, (c)97 VeriSign, Inc.
  1223. 1504.de8: supR3HardenedWinIsDesiredRootCA: Adding 0xd8dbfb2c27bfb200 C=US, O=thawte, Inc., OU=Certification Services Division, OU=(c) 2008 thawte, Inc. - For authorized use only, CN=thawte Primary Root CA - G3
  1224. 1504.de8: supR3HardenedWinIsDesiredRootCA: Adding 0x61a3a33f81aace00 C=US, ST=UT, L=Salt Lake City, O=The USERTRUST Network, OU=http://www.usertrust.com, CN=UTN-USERFirst-Object
  1225. 1504.de8: supR3HardenedWinIsDesiredRootCA: Adding 0xf4fd306318ccda00 C=US, O=GeoTrust Inc., CN=GeoTrust Global CA
  1226. 1504.de8: supR3HardenedWinIsDesiredRootCA: Adding 0x83085097e9afdf00 O=Digital Signature Trust Co., CN=DST Root CA X3
  1227. 1504.de8: supR3HardenedWinIsDesiredRootCA: Adding 0x780679907625cc00 OU=GlobalSign Root CA - R3, O=GlobalSign, CN=GlobalSign
  1228. 1504.de8: supR3HardenedWinIsDesiredRootCA: Adding 0x3d98ab22bb04a300 C=IE, O=Baltimore, OU=CyberTrust, CN=Baltimore CyberTrust Root
  1229. 1504.de8: supR3HardenedWinIsDesiredRootCA: Adding 0xa0ee62086758b15d C=US, O=Equifax, OU=Equifax Secure Certificate Authority
  1230. 1504.de8: supR3HardenedWinIsDesiredRootCA: Adding 0x8ff6fc03c1edbd00 C=US, ST=Arizona, L=Scottsdale, O=Starfield Technologies, Inc., CN=Starfield Root Certificate Authority - G2
  1231. 1504.de8: supR3HardenedWinIsDesiredRootCA: Adding 0xc6fa4243b695b600 C=US, O=Entrust, Inc., OU=www.entrust.net/CPS is incorporated by reference, OU=(c) 2006 Entrust, Inc., CN=Entrust Root Certification Authority
  1232. 1504.de8: supR3HardenedWinIsDesiredRootCA: Adding 0xa3ce8d99e60eda00 C=BE, O=GlobalSign nv-sa, OU=Root CA, CN=GlobalSign Root CA
  1233. 1504.de8: supR3HardenedWinIsDesiredRootCA: Adding 0x560ad29254e89100 C=GB, ST=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO RSA Certification Authority
  1234. 1504.de8: supR3HardenedWinIsDesiredRootCA: Adding 0xa671e9fec832b700 C=US, O=Starfield Technologies, Inc., OU=Starfield Class 2 Certification Authority
  1235. 1504.de8: supR3HardenedWinIsDesiredRootCA: Adding 0xa8de7211e13be200 C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root CA
  1236. 1504.de8: supR3HardenedWinIsDesiredRootCA: Adding 0x7ae89c50f0b6a00f C=US, O=GTE Corporation, OU=GTE CyberTrust Solutions, Inc., CN=GTE CyberTrust Global Root
  1237. 1504.de8: supR3HardenedWinIsDesiredRootCA: Adding 0xd45980fbf0a0ac00 C=US, O=thawte, Inc., OU=Certification Services Division, OU=(c) 2006 thawte, Inc. - For authorized use only, CN=thawte Primary Root CA
  1238. 1504.de8: supR3HardenedWinIsDesiredRootCA: Adding 0x4d3835aa4180b200 C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Root Certificate Authority 2011
  1239. 1504.de8: supR3HardenedWinIsDesiredRootCA: Adding 0xf5cd95e581a4ab00 C=US, O=SecureTrust Corporation, CN=SecureTrust CA
  1240. 1504.de8: supR3HardenedWinIsDesiredRootCA: Adding 0xabd0695c5d11d15e C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification Authority - G2, OU=(c) 1998 VeriSign, Inc. - For authorized use only, OU=VeriSign Trust Network
  1241. 1504.de8: supR3HardenedWinIsDesiredRootCA: Adding 0x14018a1bf29e595c C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification Authority
  1242. 1504.de8: supR3HardenedWinIsDesiredRootCA: Adding 0x9e5bc2d78b6a3636 C=ZA, ST=Western Cape, L=Cape Town, O=Thawte Consulting cc, OU=Certification Services Division, CN=Thawte Premium Server CA, [email protected]
  1243. 1504.de8: supR3HardenedWinIsDesiredRootCA: Adding 0x7c4fd32ec1b1ce00 C=PL, O=Unizeto Sp. z o.o., CN=Certum CA
  1244. 1504.de8: supR3HardenedWinIsDesiredRootCA: Adding 0xd4fbe673e5ccc600 C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert High Assurance EV Root CA
  1245. 1504.de8: supR3HardenedWinIsDesiredRootCA: Adding 0xb28612a94b4dad00 O=Entrust.net, OU=www.entrust.net/CPS_2048 incorp. by ref. (limits liab.), OU=(c) 1999 Entrust.net Limited, CN=Entrust.net Certification Authority (2048)
  1246. 1504.de8: supR3HardenedWinIsDesiredRootCA: Adding 0x357a29080824af00 C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2006 VeriSign, Inc. - For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority - G5
  1247. 1504.de8: supR3HardenedWinIsDesiredRootCA: Adding 0x59faf1086271bf00 C=US, ST=Arizona, L=Scottsdale, O=GoDaddy.com, Inc., CN=Go Daddy Root Certificate Authority - G2
  1248. 1504.de8: supR3HardenedWinIsDesiredRootCA: Adding 0x466cbc09db88c100 C=IL, O=StartCom Ltd., OU=Secure Digital Certificate Signing, CN=StartCom Certification Authority
  1249. 1504.de8: supR3HardenedWinIsDesiredRootCA: Adding 0xece4e4289e08b900 C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Root Certificate Authority 2010
  1250. 1504.de8: supR3HardenedWinIsDesiredRootCA: Adding 0x30669a4e82fa800 C=US, O=America Online Inc., CN=America Online Root Certification Authority 1
  1251. 1504.de8: supR3HardenedWinIsDesiredRootCA: Adding 0x3401b15e3761c700 C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 2008 VeriSign, Inc. - For authorized use only, CN=VeriSign Universal Root Certification Authority
  1252. 1504.de8: supR3HardenedWinIsDesiredRootCA: Adding 0x7cd4ff7b15b8be00 C=US, O=GeoTrust Inc., CN=GeoTrust Primary Certification Authority
  1253. 1504.de8: supR3HardenedWinIsDesiredRootCA: Adding 0x491857ead79dde00 C=US, O=The Go Daddy Group, Inc., OU=Go Daddy Class 2 Certification Authority
  1254. 1504.de8: supR3HardenedWinIsDesiredRootCA: Adding 0x1f78fc529cbacb00 C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=(c) 1999 VeriSign, Inc. - For authorized use only, CN=VeriSign Class 3 Public Primary Certification Authority - G3
  1255. 1504.de8: supR3HardenedWinIsDesiredRootCA: Adding 0xc2ba72a37dfbe300 C=PL, O=Unizeto Technologies S.A., OU=Certum Certification Authority, CN=Certum Trusted Network CA
  1256. 1504.de8: supR3HardenedWinIsDesiredRootCA: Adding 0x8043e4ce150ead00 C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Assured ID Root CA
  1257. 1504.de8: supR3HardenedWinIsDesiredRootCA: Adding 0xa8b43f38c3f7b100 C=US, ST=UT, L=Salt Lake City, O=The USERTRUST Network, OU=http://www.usertrust.com, CN=UTN-USERFirst-Hardware
  1258. 1504.de8: supR3HardenedWinIsDesiredRootCA: Adding 0x331d58625ee2dc00 C=US, O=GeoTrust Inc., OU=(c) 2008 GeoTrust Inc. - For authorized use only, CN=GeoTrust Primary Certification Authority - G3
  1259. 1504.de8: supR3HardenedWinIsDesiredRootCA: Adding 0xf2e6331af7b700 C=SE, O=AddTrust AB, OU=AddTrust External TTP Network, CN=AddTrust External CA Root
  1260. 1504.de8: supR3HardenedWinRetrieveTrustedRootCAs: cAdded=44
  1261. 1504.de8: SUPR3HardenedMain: Load Runtime...
  1262. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
  1263. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcp100.dll'.
  1264. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'ws2_32.dll'.
  1265. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'rpcrt4.dll'.
  1266. 1504.de8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll) WinVerifyTrust
  1267. 1504.de8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll
  1268. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  1269. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  1270. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
  1271. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
  1272. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000000000003d8 pwszName=\Device\HarddiskVolume2\Windows\System32\ws2_32.dll
  1273. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000000747440
  1274. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000747440
  1275. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=3EF3BDC1E84DFA17EA056313214EE88EC3E66F79
  1276. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat'; file='\Device\HarddiskVolume2\Windows\System32\ws2_32.dll'
  1277. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
  1278. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1279. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #16 'rpcrt4.dll'.
  1280. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #17 'nsi.dll'.
  1281. 1504.de8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\ws2_32.dll) WinVerifyTrust
  1282. 1504.de8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\ws2_32.dll
  1283. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
  1284. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
  1285. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcr100.dll'.
  1286. 1504.de8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll) WinVerifyTrust
  1287. 1504.de8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll
  1288. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
  1289. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
  1290. 1504.de8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll) WinVerifyTrust
  1291. 1504.de8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll
  1292. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
  1293. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
  1294. 1504.de8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll
  1295. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'nsi.dll'...
  1296. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'nsi.dll' -> '\Device\HarddiskVolume2\Windows\System32\nsi.dll' [rcNtRedir=0xc0150008]
  1297. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000410 pwszName=\Device\HarddiskVolume2\Windows\System32\nsi.dll
  1298. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000000747440
  1299. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000747440
  1300. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=7AFD8538945F2D05BC1AF949B9B19B7D2D9FBBF8
  1301. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\ntpe.cat'; file='\Device\HarddiskVolume2\Windows\System32\nsi.dll'
  1302. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
  1303. 1504.de8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\nsi.dll) WinVerifyTrust
  1304. 1504.de8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\nsi.dll
  1305. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'rpcrt4.dll'...
  1306. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'rpcrt4.dll' -> '\Device\HarddiskVolume2\Windows\System32\rpcrt4.dll' [rcNtRedir=0xc0150008]
  1307. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1308. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1309. 1504.de8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=000000000078b440:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
  1310. 1504.de8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll
  1311. 1504.de8: supR3HardenedDllNotificationCallback: load 000007fee8870000 LB 0x00527000 C:\Program Files\Oracle\VirtualBox\VBoxRT.dll [fFlags=0x0]
  1312. 1504.de8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll
  1313. 1504.de8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll
  1314. 1504.de8: supR3HardenedDllNotificationCallback: load 0000000071fa0000 LB 0x000d2000 C:\Program Files\Oracle\VirtualBox\MSVCR100.dll [fFlags=0x0]
  1315. 1504.de8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll
  1316. 1504.de8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll
  1317. 1504.de8: supR3HardenedDllNotificationCallback: load 0000000071f00000 LB 0x00098000 C:\Program Files\Oracle\VirtualBox\MSVCP100.dll [fFlags=0x0]
  1318. 1504.de8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll
  1319. 1504.de8: supR3HardenedDllNotificationCallback: load 000007fefece0000 LB 0x0004d000 C:\Windows\system32\WS2_32.dll [fFlags=0x0]
  1320. 1504.de8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ws2_32.dll
  1321. 1504.de8: supR3HardenedDllNotificationCallback: load 000007fefe990000 LB 0x00008000 C:\Windows\system32\NSI.dll [fFlags=0x0]
  1322. 1504.de8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\nsi.dll
  1323. 1504.de8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll
  1324. 1504.de8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000706460:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;D:\app\Michal\product\11.2.0\client_2\bin;D:\app\Michal\product\11.2.0\client_1\bin;C:\Program Files (x86)\CollabNet;C:\Program Files (x86)\Embarcadero\RAD Studio\9.0\bin;C:\Users\Public\Documents\RAD Studio\9.0\Bpl;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\TortoiseSVN\bin;C:\Program Files (x86)\MKVToolNix;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\VSShell\Common7\IDE\;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files (x86)\Microsoft SQL Server\100\DTS\Binn\;C:\Program Files (x86)\Developer Express.VCL\Library\RS16;C:\Program Files\Microsoft\Web Platform Installer\;C:\Program Files (x86)\Microsoft ASP.NET\ASP.NET Web Pages\v1.0\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\OpenVPN\bin;C:\Program Files (x86)\Sudowin\Clients\Console;D:\Zend\MySQL55\bin;C:\Program Files (x86)\ExchangeMapi\;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Skype\Phone\;C:\Program Files\TortoiseGit\bin;D:\GdPicture.NET 11\Redist;D:\GdPicture.NET 8\Redist;C:\Program Files\Microsoft SQL Server\120\Tools\Binn\;C:\Program Files\Microsoft SQL Server\130\Tools\Binn\;C:\Program Files\Git\cmd;D:\ANDROID\sdk\platform-tools;D:\GdPicture.NET 11\Redist [calling]
  1325. 1504.de8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee8870000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1326. 1504.de8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll
  1327. 1504.de8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000706460:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;D:\app\Michal\product\11.2.0\client_2\bin;D:\app\Michal\product\11.2.0\client_1\bin;C:\Program Files (x86)\CollabNet;C:\Program Files (x86)\Embarcadero\RAD Studio\9.0\bin;C:\Users\Public\Documents\RAD Studio\9.0\Bpl;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\TortoiseSVN\bin;C:\Program Files (x86)\MKVToolNix;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\VSShell\Common7\IDE\;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files (x86)\Microsoft SQL Server\100\DTS\Binn\;C:\Program Files (x86)\Developer Express.VCL\Library\RS16;C:\Program Files\Microsoft\Web Platform Installer\;C:\Program Files (x86)\Microsoft ASP.NET\ASP.NET Web Pages\v1.0\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\OpenVPN\bin;C:\Program Files (x86)\Sudowin\Clients\Console;D:\Zend\MySQL55\bin;C:\Program Files (x86)\ExchangeMapi\;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Skype\Phone\;C:\Program Files\TortoiseGit\bin;D:\GdPicture.NET 11\Redist;D:\GdPicture.NET 8\Redist;C:\Program Files\Microsoft SQL Server\120\Tools\Binn\;C:\Program Files\Microsoft SQL Server\130\Tools\Binn\;C:\Program Files\Git\cmd;D:\ANDROID\sdk\platform-tools;D:\GdPicture.NET 11\Redist [calling]
  1328. 1504.de8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee8870000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1329. 1504.de8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll
  1330. 1504.de8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000706460:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;D:\app\Michal\product\11.2.0\client_2\bin;D:\app\Michal\product\11.2.0\client_1\bin;C:\Program Files (x86)\CollabNet;C:\Program Files (x86)\Embarcadero\RAD Studio\9.0\bin;C:\Users\Public\Documents\RAD Studio\9.0\Bpl;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\TortoiseSVN\bin;C:\Program Files (x86)\MKVToolNix;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\VSShell\Common7\IDE\;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files (x86)\Microsoft SQL Server\100\DTS\Binn\;C:\Program Files (x86)\Developer Express.VCL\Library\RS16;C:\Program Files\Microsoft\Web Platform Installer\;C:\Program Files (x86)\Microsoft ASP.NET\ASP.NET Web Pages\v1.0\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\OpenVPN\bin;C:\Program Files (x86)\Sudowin\Clients\Console;D:\Zend\MySQL55\bin;C:\Program Files (x86)\ExchangeMapi\;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Skype\Phone\;C:\Program Files\TortoiseGit\bin;D:\GdPicture.NET 11\Redist;D:\GdPicture.NET 8\Redist;C:\Program Files\Microsoft SQL Server\120\Tools\Binn\;C:\Program Files\Microsoft SQL Server\130\Tools\Binn\;C:\Program Files\Git\cmd;D:\ANDROID\sdk\platform-tools;D:\GdPicture.NET 11\Redist [calling]
  1331. 1504.de8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee8870000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1332. 1504.de8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll
  1333. 1504.de8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000706460:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;D:\app\Michal\product\11.2.0\client_2\bin;D:\app\Michal\product\11.2.0\client_1\bin;C:\Program Files (x86)\CollabNet;C:\Program Files (x86)\Embarcadero\RAD Studio\9.0\bin;C:\Users\Public\Documents\RAD Studio\9.0\Bpl;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\TortoiseSVN\bin;C:\Program Files (x86)\MKVToolNix;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\VSShell\Common7\IDE\;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files (x86)\Microsoft SQL Server\100\DTS\Binn\;C:\Program Files (x86)\Developer Express.VCL\Library\RS16;C:\Program Files\Microsoft\Web Platform Installer\;C:\Program Files (x86)\Microsoft ASP.NET\ASP.NET Web Pages\v1.0\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\OpenVPN\bin;C:\Program Files (x86)\Sudowin\Clients\Console;D:\Zend\MySQL55\bin;C:\Program Files (x86)\ExchangeMapi\;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Skype\Phone\;C:\Program Files\TortoiseGit\bin;D:\GdPicture.NET 11\Redist;D:\GdPicture.NET 8\Redist;C:\Program Files\Microsoft SQL Server\120\Tools\Binn\;C:\Program Files\Microsoft SQL Server\130\Tools\Binn\;C:\Program Files\Git\cmd;D:\ANDROID\sdk\platform-tools;D:\GdPicture.NET 11\Redist [calling]
  1334. 1504.de8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee8870000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1335. 1504.de8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll
  1336. 1504.de8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000706460:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;D:\app\Michal\product\11.2.0\client_2\bin;D:\app\Michal\product\11.2.0\client_1\bin;C:\Program Files (x86)\CollabNet;C:\Program Files (x86)\Embarcadero\RAD Studio\9.0\bin;C:\Users\Public\Documents\RAD Studio\9.0\Bpl;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\TortoiseSVN\bin;C:\Program Files (x86)\MKVToolNix;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\VSShell\Common7\IDE\;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files (x86)\Microsoft SQL Server\100\DTS\Binn\;C:\Program Files (x86)\Developer Express.VCL\Library\RS16;C:\Program Files\Microsoft\Web Platform Installer\;C:\Program Files (x86)\Microsoft ASP.NET\ASP.NET Web Pages\v1.0\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\OpenVPN\bin;C:\Program Files (x86)\Sudowin\Clients\Console;D:\Zend\MySQL55\bin;C:\Program Files (x86)\ExchangeMapi\;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Skype\Phone\;C:\Program Files\TortoiseGit\bin;D:\GdPicture.NET 11\Redist;D:\GdPicture.NET 8\Redist;C:\Program Files\Microsoft SQL Server\120\Tools\Binn\;C:\Program Files\Microsoft SQL Server\130\Tools\Binn\;C:\Program Files\Git\cmd;D:\ANDROID\sdk\platform-tools;D:\GdPicture.NET 11\Redist [calling]
  1337. 1504.de8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee8870000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1338. 1504.de8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll
  1339. 1504.de8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000706460:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;D:\app\Michal\product\11.2.0\client_2\bin;D:\app\Michal\product\11.2.0\client_1\bin;C:\Program Files (x86)\CollabNet;C:\Program Files (x86)\Embarcadero\RAD Studio\9.0\bin;C:\Users\Public\Documents\RAD Studio\9.0\Bpl;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\TortoiseSVN\bin;C:\Program Files (x86)\MKVToolNix;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\VSShell\Common7\IDE\;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files (x86)\Microsoft SQL Server\100\DTS\Binn\;C:\Program Files (x86)\Developer Express.VCL\Library\RS16;C:\Program Files\Microsoft\Web Platform Installer\;C:\Program Files (x86)\Microsoft ASP.NET\ASP.NET Web Pages\v1.0\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\OpenVPN\bin;C:\Program Files (x86)\Sudowin\Clients\Console;D:\Zend\MySQL55\bin;C:\Program Files (x86)\ExchangeMapi\;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Skype\Phone\;C:\Program Files\TortoiseGit\bin;D:\GdPicture.NET 11\Redist;D:\GdPicture.NET 8\Redist;C:\Program Files\Microsoft SQL Server\120\Tools\Binn\;C:\Program Files\Microsoft SQL Server\130\Tools\Binn\;C:\Program Files\Git\cmd;D:\ANDROID\sdk\platform-tools;D:\GdPicture.NET 11\Redist [calling]
  1340. 1504.de8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee8870000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1341. 1504.de8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee8870000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1342. 1504.de8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee8870000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1343. 1504.de8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee8870000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1344. 1504.de8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee8870000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1345. 1504.de8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee8870000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1346. 1504.de8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee8870000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1347. 1504.de8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee8870000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1348. 1504.de8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll
  1349. 1504.de8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000706460:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;D:\app\Michal\product\11.2.0\client_2\bin;D:\app\Michal\product\11.2.0\client_1\bin;C:\Program Files (x86)\CollabNet;C:\Program Files (x86)\Embarcadero\RAD Studio\9.0\bin;C:\Users\Public\Documents\RAD Studio\9.0\Bpl;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\TortoiseSVN\bin;C:\Program Files (x86)\MKVToolNix;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\VSShell\Common7\IDE\;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files (x86)\Microsoft SQL Server\100\DTS\Binn\;C:\Program Files (x86)\Developer Express.VCL\Library\RS16;C:\Program Files\Microsoft\Web Platform Installer\;C:\Program Files (x86)\Microsoft ASP.NET\ASP.NET Web Pages\v1.0\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\OpenVPN\bin;C:\Program Files (x86)\Sudowin\Clients\Console;D:\Zend\MySQL55\bin;C:\Program Files (x86)\ExchangeMapi\;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Skype\Phone\;C:\Program Files\TortoiseGit\bin;D:\GdPicture.NET 11\Redist;D:\GdPicture.NET 8\Redist;C:\Program Files\Microsoft SQL Server\120\Tools\Binn\;C:\Program Files\Microsoft SQL Server\130\Tools\Binn\;C:\Program Files\Git\cmd;D:\ANDROID\sdk\platform-tools;D:\GdPicture.NET 11\Redist [calling]
  1350. 1504.de8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee8870000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1351. 1504.de8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee8870000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1352. 1504.de8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee8870000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1353. 1504.de8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee8870000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1354. 1504.de8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee8870000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1355. 1504.de8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee8870000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1356. 1504.de8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee8870000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1357. 1504.de8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee8870000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1358. 1504.de8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee8870000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1359. 1504.de8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee8870000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1360. 1504.de8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee8870000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1361. 1504.de8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee8870000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1362. 1504.de8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee8870000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1363. 1504.de8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee8870000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1364. 1504.de8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee8870000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1365. 1504.de8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee8870000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1366. 1504.de8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VBoxRT.dll
  1367. 1504.de8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VBoxRT.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=0000000000706460:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32;C:\Windows\system;C:\Windows;.;C:\ProgramData\Oracle\Java\javapath;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;D:\app\Michal\product\11.2.0\client_2\bin;D:\app\Michal\product\11.2.0\client_1\bin;C:\Program Files (x86)\CollabNet;C:\Program Files (x86)\Embarcadero\RAD Studio\9.0\bin;C:\Users\Public\Documents\RAD Studio\9.0\Bpl;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\TortoiseSVN\bin;C:\Program Files (x86)\MKVToolNix;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\VSShell\Common7\IDE\;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files (x86)\Microsoft SQL Server\100\DTS\Binn\;C:\Program Files (x86)\Developer Express.VCL\Library\RS16;C:\Program Files\Microsoft\Web Platform Installer\;C:\Program Files (x86)\Microsoft ASP.NET\ASP.NET Web Pages\v1.0\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files\OpenVPN\bin;C:\Program Files (x86)\Sudowin\Clients\Console;D:\Zend\MySQL55\bin;C:\Program Files (x86)\ExchangeMapi\;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Skype\Phone\;C:\Program Files\TortoiseGit\bin;D:\GdPicture.NET 11\Redist;D:\GdPicture.NET 8\Redist;C:\Program Files\Microsoft SQL Server\120\Tools\Binn\;C:\Program Files\Microsoft SQL Server\130\Tools\Binn\;C:\Program Files\Git\cmd;D:\ANDROID\sdk\platform-tools;D:\GdPicture.NET 11\Redist [calling]
  1368. 1504.de8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee8870000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1369. 1504.de8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee8870000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1370. 1504.de8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee8870000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1371. 1504.de8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee8870000 'C:\Program Files\Oracle\VirtualBox\VBoxRT.dll'
  1372. 1504.de8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\wintrust.dll
  1373. 1504.de8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\Wintrust.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000006bd690:C:\Windows\system32 [calling]
  1374. 1504.de8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefd0e0000 'C:\Windows\system32\Wintrust.dll'
  1375. 1504.de8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\crypt32.dll
  1376. 1504.de8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\crypt32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000006bd690:C:\Windows\system32 [calling]
  1377. 1504.de8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefcf40000 'C:\Windows\system32\crypt32.dll'
  1378. 1504.de8: SUPR3HardenedMain: Load TrustedMain...
  1379. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'opengl32.dll'.
  1380. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'vboxrt.dll'.
  1381. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'msvcp100.dll'.
  1382. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'msvcr100.dll'.
  1383. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'qt5corevbox.dll'.
  1384. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'qt5guivbox.dll'.
  1385. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'qt5widgetsvbox.dll'.
  1386. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'qt5printsupportvbox.dll'.
  1387. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'qt5openglvbox.dll'.
  1388. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'user32.dll'.
  1389. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #11 'advapi32.dll'.
  1390. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #12 'shell32.dll'.
  1391. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #13 'ole32.dll'.
  1392. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #14 'oleaut32.dll'.
  1393. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #15 'winmm.dll'.
  1394. 1504.de8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.dll) WinVerifyTrust
  1395. 1504.de8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.dll
  1396. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
  1397. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume2\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008]
  1398. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000454 pwszName=\Device\HarddiskVolume2\Windows\System32\winmm.dll
  1399. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000000747440
  1400. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000747440
  1401. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=82E2B2A7826F88BEB98FFF0540C9BDB0A12F001A
  1402. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\ntpe.cat'; file='\Device\HarddiskVolume2\Windows\System32\winmm.dll'
  1403. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
  1404. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'msvcrt.dll'.
  1405. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
  1406. 1504.de8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\winmm.dll) WinVerifyTrust
  1407. 1504.de8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\winmm.dll
  1408. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
  1409. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume2\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
  1410. 1504.de8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\oleaut32.dll
  1411. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
  1412. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
  1413. 1504.de8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ole32.dll
  1414. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
  1415. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume2\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
  1416. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: hFile=000000000000043c pwszName=\Device\HarddiskVolume2\Windows\System32\shell32.dll
  1417. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000000747440
  1418. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000747440
  1419. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=FCF00DB9BBECF4126AB4076577BBA73C0F94BDF9
  1420. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat'; file='\Device\HarddiskVolume2\Windows\System32\shell32.dll'
  1421. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
  1422. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1423. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #21 'shlwapi.dll'.
  1424. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #23 'user32.dll'.
  1425. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #24 'gdi32.dll'.
  1426. 1504.de8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\shell32.dll) WinVerifyTrust
  1427. 1504.de8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\shell32.dll
  1428. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
  1429. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
  1430. 1504.de8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll
  1431. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  1432. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  1433. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5openglvbox.dll'...
  1434. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5openglvbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5openglvbox.dll' [rcNtRedir=0xc0150008]
  1435. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'qt5widgetsvbox.dll'.
  1436. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'qt5guivbox.dll'.
  1437. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5corevbox.dll'.
  1438. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'msvcr100.dll'.
  1439. 1504.de8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll) WinVerifyTrust
  1440. 1504.de8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll
  1441. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5printsupportvbox.dll'...
  1442. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5printsupportvbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5printsupportvbox.dll' [rcNtRedir=0xc0150008]
  1443. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'gdi32.dll'.
  1444. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'.
  1445. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5widgetsvbox.dll'.
  1446. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'qt5guivbox.dll'.
  1447. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'qt5corevbox.dll'.
  1448. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'winspool.drv'.
  1449. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'comdlg32.dll'.
  1450. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'msvcr100.dll'.
  1451. 1504.de8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5PrintSupportVBox.dll) WinVerifyTrust
  1452. 1504.de8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5PrintSupportVBox.dll
  1453. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5widgetsvbox.dll'...
  1454. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5widgetsvbox.dll' [rcNtRedir=0xc0150008]
  1455. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'gdi32.dll'.
  1456. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'.
  1457. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'qt5guivbox.dll'.
  1458. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'qt5corevbox.dll'.
  1459. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'shell32.dll'.
  1460. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'msvcr100.dll'.
  1461. 1504.de8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll) WinVerifyTrust
  1462. 1504.de8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll
  1463. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
  1464. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
  1465. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'opengl32.dll'.
  1466. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'gdi32.dll'.
  1467. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'user32.dll'.
  1468. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'qt5corevbox.dll'.
  1469. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'msvcp100.dll'.
  1470. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'msvcr100.dll'.
  1471. 1504.de8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll) WinVerifyTrust
  1472. 1504.de8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll
  1473. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
  1474. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
  1475. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'user32.dll'.
  1476. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'shell32.dll'.
  1477. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'ole32.dll'.
  1478. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'advapi32.dll'.
  1479. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'ws2_32.dll'.
  1480. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'mpr.dll'.
  1481. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'msvcp100.dll'.
  1482. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'msvcr100.dll'.
  1483. 1504.de8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll) WinVerifyTrust
  1484. 1504.de8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll
  1485. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
  1486. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
  1487. 1504.de8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll
  1488. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
  1489. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
  1490. 1504.de8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll
  1491. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'vboxrt.dll'...
  1492. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'vboxrt.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\vboxrt.dll' [rcNtRedir=0xc0150008]
  1493. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
  1494. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume2\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008]
  1495. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000464 pwszName=\Device\HarddiskVolume2\Windows\System32\opengl32.dll
  1496. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000000747440
  1497. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000747440
  1498. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=608AC397FCC42B9FBAE25CB8C25EAF4C19AA384D
  1499. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\nt5.cat'; file='\Device\HarddiskVolume2\Windows\System32\opengl32.dll'
  1500. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
  1501. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1502. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'advapi32.dll'.
  1503. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'gdi32.dll'.
  1504. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'glu32.dll'.
  1505. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'ddraw.dll'.
  1506. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'user32.dll'.
  1507. 1504.de8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\opengl32.dll) WinVerifyTrust
  1508. 1504.de8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\opengl32.dll
  1509. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  1510. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  1511. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ddraw.dll'...
  1512. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'ddraw.dll' -> '\Device\HarddiskVolume2\Windows\System32\ddraw.dll' [rcNtRedir=0xc0150008]
  1513. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000470 pwszName=\Device\HarddiskVolume2\Windows\System32\ddraw.dll
  1514. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000000747440
  1515. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000747440
  1516. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=24C763EA54CD792A0F1618411061DC356EE31FF6
  1517. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\nt5.cat'; file='\Device\HarddiskVolume2\Windows\System32\ddraw.dll'
  1518. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
  1519. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1520. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
  1521. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'dciman32.dll'.
  1522. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'gdi32.dll'.
  1523. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'setupapi.dll'.
  1524. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'dwmapi.dll'.
  1525. 1504.de8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\ddraw.dll) WinVerifyTrust
  1526. 1504.de8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\ddraw.dll
  1527. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'glu32.dll'...
  1528. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'glu32.dll' -> '\Device\HarddiskVolume2\Windows\System32\glu32.dll' [rcNtRedir=0xc0150008]
  1529. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: hFile=000000000000042c pwszName=\Device\HarddiskVolume2\Windows\System32\glu32.dll
  1530. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000000747440
  1531. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000747440
  1532. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=60E45AB914E06A11F44EA76C6EF750AF892F9EA2
  1533. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\nt5.cat'; file='\Device\HarddiskVolume2\Windows\System32\glu32.dll'
  1534. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
  1535. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1536. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'opengl32.dll'.
  1537. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
  1538. 1504.de8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\glu32.dll) WinVerifyTrust
  1539. 1504.de8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\glu32.dll
  1540. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  1541. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  1542. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
  1543. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
  1544. 1504.de8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll
  1545. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1546. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1547. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
  1548. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
  1549. 1504.de8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll
  1550. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
  1551. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
  1552. 1504.de8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll
  1553. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'mpr.dll'...
  1554. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'mpr.dll' -> '\Device\HarddiskVolume2\Windows\System32\mpr.dll' [rcNtRedir=0xc0150008]
  1555. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: hFile=000000000000047c pwszName=\Device\HarddiskVolume2\Windows\System32\mpr.dll
  1556. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000000747440
  1557. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000747440
  1558. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=F84FE9BA047B24E7694C9E0C349B48B9FD5F925B
  1559. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\ntpe.cat'; file='\Device\HarddiskVolume2\Windows\System32\mpr.dll'
  1560. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
  1561. 1504.de8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\mpr.dll) WinVerifyTrust
  1562. 1504.de8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\mpr.dll
  1563. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ws2_32.dll'...
  1564. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'ws2_32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ws2_32.dll' [rcNtRedir=0xc0150008]
  1565. 1504.de8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ws2_32.dll
  1566. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
  1567. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
  1568. 1504.de8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll
  1569. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
  1570. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
  1571. 1504.de8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ole32.dll
  1572. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
  1573. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume2\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
  1574. 1504.de8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\shell32.dll
  1575. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  1576. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  1577. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
  1578. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
  1579. 1504.de8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll
  1580. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcp100.dll'...
  1581. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcp100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll' [rcNtRedir=0xc0150008]
  1582. 1504.de8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcp100.dll
  1583. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
  1584. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
  1585. 1504.de8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll
  1586. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  1587. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  1588. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  1589. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  1590. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
  1591. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume2\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008]
  1592. 1504.de8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\opengl32.dll
  1593. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
  1594. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
  1595. 1504.de8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll
  1596. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
  1597. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume2\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
  1598. 1504.de8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\shell32.dll
  1599. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
  1600. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
  1601. 1504.de8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll
  1602. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
  1603. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
  1604. 1504.de8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll
  1605. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  1606. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  1607. 1504.de8: supR3HardenedScreenImage/Imports: cache hit (Unknown Status -22900 (0xffffa68c)) on \Device\HarddiskVolume2\Windows\System32\user32.dll
  1608. 1504.de8: Error (rc=0):
  1609. 1504.de8: supR3HardenedScreenImage/Imports: cached rc=Unknown Status -22900 (0xffffa68c) fImage=1 fProtect=0x0 fAccess=0x0 cHits=16 \Device\HarddiskVolume2\Windows\System32\user32.dll
  1610. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  1611. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  1612. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
  1613. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
  1614. 1504.de8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll
  1615. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'comdlg32.dll'...
  1616. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'comdlg32.dll' -> '\Device\HarddiskVolume2\Windows\System32\comdlg32.dll' [rcNtRedir=0xc0150008]
  1617. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000474 pwszName=\Device\HarddiskVolume2\Windows\System32\comdlg32.dll
  1618. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000000747440
  1619. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000747440
  1620. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=66EE5BDFFA413AEA9E1FE7838A08646E94136DA5
  1621. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat'; file='\Device\HarddiskVolume2\Windows\System32\comdlg32.dll'
  1622. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
  1623. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1624. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'shlwapi.dll'.
  1625. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
  1626. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'gdi32.dll'.
  1627. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'comctl32.dll'.
  1628. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'shell32.dll'.
  1629. 1504.de8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\comdlg32.dll) WinVerifyTrust
  1630. 1504.de8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\comdlg32.dll
  1631. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winspool.drv'...
  1632. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'winspool.drv' -> '\Device\HarddiskVolume2\Windows\System32\winspool.drv' [rcNtRedir=0xc0150008]
  1633. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000480 pwszName=\Device\HarddiskVolume2\Windows\System32\winspool.drv
  1634. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000000747440
  1635. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000747440
  1636. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=C89A2ED7B99A056D78CA6BAC9CCAB8B1FF119A14
  1637. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat'; file='\Device\HarddiskVolume2\Windows\System32\winspool.drv'
  1638. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
  1639. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1640. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'gdi32.dll'.
  1641. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'user32.dll'.
  1642. 1504.de8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\winspool.drv) WinVerifyTrust
  1643. 1504.de8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\winspool.drv
  1644. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
  1645. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
  1646. 1504.de8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll
  1647. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
  1648. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
  1649. 1504.de8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll
  1650. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5widgetsvbox.dll'...
  1651. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5widgetsvbox.dll' [rcNtRedir=0xc0150008]
  1652. 1504.de8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll
  1653. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  1654. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  1655. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  1656. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  1657. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
  1658. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
  1659. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
  1660. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
  1661. 1504.de8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll
  1662. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
  1663. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
  1664. 1504.de8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll
  1665. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5widgetsvbox.dll'...
  1666. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5widgetsvbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5widgetsvbox.dll' [rcNtRedir=0xc0150008]
  1667. 1504.de8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll
  1668. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  1669. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  1670. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  1671. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  1672. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shlwapi.dll'...
  1673. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'shlwapi.dll' -> '\Device\HarddiskVolume2\Windows\System32\shlwapi.dll' [rcNtRedir=0xc0150008]
  1674. 1504.de8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\shlwapi.dll
  1675. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1676. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1677. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  1678. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  1679. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1680. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1681. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  1682. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  1683. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  1684. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  1685. 1504.de8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\gdi32.dll
  1686. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1687. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1688. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
  1689. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume2\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
  1690. 1504.de8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\shell32.dll
  1691. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'comctl32.dll'...
  1692. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'comctl32.dll' -> '\Device\HarddiskVolume2\Windows\System32\comctl32.dll' [rcNtRedir=0x0]
  1693. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000490 pwszName=\Device\HarddiskVolume2\Windows\System32\comctl32.dll
  1694. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000000747440
  1695. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000747440
  1696. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=4D3B2DA266DE92D9E1311E30C810160CDC5BD5AA
  1697. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat'; file='\Device\HarddiskVolume2\Windows\System32\comctl32.dll'
  1698. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
  1699. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'advapi32.dll'.
  1700. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'gdi32.dll'.
  1701. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'user32.dll'.
  1702. 1504.de8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\comctl32.dll) WinVerifyTrust
  1703. 1504.de8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\comctl32.dll
  1704. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  1705. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  1706. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  1707. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  1708. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shlwapi.dll'...
  1709. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'shlwapi.dll' -> '\Device\HarddiskVolume2\Windows\System32\shlwapi.dll' [rcNtRedir=0xc0150008]
  1710. 1504.de8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\shlwapi.dll
  1711. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1712. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1713. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  1714. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  1715. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'opengl32.dll'...
  1716. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'opengl32.dll' -> '\Device\HarddiskVolume2\Windows\System32\opengl32.dll' [rcNtRedir=0xc0150008]
  1717. 1504.de8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\opengl32.dll
  1718. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1719. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1720. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'dwmapi.dll'...
  1721. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'dwmapi.dll' -> '\Device\HarddiskVolume2\Windows\System32\dwmapi.dll' [rcNtRedir=0xc0150008]
  1722. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: hFile=000000000000049c pwszName=\Device\HarddiskVolume2\Windows\System32\dwmapi.dll
  1723. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000000747440
  1724. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000747440
  1725. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=B79EE7B5AD74EF51A849809202E043183A2C727E
  1726. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat'; file='\Device\HarddiskVolume2\Windows\System32\dwmapi.dll'
  1727. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
  1728. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1729. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'gdi32.dll'.
  1730. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'user32.dll'.
  1731. 1504.de8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\dwmapi.dll) WinVerifyTrust
  1732. 1504.de8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\dwmapi.dll
  1733. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'setupapi.dll'...
  1734. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'setupapi.dll' -> '\Device\HarddiskVolume2\Windows\System32\setupapi.dll' [rcNtRedir=0xc0150008]
  1735. 1504.de8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\setupapi.dll
  1736. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  1737. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  1738. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'dciman32.dll'...
  1739. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'dciman32.dll' -> '\Device\HarddiskVolume2\Windows\System32\dciman32.dll' [rcNtRedir=0xc0150008]
  1740. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: hFile=00000000000004a0 pwszName=\Device\HarddiskVolume2\Windows\System32\dciman32.dll
  1741. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000000747440
  1742. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000747440
  1743. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=D3FEC714D729F7CAEB9B7A25E2012B6A6E9007F5
  1744. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.cat'; file='\Device\HarddiskVolume2\Windows\System32\dciman32.dll'
  1745. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
  1746. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1747. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'gdi32.dll'.
  1748. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'user32.dll'.
  1749. 1504.de8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\dciman32.dll) WinVerifyTrust
  1750. 1504.de8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\dciman32.dll
  1751. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  1752. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  1753. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1754. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1755. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  1756. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  1757. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  1758. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  1759. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1760. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1761. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  1762. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  1763. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  1764. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  1765. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1766. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1767. 1504.de8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\msvcrt.dll
  1768. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  1769. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  1770. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  1771. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  1772. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
  1773. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
  1774. 1504.de8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\advapi32.dll
  1775. 1504.de8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\VirtualBox.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=000000000078b440:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
  1776. 1504.de8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.dll
  1777. 1504.de8: supR3HardenedDllNotificationCallback: load 000007fee7690000 LB 0x008e3000 C:\Program Files\Oracle\VirtualBox\VirtualBox.dll [fFlags=0x0]
  1778. 1504.de8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\VirtualBox.dll
  1779. 1504.de8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\opengl32.dll
  1780. 1504.de8: supR3HardenedDllNotificationCallback: load 000007feeb470000 LB 0x0011d000 C:\Windows\system32\OPENGL32.dll [fFlags=0x0]
  1781. 1504.de8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\opengl32.dll
  1782. 1504.de8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\glu32.dll
  1783. 1504.de8: supR3HardenedDllNotificationCallback: load 000007feed200000 LB 0x0002d000 C:\Windows\system32\GLU32.dll [fFlags=0x0]
  1784. 1504.de8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\glu32.dll
  1785. 1504.de8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ddraw.dll
  1786. 1504.de8: supR3HardenedDllNotificationCallback: load 000007feeb370000 LB 0x000f1000 C:\Windows\system32\DDRAW.dll [fFlags=0x0]
  1787. 1504.de8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ddraw.dll
  1788. 1504.de8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\dciman32.dll
  1789. 1504.de8: supR3HardenedDllNotificationCallback: load 000007feed1f0000 LB 0x00008000 C:\Windows\system32\DCIMAN32.dll [fFlags=0x0]
  1790. 1504.de8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\dciman32.dll
  1791. 1504.de8: supR3HardenedDllNotificationCallback: load 000007fefd420000 LB 0x001d7000 C:\Windows\system32\SETUPAPI.dll [fFlags=0x0]
  1792. 1504.de8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\setupapi.dll
  1793. 1504.de8: supR3HardenedDllNotificationCallback: load 000007fefcdc0000 LB 0x00036000 C:\Windows\system32\CFGMGR32.dll [fFlags=0x0]
  1794. 1504.de8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\cfgmgr32.dll
  1795. 1504.de8: supR3HardenedDllNotificationCallback: load 000007feff090000 LB 0x000d7000 C:\Windows\system32\OLEAUT32.dll [fFlags=0x0]
  1796. 1504.de8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\oleaut32.dll
  1797. 1504.de8: supR3HardenedDllNotificationCallback: load 000007fefe660000 LB 0x00203000 C:\Windows\system32\ole32.dll [fFlags=0x0]
  1798. 1504.de8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ole32.dll
  1799. 1504.de8: supR3HardenedDllNotificationCallback: load 000007fefd0b0000 LB 0x0001a000 C:\Windows\system32\DEVOBJ.dll [fFlags=0x0]
  1800. 1504.de8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\devobj.dll
  1801. 1504.de8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\dwmapi.dll
  1802. 1504.de8: supR3HardenedDllNotificationCallback: load 000007fefaeb0000 LB 0x00018000 C:\Windows\system32\dwmapi.dll [fFlags=0x0]
  1803. 1504.de8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\dwmapi.dll
  1804. 1504.de8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll
  1805. 1504.de8: supR3HardenedDllNotificationCallback: load 000000006d7d0000 LB 0x00553000 C:\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll [fFlags=0x0]
  1806. 1504.de8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll
  1807. 1504.de8: supR3HardenedDllNotificationCallback: load 000007fefd8d0000 LB 0x00d88000 C:\Windows\system32\SHELL32.dll [fFlags=0x0]
  1808. 1504.de8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\shell32.dll
  1809. 1504.de8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\mpr.dll
  1810. 1504.de8: supR3HardenedDllNotificationCallback: load 000007fef7a20000 LB 0x00018000 C:\Windows\system32\MPR.dll [fFlags=0x0]
  1811. 1504.de8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\mpr.dll
  1812. 1504.de8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll
  1813. 1504.de8: supR3HardenedDllNotificationCallback: load 000007fee82c0000 LB 0x005a1000 C:\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll [fFlags=0x0]
  1814. 1504.de8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll
  1815. 1504.de8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll
  1816. 1504.de8: supR3HardenedDllNotificationCallback: load 000000006fea0000 LB 0x0054f000 C:\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll [fFlags=0x0]
  1817. 1504.de8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5WidgetsVBox.dll
  1818. 1504.de8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5PrintSupportVBox.dll
  1819. 1504.de8: supR3HardenedDllNotificationCallback: load 000007feec880000 LB 0x00051000 C:\Program Files\Oracle\VirtualBox\Qt5PrintSupportVBox.dll [fFlags=0x0]
  1820. 1504.de8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5PrintSupportVBox.dll
  1821. 1504.de8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\winspool.drv
  1822. 1504.de8: supR3HardenedDllNotificationCallback: load 000007fefb0b0000 LB 0x00071000 C:\Windows\system32\WINSPOOL.DRV [fFlags=0x0]
  1823. 1504.de8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\winspool.drv
  1824. 1504.de8: supR3HardenedDllNotificationCallback: load 000007fefed30000 LB 0x00097000 C:\Windows\system32\COMDLG32.dll [fFlags=0x0]
  1825. 1504.de8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\comdlg32.dll
  1826. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'advapi32.dll'.
  1827. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'gdi32.dll'.
  1828. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'user32.dll'.
  1829. 1504.de8: supHardenedWinVerifyImageByHandle: -> 22900 (\Device\HarddiskVolume2\Windows\winsxs\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_a4d6a923711520a9\comctl32.dll)
  1830. 1504.de8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\winsxs\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_a4d6a923711520a9\comctl32.dll
  1831. 1504.de8: supR3HardenedDllNotificationCallback: load 000007fef9860000 LB 0x000a0000 C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_a4d6a923711520a9\COMCTL32.dll [fFlags=0x0]
  1832. 1504.de8: supR3HardenedScreenImage/LdrLoadDll: cache hit (Unknown Status 22900 (0x5974)) on \Device\HarddiskVolume2\Windows\winsxs\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_a4d6a923711520a9\comctl32.dll [avoiding WinVerifyTrust]
  1833. 1504.de8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll
  1834. 1504.de8: supR3HardenedDllNotificationCallback: load 0000000072cf0000 LB 0x00054000 C:\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll [fFlags=0x0]
  1835. 1504.de8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5OpenGLVBox.dll
  1836. 1504.de8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\winmm.dll
  1837. 1504.de8: supR3HardenedDllNotificationCallback: load 000007fefab20000 LB 0x0003b000 C:\Windows\system32\WINMM.dll [fFlags=0x0]
  1838. 1504.de8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\winmm.dll
  1839. 1504.de8: Detected loader lock ownership: rc=Unknown Status 22900 (0x5974) '\Device\HarddiskVolume2\Windows\winsxs\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_a4d6a923711520a9\comctl32.dll'.
  1840. 1504.de8: supR3HardenedWinVerifyCacheProcessWvtTodos: 22900 (was 22900) fWinVerifyTrust=0 for '\Device\HarddiskVolume2\Windows\winsxs\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_a4d6a923711520a9\comctl32.dll' [rescheduled]
  1841. 1504.de8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\imm32.dll
  1842. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  1843. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  1844. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  1845. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  1846. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
  1847. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
  1848. 1504.de8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\imm32.dll (Input=imm32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=000000000078b4d0:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
  1849. 1504.de8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefe870000 'C:\Windows\system32\imm32.dll'
  1850. 1504.de8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefe8b0000 'C:\Windows\system32\ADVAPI32.DLL'
  1851. 1504.de8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\cryptbase.dll
  1852. 1504.de8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\cryptbase.dll (Input=cryptbase.dll, rcNtResolve=0xc0150008) *pfFlags=0xffffffff pwszSearchPath=0000000000000000:<flags> [calling]
  1853. 1504.de8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefcc20000 'C:\Windows\system32\cryptbase.dll'
  1854. 1504.de8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee7690000 'C:\Program Files\Oracle\VirtualBox\VirtualBox.dll'
  1855. 1504.de8: SUPR3HardenedMain: Calling TrustedMain (000007fee7691610)...
  1856. 1504.de8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ole32.dll
  1857. 1504.de8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\ole32.dll (Input=ole32.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=000000000078b440:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
  1858. 1504.de8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefe660000 'C:\Windows\system32\ole32.dll'
  1859. 1504.de8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefe8b0000 'C:\Windows\system32\ADVAPI32.dll'
  1860. 1504.de8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\shell32.dll
  1861. 1504.de8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\shell32.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=000000000078b440:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
  1862. 1504.de8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefd8d0000 'C:\Windows\system32\shell32.dll'
  1863. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'ole32.dll'.
  1864. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #1 'imm32.dll'.
  1865. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #2 'winmm.dll'.
  1866. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #3 'oleaut32.dll'.
  1867. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #4 'shell32.dll'.
  1868. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #5 'advapi32.dll'.
  1869. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'gdi32.dll'.
  1870. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'user32.dll'.
  1871. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #8 'qt5guivbox.dll'.
  1872. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #9 'qt5corevbox.dll'.
  1873. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #10 'msvcr100.dll'.
  1874. 1504.de8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\platforms\qwindows.dll) WinVerifyTrust
  1875. 1504.de8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\platforms\qwindows.dll
  1876. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcr100.dll'...
  1877. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcr100.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\msvcr100.dll' [rcNtRedir=0xc0150008]
  1878. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5corevbox.dll'...
  1879. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5corevbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5corevbox.dll' [rcNtRedir=0xc0150008]
  1880. 1504.de8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5CoreVBox.dll
  1881. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'qt5guivbox.dll'...
  1882. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'qt5guivbox.dll' -> '\Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\qt5guivbox.dll' [rcNtRedir=0xc0150008]
  1883. 1504.de8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\Qt5GuiVBox.dll
  1884. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  1885. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  1886. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  1887. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  1888. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'advapi32.dll'...
  1889. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'advapi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\advapi32.dll' [rcNtRedir=0xc0150008]
  1890. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'shell32.dll'...
  1891. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'shell32.dll' -> '\Device\HarddiskVolume2\Windows\System32\shell32.dll' [rcNtRedir=0xc0150008]
  1892. 1504.de8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\shell32.dll
  1893. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'oleaut32.dll'...
  1894. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'oleaut32.dll' -> '\Device\HarddiskVolume2\Windows\System32\oleaut32.dll' [rcNtRedir=0xc0150008]
  1895. 1504.de8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\oleaut32.dll
  1896. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'winmm.dll'...
  1897. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'winmm.dll' -> '\Device\HarddiskVolume2\Windows\System32\winmm.dll' [rcNtRedir=0xc0150008]
  1898. 1504.de8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\winmm.dll
  1899. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'imm32.dll'...
  1900. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'imm32.dll' -> '\Device\HarddiskVolume2\Windows\System32\imm32.dll' [rcNtRedir=0xc0150008]
  1901. 1504.de8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\imm32.dll
  1902. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'ole32.dll'...
  1903. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'ole32.dll' -> '\Device\HarddiskVolume2\Windows\System32\ole32.dll' [rcNtRedir=0xc0150008]
  1904. 1504.de8: supR3HardenedScreenImage/Imports: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\ole32.dll
  1905. 1504.de8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Program Files\Oracle\VirtualBox\platforms\qwindows.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=000000000078b440:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
  1906. 1504.de8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\platforms\qwindows.dll
  1907. 1504.de8: supR3HardenedDllNotificationCallback: load 000007fee97e0000 LB 0x00127000 C:\Program Files\Oracle\VirtualBox\platforms\qwindows.dll [fFlags=0x0]
  1908. 1504.de8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Program Files\Oracle\VirtualBox\platforms\qwindows.dll
  1909. 1504.de8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fee97e0000 'C:\Program Files\Oracle\VirtualBox\platforms\qwindows.dll'
  1910. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: hFile=0000000000000538 pwszName=\Device\HarddiskVolume2\Windows\System32\uxtheme.dll
  1911. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: Cached context 0000000000747440
  1912. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: hCatAdmin=0000000000747440
  1913. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: cbHash=20 wszDigest=936D45CC7026757A151F62882B557DD75D5FCB21
  1914. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile: WinVerifyTrust => 0x0; cat='C:\Windows\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\ntpe.cat'; file='\Device\HarddiskVolume2\Windows\System32\uxtheme.dll'
  1915. 1504.de8: supR3HardNtViCallWinVerifyTrustCatFile -> 0 (org 22900)
  1916. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #0 'msvcrt.dll'.
  1917. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #6 'user32.dll'.
  1918. 1504.de8: supR3HardenedWinVerifyCacheScheduleImports: Import todo: #7 'gdi32.dll'.
  1919. 1504.de8: supHardenedWinVerifyImageByHandle: -> 0 (\Device\HarddiskVolume2\Windows\System32\uxtheme.dll) WinVerifyTrust
  1920. 1504.de8: supR3HardenedWinVerifyCacheInsert: \Device\HarddiskVolume2\Windows\System32\uxtheme.dll
  1921. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'gdi32.dll'...
  1922. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'gdi32.dll' -> '\Device\HarddiskVolume2\Windows\System32\gdi32.dll' [rcNtRedir=0xc0150008]
  1923. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'user32.dll'...
  1924. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'user32.dll' -> '\Device\HarddiskVolume2\Windows\System32\user32.dll' [rcNtRedir=0xc0150008]
  1925. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: Processing 'msvcrt.dll'...
  1926. 1504.de8: supR3HardenedWinVerifyCacheProcessImportTodos: 'msvcrt.dll' -> '\Device\HarddiskVolume2\Windows\System32\msvcrt.dll' [rcNtRedir=0xc0150008]
  1927. 1504.de8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\uxtheme.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000006efb90:C:\Windows\system32;C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
  1928. 1504.de8: supR3HardenedScreenImage/NtCreateSection: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\uxtheme.dll
  1929. 1504.de8: supR3HardenedDllNotificationCallback: load 000007fefb580000 LB 0x00056000 C:\Windows\system32\uxtheme.dll [fFlags=0x0]
  1930. 1504.de8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\uxtheme.dll
  1931. 1504.de8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefb580000 'C:\Windows\system32\uxtheme.dll'
  1932. 1504.de8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\uxtheme.dll
  1933. 1504.de8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\uxtheme.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000006efb90:C:\Windows\system32;C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
  1934. 1504.de8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefb580000 'C:\Windows\system32\uxtheme.dll'
  1935. 1504.de8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\uxtheme.dll
  1936. 1504.de8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\uxtheme.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000006efae0:C:\Windows\system32;C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
  1937. 1504.de8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefb580000 'C:\Windows\system32\uxtheme.dll'
  1938. 1504.de8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\uxtheme.dll
  1939. 1504.de8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\uxtheme.dll (rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=00000000006efae0:C:\Windows\system32;C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
  1940. 1504.de8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefb580000 'C:\Windows\system32\uxtheme.dll'
  1941. 1504.de8: supR3HardenedScreenImage/LdrLoadDll: cache hit (VINF_SUCCESS) on \Device\HarddiskVolume2\Windows\System32\cryptbase.dll
  1942. 1504.de8: supR3HardenedMonitor_LdrLoadDll: pName=C:\Windows\system32\CRYPTBASE.dll (Input=CRYPTBASE.dll, rcNtResolve=0xc0150008) *pfFlags=0x0 pwszSearchPath=000000000078b440:C:\Program Files\Oracle\VirtualBox;C:\Windows\system32 [calling]
  1943. 1504.de8: supR3HardenedMonitor_LdrLoadDll: returns rcNt=0x0 hMod=000007fefcc20000 'C:\Windows\system32\CRYPTBASE.dll'
  1944. ce4.588: supR3HardNtChildWaitFor[2]: Quitting: ExitCode=0x1 (rcNtWait=0x0, rcNt1=0x0, rcNt2=0x103, rcNt3=0x103, 853 ms, the end);
  1945. fac.d94: supR3HardNtChildWaitFor[1]: Quitting: ExitCode=0x1 (rcNtWait=0x0, rcNt1=0x0, rcNt2=0x103, rcNt3=0x103, 1172 ms, the end);
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!